{"report_id":"b95c30b8-48ff-4ad9-97b1-f4f0d95c2238","version":6,"status":"done","tags":[],"date":"2026-05-03T13:46:08Z","url":{"schema":"https","addr":"cataz.my/","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":0,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"final":{"url":{"schema":"https","addr":"cataz.my/","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"title":"(1) New Message!","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cataz.my/","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":0,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-07T13:46:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":20}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cataz.my","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wg.olarodwood.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wg.olarodwood.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wg.olarodwood.com","ip":{"addr":"172.255.106.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-04-22","domain_rank":0,"first_seen":"2026-05-03T13:46:10.772026Z","last_seen":"2026-05-03T13:46:10.772026Z","alert_count":2,"request_count":1,"received_data":1414,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"victoriousmansion.com","ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2026-02-26","domain_rank":0,"first_seen":"2026-03-25T15:37:25.197342Z","last_seen":"2026-04-19T15:46:05.914451Z","alert_count":0,"request_count":2,"received_data":195506,"sent_data":894,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-04-27T02:24:54.787161Z","alert_count":0,"request_count":1,"received_data":1802,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kettledroopingcontinuation.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":196057,"first_seen":"2025-07-30T15:18:19.355595Z","last_seen":"2026-04-30T14:34:03.513143Z","alert_count":18,"request_count":6,"received_data":217315,"sent_data":6983,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"image.tmdb.org","ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2009-09-15","domain_rank":53077,"first_seen":"2021-01-09T06:43:03Z","last_seen":"2026-04-30T04:12:23.283916Z","alert_count":0,"request_count":49,"received_data":1552430,"sent_data":22393,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2026-04-30T10:40:07.827721Z","alert_count":6,"request_count":3,"received_data":257868,"sent_data":1218,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.nightdestruct.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-30","domain_rank":0,"first_seen":"2026-03-30T18:41:21.656654Z","last_seen":"2026-04-27T21:04:33.759813Z","alert_count":0,"request_count":8,"received_data":257481,"sent_data":3670,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wayfarerorthodox.com","ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-08-08T11:06:50.216151Z","last_seen":"2026-05-01T11:00:58.799244Z","alert_count":20,"request_count":10,"received_data":14731,"sent_data":8919,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2026-05-01T00:53:34.616312Z","alert_count":0,"request_count":3,"received_data":163500,"sent_data":1385,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cataz.my","ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-03T13:46:10.767349Z","last_seen":"2026-05-03T13:46:10.767349Z","alert_count":20,"request_count":20,"received_data":806104,"sent_data":9949,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]},{"name":"Yoast SEO:27.4","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Yoast SEO Premium:18.0","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-26T22:20:29.825994Z","alert_count":0,"request_count":2,"received_data":19338,"sent_data":878,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"3.120.155.52","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-04-29T21:12:11.35333Z","alert_count":0,"request_count":1,"received_data":688,"sent_data":432,"comment":"","tags":null,"fingerprints":null},{"fqdn":"m.media-amazon.com","ip":{"addr":"23.36.77.129","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2016-08-18","domain_rank":3022,"first_seen":"2017-01-30T05:27:40Z","last_seen":"2026-04-30T02:16:50.803908Z","alert_count":0,"request_count":3,"received_data":95127,"sent_data":1544,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-26T22:16:47.246638Z","alert_count":0,"request_count":3,"received_data":106129,"sent_data":1614,"comment":"","tags":null,"fingerprints":null},{"fqdn":"undefined","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2020-01-28T19:52:40Z","last_seen":"2026-05-02T12:10:41.138933Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":435,"comment":"","tags":null,"fingerprints":null},{"fqdn":"realizationnewestfangs.com","ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-02T06:26:57.543488Z","last_seen":"2026-05-01T14:32:31.550386Z","alert_count":7,"request_count":7,"received_data":218110,"sent_data":7463,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2026-04-30T11:37:55.11212Z","alert_count":6,"request_count":2,"received_data":4201,"sent_data":964,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2026-04-30T10:40:07.857935Z","alert_count":4,"request_count":2,"received_data":1060,"sent_data":1520,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"skinnycrawlinglax.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":38609,"first_seen":"2025-07-09T22:28:05.771371Z","last_seen":"2026-04-30T12:49:09.989707Z","alert_count":16,"request_count":4,"received_data":9946,"sent_data":4559,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"sensibleexterminatorprivate.com","ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2026-02-07","domain_rank":0,"first_seen":"2026-02-11T22:57:40.343367Z","last_seen":"2026-04-28T10:42:34.643962Z","alert_count":0,"request_count":2,"received_data":104072,"sent_data":910,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"32e101b77418d5f607abe751d0ae20fc","sha1":"88a81ffc6459cd5b9cd2b650d631ddc435faf7e6","sha256":"00a2b92c2d90078adc02b62219e16e1f0fc7eae35cd3adb75ddca77946521db2","sha512":"56232f4acf634110ced492ddcecf03a06eea9a327d5a8a347b12cce29720dc93bd8636407426df7c44b6047eefebd1e9593244d013c5c5516935401163453519","ssdeep":"","tlshash":"eec08cc86e65b8de7b3a388d1b8a038348f107efb622d40866107000a0fa3bb0440880","size":145,"data":"","first_seen":"2026-05-03T13:46:18.490955Z","last_seen":"2026-05-03T13:46:18.490955Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-16T13:31:33.505891Z","times_seen":26647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"introduction_type":"scriptElement","is_inline":true,"md5":"57ca3a8e06583ddf12e138b144a4bea9","sha1":"cffa73520eb36c188e4b7348296bd2536f7991cf","sha256":"7c21de12893ecdfce35c16f78dfcc5fb67157ba8488d525b5f6ec80529c2235d","sha512":"d1f11a7965bfa8bd11a56df3e6775fdef527ed8ad4d71a8da08ca6911dde24ad06a11c14ba11857a488331ab02b4f945aa222bf111e9f0efdb106953b65bf860","ssdeep":"","tlshash":"c4c08cfe1057f2882066c86b089ca20151348eab6d0964313bc070000fdca9e84f6bb9","size":151,"data":"","first_seen":"2026-05-03T13:46:18.491815Z","last_seen":"2026-05-03T13:46:18.491815Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"introduction_type":"scriptElement","is_inline":true,"md5":"57ca3a8e06583ddf12e138b144a4bea9","sha1":"cffa73520eb36c188e4b7348296bd2536f7991cf","sha256":"7c21de12893ecdfce35c16f78dfcc5fb67157ba8488d525b5f6ec80529c2235d","sha512":"d1f11a7965bfa8bd11a56df3e6775fdef527ed8ad4d71a8da08ca6911dde24ad06a11c14ba11857a488331ab02b4f945aa222bf111e9f0efdb106953b65bf860","ssdeep":"","tlshash":"c4c08cfe1057f2882066c86b089ca20151348eab6d0964313bc070000fdca9e84f6bb9","size":151,"data":"","first_seen":"2026-05-03T13:46:18.491815Z","last_seen":"2026-05-03T13:46:18.491815Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-16T13:53:02.562153Z","times_seen":311462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-16T13:31:33.505891Z","times_seen":26647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sensibleexterminatorprivate.com/e374e32a8cd336033ad180d1424bb687/invoke.js","fqdn":"sensibleexterminatorprivate.com","domain":"sensibleexterminatorprivate.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"435c686c3c07d1de2ac2f974e474f35b","sha1":"008157fa54d2e120f78273c1c04d0bf9d1189bd3","sha256":"7036e1d5fa1f544094dbfd25efd5b1b8d021f5d897860df47ced03924e786992","sha512":"633ce459b8d5b766801882e4efbe74bc583157f54c8882047b5a85b47659542267b4317c9b46dc3c1079c864eae44f642d43147299b1cf448285ce346def92ee","ssdeep":"768:U17hxeE6mHp9GzuNWlpBCHpDBRKO8doFtXj9H6sgT:gxeE6mHp9zA7BCHpDBcV+fz9H6sS","tlshash":"7a3317887fb1b07503b67473622f9046f25c0d0956ecd8dcd087a8a87ea87e9d1b7b25","size":51185,"data":"","first_seen":"2026-05-03T13:46:18.48868Z","last_seen":"2026-05-03T13:46:18.48868Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/0d/21/87/0d2187f588b93badfed924aa0d084bde.js","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab6c36f87d4fca06e4790da97d654a6a","sha1":"e27ace5c223b9537d6560b5adaeab0efeb0f56eb","sha256":"932b428d283806b032856103ad24fd064d5a283aa59fc8cffff1bda9136850c9","sha512":"f4f76bf599e7d67be2ef4172fd4bd7436b4055f314169a0a05baf02a6a3b0475b428b44db6331178a0ab80c06c3336f3e02b623aa5b9533c084629bee21e84af","ssdeep":"1536:2l2eABAdWrl7QJWX8jlvjwZ1PTz5Ysk5qMUPK44K:2dSAkrdQJoYlLwrBFkhk","tlshash":"2993c78c7f92f0f5039a24b3232fac16f2ab1d5124fce444d903a8e5ae25319d57ad6c","size":92484,"data":"","first_seen":"2026-05-03T13:46:18.446284Z","last_seen":"2026-05-03T13:46:18.446284Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"4c2157e366ee0b899b59894b2e34b709","sha1":"75e6661cc2aef7db74e51b198bd70e899a615cc9","sha256":"dfb95fc8fb80fe911efbd13b66c38aef712e6a0508a66d65888a263aa0b47f11","sha512":"8ef6de92f9b983eec30be783c867950098182565afe56596ab4cfa461855bf3a1fa0ad4876088362941f40bac60a090ae94535d58585fa8a0a694098126af622","ssdeep":"","tlshash":"1831dcff142a5022092f92e1188fe3591c35ed8a5540b1c034308bdbb9566db25799cc","size":1556,"data":"","first_seen":"2026-05-03T13:46:18.492666Z","last_seen":"2026-05-03T13:46:18.492666Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a141d4cc0ea62b7e58f726a49c7b649e","sha1":"ca9a28b3d7e06f192f20989c96c710bd243d512e","sha256":"42554c0284cc374e33e51ba1c2980fad64bd7600955788facf38b137a1668c80","sha512":"148f99f86db9534dc360f8b266d2d648f7554e616703ff93c369a32f2540eb4d3fad86b449b34e9c19e0805d1aa38dd2cf00412d5569df4fb92a018f70fbbfe4","ssdeep":"96:ctGAdiByQnKauwtTMpX8TxnOgV27JBrHVtH41:c4fycnsgUDpl41","tlshash":"8db1858c3f81f2d407b270af2f2f1509f16d5c20ba89d498d01b95d03e5862adaa7f71","size":5146,"data":"","first_seen":"2026-04-30T15:37:40.418293Z","last_seen":"2026-05-04T13:42:54.864213Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"32e101b77418d5f607abe751d0ae20fc","sha1":"88a81ffc6459cd5b9cd2b650d631ddc435faf7e6","sha256":"00a2b92c2d90078adc02b62219e16e1f0fc7eae35cd3adb75ddca77946521db2","sha512":"56232f4acf634110ced492ddcecf03a06eea9a327d5a8a347b12cce29720dc93bd8636407426df7c44b6047eefebd1e9593244d013c5c5516935401163453519","ssdeep":"","tlshash":"eec08cc86e65b8de7b3a388d1b8a038348f107efb622d40866107000a0fa3bb0440880","size":145,"data":"","first_seen":"2026-05-03T13:46:18.490955Z","last_seen":"2026-05-03T13:46:18.490955Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"835af8fe41c8d25248407645d92ef4b8","sha1":"68760b1332771f55a5086fd3bffdc3308e7c9732","sha256":"eb2ef8322808cec5f240b14bd6e778301e9fbb4eebfc7bdf13110d303ee08022","sha512":"e249c4f16903e1d15d08fe6d6fcce6ef6890f90cea1af5f2d65faa67e2b17bbc9177160a9e3cd09dd8e08db203acf6eab202035792859a7e318e58522587341c","ssdeep":"","tlshash":"342195fe4026802511174590588e956a0d312c6ef540b18030308eebfad36e67a656ec","size":1286,"data":"","first_seen":"2026-05-03T13:46:18.493696Z","last_seen":"2026-05-03T13:46:18.493696Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"704a61ab6a6a37955674806ae9eccf51","sha1":"8e76f40d080fd91eed1ddc9495635e2bbcf9b921","sha256":"1dfee509381ae7b74bba927851ddaba63433f100e69095eae16d8816477e1ca0","sha512":"261459cc1570054cac1227d589a4f5ecd24c0e545f49ba447a507e87eb3f954616749ec4a187446cec7708ab3314c9780203078d5e3fd69498deb00fabb3e3fb","ssdeep":"96:fh9+mG6/oz9d9GbopZhTe54E6dk/obopZhTe54Ei1jDANcNCCfMEDaH:59xG6gz4boDhTe54bdkQboDhTe54dvkv","tlshash":"f191f9ef2dd51c793aa2145eaa69260e08a3c60f0401fe49f84cb2603f707f84e7de64","size":4319,"data":"","first_seen":"2026-05-03T13:46:18.49468Z","last_seen":"2026-05-03T13:46:18.49468Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"aed4d3494a4e1695ec058ef204f1be32","sha1":"123abc652067a3971115246dabb1479f569d7642","sha256":"5c5b54e35a6bbca805f4400c0bfb6c10e9ecba009642fcf722da246057bb3011","sha512":"e150b37ca5d652f7c97abc651536c20a05b446124d4f9cd3399e776b20de6d005b0f2135ac4b9711de7ec8662de66ed52128ef981e46a1585e9745b935c17a38","ssdeep":"","tlshash":"4e21c8df25821c792ba10c48eb65164f48e78f1e94527a89c84c71b03fb11b64e2da74","size":1282,"data":"","first_seen":"2026-05-03T13:46:18.495757Z","last_seen":"2026-05-03T13:46:18.495757Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wg.olarodwood.com/rPBZgKZe0rgSiBH4D/111151","fqdn":"wg.olarodwood.com","domain":"olarodwood.com","tld":"com"},"ip":{"addr":"172.255.106.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","size":5,"data":"","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-08-16T13:45:34.173638Z","times_seen":20551,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"victoriousmansion.com/bd/04/96/bd04966fff9d34711df560739f10f294.js","fqdn":"victoriousmansion.com","domain":"victoriousmansion.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c6078b53c99245a8ea43377342d8a79","sha1":"edc400bd6512723da18d017651f0517c75cac4af","sha256":"2d9141bd684636a1888034d6108402ef4ef541b27492a725122a9263e3e5da4a","sha512":"24c893fe94c024aabdbf09b019cb3099b807781ef8d9f512cb15c5e0e569044b2b2ae1d4d6f9768158246f3339aa96bce10557eac79e1d53f50526666149adc3","ssdeep":"1536:8G6g/qn/325q6EWa8oN39IRnG1VDcN6CwkMDCF9q+Flxx8A9:vIeZB0mdc5cSgq8","tlshash":"0093e8c8bf80f16443f26836222f501ff0a90c5552ddd18de9a2b8af7fb9b48e635594","size":96908,"data":"","first_seen":"2026-05-03T13:46:18.442361Z","last_seen":"2026-05-03T13:46:18.442361Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sensibleexterminatorprivate.com/e374e32a8cd336033ad180d1424bb687/invoke.js","fqdn":"sensibleexterminatorprivate.com","domain":"sensibleexterminatorprivate.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab4c0cd3026680934ce30e3fd8b63e7b","sha1":"9e5ee8c3c7f4cd34ea8c6d359cbe616cda242374","sha256":"20e8358043a7508f9bf72094035b743d2ccaa3f210bd573a9c77cb3fad64468d","sha512":"8aeb4d04a40e882c5484a0db298636f2581c9245b005dfabbd32a0285fdfb004b56c6522483b8b14604fdafd9f1783f2b29e1c502ca69b55a04eac97da3946b2","ssdeep":"768:U17O2e76mHp9GzuNWlpBCHpDBRKO8doFtXj9H6sgT:D2e76mHp9zA7BCHpDBcV+fz9H6sS","tlshash":"283317887fa1b07503b67473622f9046f25c0d0956ecd8dcd087a8a87ea87e9d1b7b25","size":51173,"data":"","first_seen":"2026-05-03T13:46:18.427165Z","last_seen":"2026-05-03T13:46:18.427165Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-includes/js/wp-embed.min.js","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f9c93eca3f761e9a87c735cf3a24a39","sha1":"4b7cdf3690ba5126bacfba15dac67da45b3c8664","sha256":"51f2cdd4f7e97288a74d803275b0550ec9eb938210ad5ab7fb1409548acf7554","sha512":"c2a46755dc04fa4127df222e34066b047e42906eee70373b632a1f4a4e205fd7e5bf8646b9f4ffbe9fe9d0cd8a880f7f861c0a1bfd55cdfa4bff3537d8e2fb3e","ssdeep":"","tlshash":"ae2132ae3235dc7e817741d3bc8570c381b14eb96c5520e29c2d9886fae4ec7d66abc1","size":1251,"data":"","first_seen":"2023-11-08T07:22:35Z","last_seen":"2026-08-16T04:48:57.598764Z","times_seen":2668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"2587162d72443f732bda33eb84bb7db5","sha1":"5686773f259c01551eee9ec7bf719f6056ee4fb8","sha256":"eadfef367b28e9fe379c1dd732609f0ee1cbd0bfb12d7604eac8187c2de114be","sha512":"ddb5a1d320d49ac57d596aef129d920886cc3088ee6e5640d4565265aaeea03694af75ceb80117583eeabffb94b337e07ff116524f543b91bbb97ff5861e444f","ssdeep":"","tlshash":"0431c8df789a2c311ea6585ae649238e0cabce4e08817bc9d80427603a744fa5a3dd55","size":1552,"data":"","first_seen":"2026-05-03T13:46:18.49679Z","last_seen":"2026-05-03T13:46:18.49679Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6dff666f172bd6564d2dcf8a8b92110","sha1":"19688e910314c9cdae869c7b2871c6b3fb0abf40","sha256":"6c0610f7b27d0aedcf4b863c0c08ad4de452b95703e67cc3fe942d226c65f8a9","sha512":"1903d9a6635df8099fa8137fc9e870a9298723bd149f23c4a2129a30e0fbb162c90ec90d66a2fe1549cd0c9f68ac51b4c1d0672dddfd367d358a7159525d7527","ssdeep":"","tlshash":"3e212c1a253443f1df52f0b769895ac4f62a0287a44d571e721f068c0ee4f6623bdda9","size":1276,"data":"","first_seen":"2026-05-03T13:46:18.497711Z","last_seen":"2026-05-03T13:46:18.497711Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"victoriousmansion.com/bd/04/96/bd04966fff9d34711df560739f10f294.js","fqdn":"victoriousmansion.com","domain":"victoriousmansion.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"988b9619acc7d6922e86a3c544de9496","sha1":"b6d52c2f6d68be4350eefa546d37f40bf415fefd","sha256":"fffb2c4f5a27eaa4d43627942bc7cf624ed5949e0bf0b860efcb6939620a624a","sha512":"cb187cb2873e55a4da87f54c0351cb8bbf997d0c8efbc1c9f0dbbe2c6b51ad4194f8140a73bd790c5e5288b466a024e95edba9939de15e9946556c6fbf4e0e3e","ssdeep":"1536:8G6g/qn/325q6EWa8oN39IRnG1VDcN6CwkMDCF9q+FIxx8M9:vIeZB0mdc5cSgqb","tlshash":"0c93e8c8bf80f16443f26836222f501ff0a90c5552dcd18de9a2b8af7fb9b48e635594","size":96904,"data":"","first_seen":"2026-05-03T13:46:18.381492Z","last_seen":"2026-05-03T13:46:18.381492Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-content/themes/Avada/js/simplebar.min.js","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b00606678903dd843bbb22bb0d05303","sha1":"0a3c74bc107192526a737274fcf0a52b8240fd94","sha256":"5ee81c8a7fdaea2a0c8342316074a622a9eee6a1ea211c14b6e09550e3be3ec8","sha512":"d543e2606fbe2daefa68fdd3de15443837759181966c0f6dc4b9d080a5da91cea842450c407c1839c057b967963a545e8acb8861ce1a4150bf95309f5676c250","ssdeep":"1536:OqP3bArH8Ci4oO0RFs6e8KllDr9Im0nhOQEz+2/5f+Nh8cQBibzd+QfhanKrHldP:OqPrArH5XoNs6yDvcz2/5fkh8cQBibZJ","tlshash":"4e43d9cdb292b07203e76266803f410af33a59a9710e4098f67dd9e97cb89495277f7c","size":57840,"data":"","first_seen":"2024-08-12T19:31:05Z","last_seen":"2026-05-03T13:46:18.473288Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-includes/js/wp-emoji-loader.min.js","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e1e03ef21d674799c2758750b8b5c32","sha1":"0a82d5839cb2206988a6ef7c50c3892b55099379","sha256":"88591a3850bfa6c3d21ae6afb5f615721d2904d66a810c1189a80ac04bc3c483","sha512":"12eda7cda9a4b60fb376998faf2e2d012c69fc1f009308067ea8f67cbdccaf4dc8941668da3f34d678eeeb808c3377a0f4eb80e25f7602ae4e07c835e4584507","ssdeep":"","tlshash":"db818696e7763cdbb2f900f2697a0d47eb614435d6c8d438c9ada3141cb5893c274b46","size":3937,"data":"","first_seen":"2026-05-03T13:46:18.498615Z","last_seen":"2026-05-03T13:46:18.498615Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/68/a5/58/68a558e3ab9827233b8f6de17f758f22.js","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5f3b8b6277039fbb8df70f8e9454abf","sha1":"539aae34599e3dbd2a7cb3038ab3ada53a6ad4b1","sha256":"32bd23c1906e71e2cccfc380e71546cba539d5e939a67f7229fc54fe12e1e10d","sha512":"f666806ddae9c14c1283572de30ec23ecdda34cc8f10dde351295f690a259f6f055ffa4ea502e6611bfbcc8c83f87b2985bdedac8a94b8bd79ee8aa860ef9646","ssdeep":"1536:kHLBN82ttARd5zkYcWZ+u9DJvDWaBBl2qc0t7urHYeCz6Q3d3icPS6cQBG7o:cBQ8u91v7Hl1c0t7urHysOJ","tlshash":"79a3c68cbf50f55853f62432222f940af0e90c5641dcd198fa52b8ea7f7cf48e9769a4","size":103360,"data":"","first_seen":"2026-05-03T13:46:18.450072Z","last_seen":"2026-05-03T13:46:18.450072Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/68/a5/58/68a558e3ab9827233b8f6de17f758f22.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1560f5b6e534e873d334653761db8e3","sha1":"761145b055888f541d4918c5372f9217ccd0bbca","sha256":"eb2e7a262026789e318400d8521894c04ab812fb10dfc3600fe4ab9fb732bc13","sha512":"e5a35c7d2a07d1dde28e530253d6f4b19ba37604b4712ea03b017c1e29ebb3340980ec62faa67a170c6bd7d06d495eba9e7d2145f0bdd89317a92f95daa9d38a","ssdeep":"1536:kHLBN82ttARd5zkYcWZ+u9DJvDWaBBl2qc0t7urHYeCz6Q3d3icPS6JQBG7o:cBQ8u91v7Hl1c0t7urHysVJ","tlshash":"9ca3c68cbf50f55853f62432222f940af0e90c5641dcd198fa52b8ea7f7cf48e9769a4","size":103360,"data":"","first_seen":"2026-05-03T13:46:18.489607Z","last_seen":"2026-05-03T13:46:18.489607Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/0d/21/87/0d2187f588b93badfed924aa0d084bde.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee706ba69b7bced4f3dba6e65c3b8249","sha1":"1c6d5ef812790547f97d444fb00b28ecc9d7211f","sha256":"153ceb21b1c83ab629c6563b72f21eb91799f0be51a4ffaed56f692b42765ed9","sha512":"64de73ff1883d97e7035b1ee4f26be05a7383296406aa547aff307d3e89f7a1cf2e424fb6ad835b2223073496c396ce0ba574c2e69687355cd6c962d2fb5017b","ssdeep":"1536:2l2eABAdWrl7QJWX8jlvdwZ1PTz5Ysk5qMUPKLOe:2dSAkrdQJoYlVwrBFkh7","tlshash":"c693c78c7f92f0f5039a24b3232f9c16f2ab1d5124fce454d903a8e5ae25319d57ad6c","size":92485,"data":"","first_seen":"2026-05-03T13:46:18.472308Z","last_seen":"2026-05-03T13:46:18.472308Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/js/jquery.min.js","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a356126b9573eb7bd1e9a7494737410","sha1":"8258d046f17dd3c15a5d3984e1868b7b5d1db329","sha256":"22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5","sha512":"005c3102459dbf145df6a858629d6a6de4598fafe24cd989d86170731b0c3b3c304da470cf66bfd935f6db911b723df0857b5ed561906f7f1c5c4e63ed9430de","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrZ:++414Jiz6fh6lTqya98HrZ","tlshash":"dc83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84380,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-16T13:00:57.389746Z","times_seen":20131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-16T13:31:33.505891Z","times_seen":26647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a141d4cc0ea62b7e58f726a49c7b649e","sha1":"ca9a28b3d7e06f192f20989c96c710bd243d512e","sha256":"42554c0284cc374e33e51ba1c2980fad64bd7600955788facf38b137a1668c80","sha512":"148f99f86db9534dc360f8b266d2d648f7554e616703ff93c369a32f2540eb4d3fad86b449b34e9c19e0805d1aa38dd2cf00412d5569df4fb92a018f70fbbfe4","ssdeep":"96:ctGAdiByQnKauwtTMpX8TxnOgV27JBrHVtH41:c4fycnsgUDpl41","tlshash":"8db1858c3f81f2d407b270af2f2f1509f16d5c20ba89d498d01b95d03e5862adaa7f71","size":5146,"data":"","first_seen":"2026-04-30T15:37:40.418293Z","last_seen":"2026-05-04T13:42:54.864213Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"introduction_type":"scriptElement","is_inline":true,"md5":"36326d112c511533aa58789e9ecf774f","sha1":"f485237dd52ba86e2277cf1ac9897a8ad3aef1d8","sha256":"e768421388b3da2230f237b3592b30b72f466e8a9be1c6e1f40e531ba0f9ac7e","sha512":"37ecbce4b0200ede2028a472c9f063d2f0d1f5a8f7188660b74d723b0b3d4ba660c36353dfd2098e3ff65d4f1e90ab9c73299ffa8155c61af2e52fe2d8ee1430","ssdeep":"","tlshash":"72a002678d521f97ba945be127276e6a92e56539bc70d410bb92644066e0019bd1c180","size":63,"data":"","first_seen":"2026-05-03T13:46:18.500021Z","last_seen":"2026-05-03T13:46:18.500021Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a563ec46564b7dc257c52adb6e34bfe3","sha1":"195e3f1a5ac58fcc43cc0edff35cbc4791d7bfb7","sha256":"692aa37f2a403649285f30cd5f4bcb853c98aa25572b2351571410e3bf1162f8","sha512":"c919b0ba42fb71e5d37a68a9dfdb8e0a2ab5066b88b34c47157c9212451d4f71d2168b59a2543686afdbd79b249fe8596bd780abe6ac6ddc5004c9a6237803ca","ssdeep":"96:fh9OmeAoz0Md9PGZN3k/TGZNd1jDANcNCCfMEDaH:59BeJz0sMBkrMNvkCkCaH","tlshash":"e7911bfe1c66c035142751b5189fa20d1c31a54fa100f940b43cd69affa27e96d79edc","size":4327,"data":"","first_seen":"2026-05-03T13:46:18.501668Z","last_seen":"2026-05-03T13:46:18.501668Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/js/jquery.min.js","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a356126b9573eb7bd1e9a7494737410","sha1":"8258d046f17dd3c15a5d3984e1868b7b5d1db329","sha256":"22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5","sha512":"005c3102459dbf145df6a858629d6a6de4598fafe24cd989d86170731b0c3b3c304da470cf66bfd935f6db911b723df0857b5ed561906f7f1c5c4e63ed9430de","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrZ:++414Jiz6fh6lTqya98HrZ","tlshash":"dc83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84380,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-16T13:00:57.389746Z","times_seen":20131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-content/themes/Avada/js/jquery.min.js","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","size":93636,"data":"","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-08-16T13:18:59.742671Z","times_seen":37764,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-content/themes/Avada/js/frontend.js?ver=1.3","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"introduction_type":"scriptElement","is_inline":false,"md5":"76354ee817d10921429b44d460262d6a","sha1":"276a4b087ef0610bc86376a37532de4da75d9bcd","sha256":"6bb6927f01cc0db79f55a3c8b0011229ca3f1094ecc5c3fa0b442b672a571950","sha512":"c9aa301d750aa1710cd725e6214faaa9f8b961c31191ab876e90899ad2fa1d5981715e279ea62fbfe599112034a6fdc1d39d225bc485a1a1fa9e804f68afc603","ssdeep":"96:BYJ7PUTzl+x1ZqM2xQI8mATopinxjews6uQ4SrakjjBhy3uPH+pKegacHuQoir6y:5+x1ZqM2x8Lt4Sm2hye/0KnoiGSiC6iL","tlshash":"532284a5b9a859f404337afbae3a8800fe7f12278201c754fd6c64a50fb0945bb51f8c","size":10478,"data":"","first_seen":"2024-06-15T17:51:27Z","last_seen":"2026-05-03T13:46:18.479729Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6dff666f172bd6564d2dcf8a8b92110","sha1":"19688e910314c9cdae869c7b2871c6b3fb0abf40","sha256":"6c0610f7b27d0aedcf4b863c0c08ad4de452b95703e67cc3fe942d226c65f8a9","sha512":"1903d9a6635df8099fa8137fc9e870a9298723bd149f23c4a2129a30e0fbb162c90ec90d66a2fe1549cd0c9f68ac51b4c1d0672dddfd367d358a7159525d7527","ssdeep":"","tlshash":"3e212c1a253443f1df52f0b769895ac4f62a0287a44d571e721f068c0ee4f6623bdda9","size":1276,"data":"","first_seen":"2026-05-03T13:46:18.497711Z","last_seen":"2026-05-03T13:46:18.497711Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/4tblBrslcKSifMVZ3TmtT2ukMor.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/4tblBrslcKSifMVZ3TmtT2ukMor.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22196\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Sat, 14 Mar 2026 14:35:58 GMT\r\nx-bo-server: LA-295\r\nx-downloadsize: 58953\r\nx-bo-origindownloadtime: 172\r\nx-bo-compressionratio: 62.35%\r\nx-bo-processingtime: 9\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.47\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 865\r\ncdn-cachedat: 03/14/2026 14:35:58\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: ad0d8e1fb4c1c9b635d231d3c86b7aef\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":22196,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4aa1b6f910b77615d055656ff5081a7f","sha1":"3bd6f2bf1125f9e3f2ccc839425dfd161c16d25e","sha256":"98a3152b8d2896e1c46d995e2714e67df43746010d14a822770e4efd362e896c","sha512":"93754b6b1ad7f83c4445a8007e5a05d7482f6587dd4e349f55af70a423597e25c8599dcf34d1d01c7de4a0a4c9bbaffb4772467820103f4be3befec511816168","ssdeep":"384:objURtWipnkUk/+uYx3xmHUCsWRwWoVc6LDUn6YWXvfcWf2UYtg:aWtFk/vuc0CsWRwWoW6LQ6VncWfDAg","tlshash":"87a2d14f762f4919310b71c4479d3dc509d9aa89c28b84b2bc52f9d2e06ca08bc5fe9f","first_seen":"2026-03-18T12:38:54.863837Z","last_seen":"2026-07-02T20:15:09.680821Z","times_seen":61,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":99,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:48.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 01:34:17 GMT","end":"Mon, 27 Jul 2026 01:34:16 GMT"},"fingerprint":{"sha1":"95:86:03:59:0E:03:98:91:87:F0:07:36:44:10:95:8E:67:97:47:D8","sha256":"51:F3:91:79:18:08:9A:FD:A7:80:AD:AA:80:FB:C8:8B:AE:27:FD:79:25:B6:37:2F:1B:C5:60:67:25:A8:A7:02"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:48 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 36e0276ae5b56bcb46b211e7b87036cc\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-16T13:31:33.505891Z","times_seen":26647,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/css/animate.css","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:50.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/css/animate.css HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cataz.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:50 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa84fe-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aOFt0oI5o7tq%2Bv55xx5c%2F3BcP5D3UUo7XYRU11%2FnbtSrtxAxLaj3S%2FhE%2F3qshG27uUf1MdL4yG7zCKiL1%2BAaAqo3WbR0RbOnS80yYJ0tzZgumskk21L29HZGH3lGnE%2FXvd93nerrIPQ%3D\"}]}\r\ncf-ray: 9f5fb5583e85dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-08-16T14:36:51.087947Z","times_seen":13407,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":31,"dns":18,"connect":1,"send":0,"wait":460,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css\u0026l=3355\u0026fd=538","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:50.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:39:42 GMT","end":"Mon, 27 Jul 2026 00:39:41 GMT"},"fingerprint":{"sha1":"72:D3:68:BC:A4:4E:55:26:DB:11:49:E2:96:21:2A:F6:6D:D9:43:08","sha256":"32:C2:2C:23:81:37:C1:17:20:76:3E:3A:3C:7A:DB:DC:43:10:FE:F6:F2:BA:21:05:A6:7F:B0:88:91:D5:10:02"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css\u0026l=3355\u0026fd=538 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nCookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26971195=1; slec0d2187f588b93badfed924aa0d084bde=[4323731]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: X-Device-User-Agent, X-UCBrowser-Device-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-OperaMini-Phone-UA, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Device-Stock-UA\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"victoriousmansion.com/bd/04/96/bd04966fff9d34711df560739f10f294.js","fqdn":"victoriousmansion.com","domain":"victoriousmansion.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"victoriousmansion.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:33:52 GMT","end":"Mon, 27 Jul 2026 00:33:51 GMT"},"fingerprint":{"sha1":"73:E9:28:32:5A:02:72:A5:10:EC:3B:5B:D0:C2:FC:6A:2A:56:F5:2A","sha256":"7B:E6:03:4C:36:38:76:B1:AA:B3:C5:92:0F:21:D9:80:60:C3:91:BB:E1:D8:C9:4A:E5:1A:06:FC:56:33:86:28"}}},"request":{"raw":"GET /bd/04/96/bd04966fff9d34711df560739f10f294.js HTTP/1.1\r\nHost: victoriousmansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:46 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34812\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent\r\nx-envoy-upstream-service-time: 3\r\nHost: victoriousmansion.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9e5cc1aa41f7ab4d451e006fdb46e98f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96904,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"988b9619acc7d6922e86a3c544de9496","sha1":"b6d52c2f6d68be4350eefa546d37f40bf415fefd","sha256":"fffb2c4f5a27eaa4d43627942bc7cf624ed5949e0bf0b860efcb6939620a624a","sha512":"cb187cb2873e55a4da87f54c0351cb8bbf997d0c8efbc1c9f0dbbe2c6b51ad4194f8140a73bd790c5e5288b466a024e95edba9939de15e9946556c6fbf4e0e3e","ssdeep":"1536:8G6g/qn/325q6EWa8oN39IRnG1VDcN6CwkMDCF9q+FIxx8M9:vIeZB0mdc5cSgqb","tlshash":"0c93e8c8bf80f16443f26836222f501ff0a90c5552dcd18de9a2b8af7fb9b48e635594","first_seen":"2026-05-03T13:46:18.381492Z","last_seen":"2026-05-03T13:46:18.381492Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1118,"timings":{"blocked":364,"dns":85,"connect":94,"send":0,"wait":262,"receive":94,"ssl":214},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/84YOsylmgr181BHrTKlmaKs8IzV.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/84YOsylmgr181BHrTKlmaKs8IzV.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24486\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"683481a1-5fa6\"\r\nlast-modified: Mon, 26 May 2025 14:58:41 GMT\r\ncdn-cachedat: 10/24/2025 13:26:19\r\ncdn-storageserver: NY-753\r\ncdn-requestpullcode: 200\r\ncdn-fileserver: 1081\r\nperma-cache: HIT\r\ncdn-proxyver: 1.39\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1079\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: ed09eb42fc47a5a4e7c9fa59ba5853b7\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":24486,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"17b46ef784decc158fa034ce6259b559","sha1":"eb87a26d953fa3ea251c7a920cc14fc951c79ff7","sha256":"1785b17b4d634ccf167769f4f872d33eb4c834c9eec7e8f5c9c225f46ea5a5a9","sha512":"68b0baecf4aa5db9cb6fb8129b36e178cf7da8d5c6adac8e4588f13088fc9b48548b865ef5fd37aee41d5efc5910f9759f028a657680d982047885d06ff7999f","ssdeep":"384:xZD+mMZ37FSFUUynlG1N3nYER1NtOS/8357wmwQXvUFIzTQ5G2xCQ2t0cxa15BgH:xAfBSiUylgRnYc1HOS/835c6vyIg5rWj","tlshash":"20b2e1684a21435b36fff76a2ab913e8dd53003a8c2a5ac64dce6639f1555fc0074f26","first_seen":"2026-05-03T13:46:18.382721Z","last_seen":"2026-05-03T13:46:18.382721Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":96,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/af/8b/74/af8b74def5e24f9582f73ba12bab9177/1680148975.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:50.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 02:33:25 GMT","end":"Fri, 05 Jun 2026 02:33:24 GMT"},"fingerprint":{"sha1":"4A:66:11:51:1F:1F:F3:84:B6:E4:4F:81:C1:03:83:9F:01:17:7E:82","sha256":"DA:55:E3:02:D5:3C:4E:3A:51:ED:21:0D:F4:32:52:C2:C5:31:87:50:DC:AB:13:D9:93:4A:15:0C:D9:8C:D6:4F"}}},"request":{"raw":"GET /si/af/8b/74/af8b74def5e24f9582f73ba12bab9177/1680148975.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 65159\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 30 Mar 2023 04:03:04 GMT\r\netag: \"642509f8-fe87\"\r\nexpires: Tue, 05 May 2026 13:45:50 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65159,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"c6a1f91858a0ead000fd923888b0b941","sha1":"ef5ec08b41a7a8618ae2bb8003f5d6cad068a57c","sha256":"19fc121de270074fd89cd824f91c2cee3720e6c0f7511e70c7b4c4443223f41b","sha512":"63aedb3703d2068bcfaf828bde70ddef2f702b27addaf6bb137f5aa4c0c16e8aa7c060700492df232718253edd13a1bdb0bdf0736a77329d83ceb675d536ffef","ssdeep":"1536:8x27FaAV8n9zA6qluyyswoPmlA0PcQ8SknbDzTY1Ow0Kz:8x274s8n9z9qQiPmi0t0nbDz6Ow7","tlshash":"7153022b88264f87b9d2991296f8144557f53b16f53ea1dcaf18b462c3b40cef484ba3","first_seen":"2023-06-24T15:50:35Z","last_seen":"2026-08-15T10:14:25.232727Z","times_seen":1290,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/js/jquery.min.js","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:50.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/js/jquery.min.js HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=99x5yhMDMV16q18R5my7DrUqJ0sx6CinNQteqC2mtgkhUS3iaYsnusC4z%2FcM2upVo285p3V94hUSOyduQscMr9teoMsbizEOppqzFkhbNYdsRNGFZuq5Zsz3LpsSqHA%2Bn9pJOx9pe0A%3D\"}]}\r\nage: 2920879\r\ncf-cache-status: HIT\r\netag: W/\"65aa84fe-1499c\"\r\ncontent-encoding: br\r\ncf-ray: 9f5fb5587f38dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84380,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"4a356126b9573eb7bd1e9a7494737410","sha1":"8258d046f17dd3c15a5d3984e1868b7b5d1db329","sha256":"22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5","sha512":"005c3102459dbf145df6a858629d6a6de4598fafe24cd989d86170731b0c3b3c304da470cf66bfd935f6db911b723df0857b5ed561906f7f1c5c4e63ed9430de","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrZ:++414Jiz6fh6lTqya98HrZ","tlshash":"dc83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-16T13:00:57.389746Z","times_seen":20131,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-content/uploads/2024/08/cropped-Cataz-Logo.png","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataz.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 02:08:50 GMT","end":"Fri, 19 Jun 2026 02:08:49 GMT"},"fingerprint":{"sha1":"B9:A9:8A:10:1F:C3:5E:12:DC:0D:D2:6E:0F:77:CE:AE:86:67:7B:C4","sha256":"D9:D6:9B:21:39:6B:BE:A9:42:6F:15:5A:C6:1A:95:73:3F:29:76:4E:2D:3F:16:A3:71:EF:E6:CC:54:22:7D:2D"}}},"request":{"raw":"GET /wp-content/uploads/2024/08/cropped-Cataz-Logo.png HTTP/1.1\r\nHost: cataz.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 10 May 2026 13:45:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Apr 2025 14:55:16 GMT\r\netag: \"1c40-67ed4fd4-5d8efbbc50154f23;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 7232\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":7232,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"5b670ee7b4a641f33c9c5afb854e31b1","sha1":"b17e016746ac1c8bf927e438c22dbda744d2daf1","sha256":"581a969e1609ade86a16e2ed49bbf807ab70ecb9579a30e75cc7d6ca844014a5","sha512":"ef77f216a25a0fadc7835f8244cdd09d8793811450e4a01aaf77ede11dd1eb18f6382033cd3e69e7ab85b6fefd78331911a338eabc34f4cc583c5345e4ea4bf3","ssdeep":"192:3mzk9d+4FKfRnY5jNADIcX7Z0Kb5OZWQAJUn:3mzkHFqgwIclDOCen","tlshash":"15e1bfdec8b886f2c84b957b21955f96ed195cae3380252aad7341eae93b83f1490001","first_seen":"2026-05-03T13:46:18.387375Z","last_seen":"2026-05-03T13:46:18.387375Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cataz.my","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.media-amazon.com/images/M/MV5BZmIzNWZkMzYtMjI3Ni00ODUxLThlYTYtOWFkMTBjOWMzN2I5XkEyXkFqcGc@._V1_SX300.jpg","fqdn":"m.media-amazon.com","domain":"media-amazon.com","tld":"com"},"ip":{"addr":"23.36.77.129","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.media-amazon.com","organization":"Amazon.com Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 12 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"52:9F:14:7C:1C:DE:2E:2B:10:AD:C2:84:42:99:77:E4:25:83:64:FA","sha256":"4E:45:D6:E2:16:98:72:62:8C:A1:C0:32:13:5A:21:2F:8B:34:89:64:D9:3E:D0:C9:B8:80:A0:20:36:49:D4:3A"}}},"request":{"raw":"GET /images/M/MV5BZmIzNWZkMzYtMjI3Ni00ODUxLThlYTYtOWFkMTBjOWMzN2I5XkEyXkFqcGc@._V1_SX300.jpg HTTP/1.1\r\nHost: m.media-amazon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 35854\r\nserver: Server\r\nx-amz-ir-id: f7f5c872-4f77-4b02-a41b-ae2aac997eca\r\nlast-modified: Wed, 27 Oct 2021 13:56:11 GMT\r\nsurrogate-key: x-cache-866 /images/M/MV5BZmIzNWZkMzYtMjI3Ni00ODUxLThlYTYtOWFkMTBjOWMzN2I5XkEyXkFqcGc@\r\nx-nginx-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=629789977\r\nexpires: Tue, 17 Apr 2046 19:25:23 GMT\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.77.125,b=301957335,c=g,n=NO__OSLO,o=20940],[c=c,n=SE_AB_STOCKHOLM,o=20940]\r\nserver-timing: provider;desc=\"ak\",cdn-cache-hit,cdn-hit-layer;desc=\"c\"\r\nx-cache: Hit from akamai\r\nstrict-transport-security: max-age=86400\r\nakamai-grn: 0.7d4d2417.1777815946.11ff80d7\r\ntiming-allow-origin: https://cataz.my/\r\nakamai-cache-status: Miss from child, Hit from parent\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35854,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x450, components 3","md5":"dc6cea47efd044e3e981d13f409ad5d6","sha1":"41228558622d8f5dd7260fbc6f84a1ad71bf9c6c","sha256":"4b0d84f789f8c13752cbd751636b4382713f274c7858bbedd4a321f7df87354a","sha512":"4ddea37feb356d161f0a4e8b6ff065eea2562c8f96f3001637c21573f8145f3aa2ef6de3c72692ab539e0caa98341b739e1ffb6d7ea3d2cad09b4dba5f62769c","ssdeep":"768:RtJMrKpzzVe+tJ+5tEQHHrJ88D8+BYkROAqjue:SeRzVe4FQHHrJ8P+yue","tlshash":"24f2f12fae884307fed4c23749ddd02454ae1cd1a15b6958fc1f5981e2462ae3f86acf","first_seen":"2026-05-03T13:46:18.389228Z","last_seen":"2026-05-03T13:46:18.389228Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":106,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-content/uploads/2026/05/r7tXZoO3rfkOpYQPCXftwugwny9-467x700-1.jpg","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataz.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 02:08:50 GMT","end":"Fri, 19 Jun 2026 02:08:49 GMT"},"fingerprint":{"sha1":"B9:A9:8A:10:1F:C3:5E:12:DC:0D:D2:6E:0F:77:CE:AE:86:67:7B:C4","sha256":"D9:D6:9B:21:39:6B:BE:A9:42:6F:15:5A:C6:1A:95:73:3F:29:76:4E:2D:3F:16:A3:71:EF:E6:CC:54:22:7D:2D"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/r7tXZoO3rfkOpYQPCXftwugwny9-467x700-1.jpg HTTP/1.1\r\nHost: cataz.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 10 May 2026 13:45:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 01 May 2026 06:32:11 GMT\r\netag: \"8965-69f448eb-d4b1e4443106d441;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 35173\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35173,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 467x700, components 3","md5":"e0f63a51de39b8912b38dfe36a211c51","sha1":"f729f8a85de1f0f4155b5ba50585142882737aa7","sha256":"e05af70e11f3a2c62ddbd60c251fbb5db9cc19b71fe92dec71e01d8de647d66d","sha512":"6a8e4b6f8c203bc1a551fed876b4d1f6c12963c0ee7e1399a69cb934b8fa71a29fb204332c3fbb8850e9dc080819ae46eee2f208e0df3c741d37dce3935ee4d4","ssdeep":"768:xRxOK003YD1iFoy/sqEsFKGPUHxBJnPJV3B7VEVA1Q2Ela:Z5Wh+j/sqEsFsRFVvIIEla","tlshash":"8cf2f18813919230d11e7ce1253aef165b49aadf6bb08db351f8d864c1d05cbadf9cd2","first_seen":"2026-05-03T13:46:18.391397Z","last_seen":"2026-05-03T13:46:18.391397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cataz.my","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-content/uploads/2026/05/Nenang-Malandi-098762twyuej.jpg","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataz.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 02:08:50 GMT","end":"Fri, 19 Jun 2026 02:08:49 GMT"},"fingerprint":{"sha1":"B9:A9:8A:10:1F:C3:5E:12:DC:0D:D2:6E:0F:77:CE:AE:86:67:7B:C4","sha256":"D9:D6:9B:21:39:6B:BE:A9:42:6F:15:5A:C6:1A:95:73:3F:29:76:4E:2D:3F:16:A3:71:EF:E6:CC:54:22:7D:2D"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/Nenang-Malandi-098762twyuej.jpg HTTP/1.1\r\nHost: cataz.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 10 May 2026 13:45:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 01 May 2026 06:28:30 GMT\r\netag: \"ac48-69f4480e-d90675d418ddd769;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 44104\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44104,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 445x700, components 3","md5":"3b083785aa3834c68f374fcbc854760a","sha1":"c3563269b77e7768f6eb81b1512fef622dd5edcc","sha256":"5ac47c0c155fa83004c31ca942145977d8855f53ee9ad70bc5fa1b1dd1542e31","sha512":"daf56499b85017ce41eb0479ded6123d8b5fdde52c3a7dda089ee3e860a19d45b40defcb0b72cec6af7b54fe8d79ff5a1ad067aeb2b96f8ca36cdee0685f5ea9","ssdeep":"768:YVt2Omqxn0ItbNgs6oA51xsA1Gtr7oIykeFVHEbvpr9DFhUA86ZoRg2WgoqzrOzY:YD2xQR6oA5PsC2vpyDF2bvbD4VhUgrcY","tlshash":"9113f1939a64a591ddf34e3e85c9547d4e12dc4b02677c5ee37dc023e3b079a4a804ee","first_seen":"2026-05-03T13:46:18.395288Z","last_seen":"2026-05-03T13:46:18.395288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cataz.my","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/79RBp8afL4u4z3nVGR78z6eIvBB.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/79RBp8afL4u4z3nVGR78z6eIvBB.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32464\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Wed, 22 Apr 2026 10:55:49 GMT\r\nx-bo-version: 1.0.67\r\nx-bo-server: LA-296\r\nx-downloadsize: 62171\r\nx-bo-origindownloadtime: 153\r\nx-bo-processingtime: 11\r\nx-bo-compressionratio: 47.78%\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 756\r\ncdn-cachedat: 04/22/2026 11:10:28\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 49fdfd54740d1581227e4fa65c83f4dd\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":32464,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c2782716c758dfb2349dd6d4fa7933dc","sha1":"d10d30fd10f6695af98dc0c3d897eb1a75d8b990","sha256":"48b68adb1871a0622a34b1b711d84cc6089fb590f7d7156f60397ff3c137acf2","sha512":"8da91663b0e665b7425eea41e87c4dac2385ea7b03f2df8dbb315a5e193e793b1a2d36876750125f6c64d33ad7c69ac80dd331d5b45ec7637ea97db744a038a6","ssdeep":"768:u+t2fepUS3Ad5fbb4S0npZfpmbJgQsVzGBuF+ksPx:ftQ3wPzBSZsVKBSxsp","tlshash":"05e2f2661201181ed713a6326ed151424e8c8f0a14f686cec5d3b9eefdcba7c6b875ec","first_seen":"2026-05-03T13:46:18.396583Z","last_seen":"2026-06-21T02:21:26.437521Z","times_seen":6,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":97,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.media-amazon.com/images/M/MV5BZjkxZWJiNTUtYjQwYS00MTBlLTgwODQtM2FkNWMyMjMwOGZiXkEyXkFqcGc@._V1_QL75_UX380_CR0,5,380,562_.jpg","fqdn":"m.media-amazon.com","domain":"media-amazon.com","tld":"com"},"ip":{"addr":"23.36.77.129","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.media-amazon.com","organization":"Amazon.com Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 12 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"52:9F:14:7C:1C:DE:2E:2B:10:AD:C2:84:42:99:77:E4:25:83:64:FA","sha256":"4E:45:D6:E2:16:98:72:62:8C:A1:C0:32:13:5A:21:2F:8B:34:89:64:D9:3E:D0:C9:B8:80:A0:20:36:49:D4:3A"}}},"request":{"raw":"GET /images/M/MV5BZjkxZWJiNTUtYjQwYS00MTBlLTgwODQtM2FkNWMyMjMwOGZiXkEyXkFqcGc@._V1_QL75_UX380_CR0,5,380,562_.jpg HTTP/1.1\r\nHost: m.media-amazon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 23176\r\nserver: Server\r\nx-amz-ir-id: 9b6ea878-fd1e-417a-8039-cd18841169d5\r\nlast-modified: Tue, 03 May 2022 23:33:12 GMT\r\nsurrogate-key: x-cache-232 /images/M/MV5BZjkxZWJiNTUtYjQwYS00MTBlLTgwODQtM2FkNWMyMjMwOGZiXkEyXkFqcGc@\r\nx-nginx-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=629090791\r\nexpires: Mon, 09 Apr 2046 17:12:17 GMT\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.77.125,b=301957332,c=g,n=NO__OSLO,o=20940],[c=c,n=SE_AB_STOCKHOLM,o=20940]\r\nserver-timing: provider;desc=\"ak\",cdn-cache-hit,cdn-hit-layer;desc=\"c\"\r\nx-cache: Hit from akamai\r\nstrict-transport-security: max-age=86400\r\nakamai-grn: 0.7d4d2417.1777815946.11ff80d4\r\ntiming-allow-origin: https://cataz.my/\r\nakamai-cache-status: Miss from child, Hit from parent\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23176,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 380x562, components 3","md5":"86ed3aa00879f4cb44dfa9fcaefedabb","sha1":"2cabf3441389c40a45092e2d4ea9de206b3a6009","sha256":"fc91a746fc2a40a461c14920c1a2e7d3582d4b56013490119408d77ab76b588d","sha512":"dcc24ecffe44d632df8abf9927709295921b24e47df531f69ead96b4328fb635c06055419dd2e9b0011f485a175f8a3227ac3642ad7876ed7a38bc08699d1787","ssdeep":"384:yJ/ztyJd9YHk1DYlHObKe0VDJ0UYgyFdsRehuyUSNyxWsCjAfaGIaqV0Y:yBzt+d96k1DYlHOd0Vl0dg0dY4rj+a2Y","tlshash":"e1a2e116c317d813c9ec063bb655834cb92d4ab75bd8399233f345a88bef2395843ba5","first_seen":"2026-05-03T13:46:18.397586Z","last_seen":"2026-05-03T13:46:18.397586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/aKPxBMJo1o3NNDetVDkvExbRlMC.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/aKPxBMJo1o3NNDetVDkvExbRlMC.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33512\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Thu, 23 Apr 2026 23:14:53 GMT\r\nx-bo-version: 1.0.67\r\nx-bo-server: LA-289\r\nx-downloadsize: 64646\r\nx-bo-origindownloadtime: 484\r\nx-bo-processingtime: 8\r\nx-bo-compressionratio: 48.16%\r\ncdn-proxyver: 1.51\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 860\r\ncdn-cachedat: 04/23/2026 23:21:07\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 2d2139dd51acf9d2db24d2392815ce1c\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":33512,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"88b5b0f6648f25e58f43dc9196566c00","sha1":"b58d0705372a94eb16d11802a27c6b5a72b95bdc","sha256":"88b098ac7e6660f4f1e20fb245cd7993e4a0517526bfa0e765639a3f4eb38dbf","sha512":"c70cb7368a591e4225b51e2a73f8986ae4da763569c28f9fde80c21067294924db7efce9804b3488b180e7f4b7db466d8c325e21083f39f37cd52da0e3a3a87c","ssdeep":"768:RBTvwEiy8DpBlkz/5IOnrUPfa636M6cFPvMRE:LTvwD5NBc+OYPfa6DDn","tlshash":"f4e2f16634a0233134294502440a0f48951b75a973fd5c2df62aff7ddd9b3a92e3449f","first_seen":"2026-05-03T13:46:18.398453Z","last_seen":"2026-05-03T13:46:18.398453Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":98,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/uQ1ZrGxA0N6cgeTTl1vZhrdp30C.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/uQ1ZrGxA0N6cgeTTl1vZhrdp30C.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19030\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Thu, 19 Mar 2026 13:29:18 GMT\r\nx-bo-server: LA-291\r\nx-downloadsize: 54985\r\nx-bo-origindownloadtime: 157\r\nx-bo-compressionratio: 65.39%\r\nx-bo-processingtime: 11\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1080\r\ncdn-cachedat: 03/27/2026 13:17:49\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 143a598873a7b96af0168e90307d728d\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":19030,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"286ad23e9049c190cc46461d48dcc6e6","sha1":"b3e9a8be979eba5e1816ded9e40071ab3c6a26cd","sha256":"45bc6a08ceba1683b1ee5b603d80a5072aa1c8d8674b3d6b86497aee6331935f","sha512":"38ff4a8fe0500ce91399d57d07ca76bd2aa8d918b4c40728a85520210b870aa51afaca80cbf3aa068120ef7898d8e375b6d71d8a92c75dc6d3ff8e4cc81f35e8","ssdeep":"384:tI7QZ/kJgnzptyDbeuwRG7BH5VfPVCYB9apMU8tEOSpYDORSyS:tIEZ/kcttyeTRA5iYfapKiOSpQOJS","tlshash":"3082d01a70094f89cc947f1b07c5deb654de2483d17b323d6e16232a97cd6331ab6c15","first_seen":"2026-05-03T13:46:18.401103Z","last_seen":"2026-05-03T13:46:18.401103Z","times_seen":1,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":99,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/AvdBPe2XSKm3cGyTKFgbquC2jCo.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/AvdBPe2XSKm3cGyTKFgbquC2jCo.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16594\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Tue, 24 Feb 2026 04:15:39 GMT\r\nx-bo-server: LA-295\r\nx-downloadsize: 38109\r\nx-bo-origindownloadtime: 150\r\nx-bo-compressionratio: 56.46%\r\nx-bo-processingtime: 8\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.46\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1077\r\ncdn-cachedat: 02/24/2026 07:21:22\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 52a6ce8671c6d999edbabf539a573f5b\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16594,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0004b52146e33d73ade7e1d9538f50ae","sha1":"722277b3ed50c46a00e502e9c60b0f3e58718063","sha256":"e609563feceb5984f2e8dad9ce48da4560ef99e8b786eee72fcec1f5e0fed0be","sha512":"e990e647fa35b9c7b5b1c89160c940869452ba138a7a07bc83c13a295aac04858f1b48e05ab547c6e4dd834c7da13f29e30139c1c66abc90c484dc9e44ad9bc1","ssdeep":"384:apz1yj5eV5chPXXRFDj6QLBHnriSQe/BRG:GhV5gnDTLiSFRG","tlshash":"2972d0bd33e853534196ff0378360502b9832e78ba4ed1744bf7a197b489a3c2e6111e","first_seen":"2026-05-03T13:46:18.402182Z","last_seen":"2026-05-03T13:46:18.402182Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f493.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:48.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:43 GMT","end":"Thu, 23 Jul 2026 19:44:42 GMT"},"fingerprint":{"sha1":"A3:CA:4D:A5:D1:38:98:6D:BA:D3:BC:97:38:87:2F:F8:5D:E6:F3:50","sha256":"EC:0E:74:3E:53:88:CF:E8:5E:13:E6:4D:30:1C:54:A3:37:E0:B5:23:14:D4:A0:54:54:76:D9:8F:22:7F:15:21"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f493.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 13:45:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:22:03 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 17\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1275,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"058dee5288ffcb904a26594ea31fcfb3","sha1":"95cf8061c16583bbee1334ba8332257645d155e0","sha256":"7e61107adf2c38be158a785007c396dab9b2cf3661a2809f501f69fe37ad3ca9","sha512":"045d4c6a306b9ad4c155460e7f289fab5daf0a5105779d9dce250b8218cfe6ac590ff74a46a68bd9add7ebb2c3aa75498a8fea757021eeacee584e142c6be7f5","ssdeep":"","tlshash":"f22140eb7370c30185cddba8fb3a9ec0850790e939e716da90cecf2464ab609ad14020","first_seen":"2023-05-09T07:21:19Z","last_seen":"2026-08-08T18:37:06.444215Z","times_seen":115,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":53,"dns":26,"connect":8,"send":0,"wait":8,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=91aace92-c455-4792-9ee4-98f18ad69791\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=bd04966fff9d34711df560739f10f294\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=13","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:48.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 22:15:44 GMT","end":"Sun, 26 Jul 2026 22:15:43 GMT"},"fingerprint":{"sha1":"A4:CC:8E:38:1E:86:20:D5:CF:AC:A0:E9:32:E9:DF:AA:71:7A:98:E5","sha256":"B2:02:B9:E5:21:88:DB:AF:AE:5F:6C:FB:16:F4:3A:D8:44:9D:C2:FF:BE:D7:7B:A1:08:43:78:33:05:96:96:7F"}}},"request":{"raw":"GET /pxf.gif?uuid=91aace92-c455-4792-9ee4-98f18ad69791\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=bd04966fff9d34711df560739f10f294\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=13 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:49 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 2\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 74a851a830c327a63c2145e358636bee\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":true,"data":null}},"time_used":685,"timings":{"blocked":293,"dns":0,"connect":98,"send":0,"wait":99,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/ren.gif?sid=H4sIAAAAAAAC_1RSvW8cxRuetd39fhLiQ3SgLVyAxJ139-b2dnERiAgIBDYhQSmoZnZmneHmdjY7u3eXo8AhCBqQkgKJj2b9nB03CMh_gM5IFBZIbHcSccOfgBREh-58UuCR5v3QM8XzPu_7yUF1Rtqo2Pztt8xEac22um3Pfe6ayoQZWXfnqut7bW_bvaaykG6740Uohi_6Hdr2nndfk0nfbAWe73m-57uvqkKmZry1ZKHyb2O_HXttGrT9LsW4-G9vKweWORDDM_IElGge-yN9DyqZIRv88Iq0_dLkL1waVJqVpsBQHL-b9TMzyjB4VKaFgzQ7Xv2GsQ0hX67BZMerCWCGh4sJwFVD1p5-AJ4dr2SCD4_OlXINmYGL_2E0nEHqGRSbITG3ocRvBEgEdnaRDe7tmGLEbp6zbME2ZOPhn1Cjhmw8eArZ4LuLWo3dK0ZXpTKZxTitocYzqL0Z8uoE5WQNanSCpPwISvxKth6-iWxwuGu1gRLzzdhnLJFx0Epot9uivThoxVLSVhylfsREGPdif2mRSmdg1kG1eMpBlTqocgcDMXepF9HEZ50wjUXS8yijVEjuxVHgeSxOeqiSW1DiDpJiH3mxj7662xBn_XdYsQ5bNsS5_CGGoj4S2ga2vie0rbi_ysEqd-qpKfcO2JEp92RGwIo7KER9qPIb9jaScn06Sa2YmkVgvKynjIt6qkRJUNyYb3p-LKT0w1aUdkWrFwra4mmYtkTUSXs0ol7o9w5TW1b1QX5GHl947Xzz2Tb6cu56IvCjXtqNIh53OBOpFHFAGfOEF1EuJKyqoeza0qGJashL0ffIVUOedX8GZyew-gSJcsCqZ8BGNdj1GpPsfp-VAzNU8rpoczVp5xrC1MjLDZQ3nQN9Rp6cvnP14o_Lvb_89xeQyemF-VcLfI2kqJEXNd5XPxHs6Vv3d_NSDdSELQ7hSslKuQ6mGuJ88AsS1ZD_v3FpeZObr3-KJN-HzU8vnHSWgDUEPHegFYGWp2QFMF7D_qvnj-oD-zH2CgdcO1OuC-eQ60LfPZdp1dztBrwTRlEo01CkHdEJOiLuejKmLA5pTLsobaP-uvz5PwEAAP__mn3tEhEEAAA=","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:49.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSvW8cxRuetd39fhLiQ3SgLVyAxJ139-b2dnERiAgIBDYhQSmoZnZmneHmdjY7u3eXo8AhCBqQkgKJj2b9nB03CMh_gM5IFBZIbHcSccOfgBREh-58UuCR5v3QM8XzPu_7yUF1Rtqo2Pztt8xEac22um3Pfe6ayoQZWXfnqut7bW_bvaaykG6740Uohi_6Hdr2nndfk0nfbAWe73m-57uvqkKmZry1ZKHyb2O_HXttGrT9LsW4-G9vKweWORDDM_IElGge-yN9DyqZIRv88Iq0_dLkL1waVJqVpsBQHL-b9TMzyjB4VKaFgzQ7Xv2GsQ0hX67BZMerCWCGh4sJwFVD1p5-AJ4dr2SCD4_OlXINmYGL_2E0nEHqGRSbITG3ocRvBEgEdnaRDe7tmGLEbp6zbME2ZOPhn1Cjhmw8eArZ4LuLWo3dK0ZXpTKZxTitocYzqL0Z8uoE5WQNanSCpPwISvxKth6-iWxwuGu1gRLzzdhnLJFx0Epot9uivThoxVLSVhylfsREGPdif2mRSmdg1kG1eMpBlTqocgcDMXepF9HEZ50wjUXS8yijVEjuxVHgeSxOeqiSW1DiDpJiH3mxj7662xBn_XdYsQ5bNsS5_CGGoj4S2ga2vie0rbi_ysEqd-qpKfcO2JEp92RGwIo7KER9qPIb9jaScn06Sa2YmkVgvKynjIt6qkRJUNyYb3p-LKT0w1aUdkWrFwra4mmYtkTUSXs0ol7o9w5TW1b1QX5GHl947Xzz2Tb6cu56IvCjXtqNIh53OBOpFHFAGfOEF1EuJKyqoeza0qGJashL0ffIVUOedX8GZyew-gSJcsCqZ8BGNdj1GpPsfp-VAzNU8rpoczVp5xrC1MjLDZQ3nQN9Rp6cvnP14o_Lvb_89xeQyemF-VcLfI2kqJEXNd5XPxHs6Vv3d_NSDdSELQ7hSslKuQ6mGuJ88AsS1ZD_v3FpeZObr3-KJN-HzU8vnHSWgDUEPHegFYGWp2QFMF7D_qvnj-oD-zH2CgdcO1OuC-eQ60LfPZdp1dztBrwTRlEo01CkHdEJOiLuejKmLA5pTLsobaP-uvz5PwEAAP__mn3tEhEEAAA= HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nCookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26971195=1; slec0d2187f588b93badfed924aa0d084bde=[4323733]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:49 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Device-Stock-UA,X-Device-User-Agent,User-Agent\r\nx-envoy-upstream-service-time: 2\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8bd48588c4ff5c20c0f6c6043703ee10\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html\u0026l=1325\u0026fd=442","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:50.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:39:42 GMT","end":"Mon, 27 Jul 2026 00:39:41 GMT"},"fingerprint":{"sha1":"72:D3:68:BC:A4:4E:55:26:DB:11:49:E2:96:21:2A:F6:6D:D9:43:08","sha256":"32:C2:2C:23:81:37:C1:17:20:76:3E:3A:3C:7A:DB:DC:43:10:FE:F6:F2:BA:21:05:A6:7F:B0:88:91:D5:10:02"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html\u0026l=1325\u0026fd=442 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nCookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26971195=1; slec0d2187f588b93badfed924aa0d084bde=[4323731]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Platform, Sec-CH-UA-Model, Device-Stock-UA, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/js/script.js","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:50.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/js/script.js HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cataz.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 13:45:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 155745\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=juSIPOtHVOPNcuGGhZdV0pp6xQkJVU8MoPP8KemlUzHvOqVvnXLCwKF%2Fg6ARaWhEu0Y36BtVOLz2VjmYa5A7foTZm2kvPbM%2F9go8iirqcdrLL71BvEModEbCgItWeFLGL5ZbolYr%2FNc%3D\"}]}\r\netag: W/\"65aa84fe-3c2\"\r\ncontent-encoding: br\r\ncf-ray: 9f5fb558ea7135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":962,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"0013fbb3bd9e7300fa1bc9f62501dcf0","sha1":"447e4a8994979e2e158b9beff79b94e7d1b29508","sha256":"4cf18df81115ddab6967dc82096077ee024223dac3c6ffc9b810bffb7780a20e","sha512":"288a5e82fdbfdadf11f5a15ed40b54b67dd43fd83f0666abf85ebc0f14ef3b6e5e9104c3491fdb85b40e5556b252d933ee8cbe6e381e96e01170e76c60003dc6","ssdeep":"","tlshash":"e7117d37156882f06257f027a15729d6ee32029ee81a5707721c06cd0ec47b913fa6e7","first_seen":"2023-06-25T06:36:24Z","last_seen":"2026-08-15T10:14:25.093466Z","times_seen":3562,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/e3/7f/34/e37f34186a90126ce3fb9c34cb5c55ca/1722092313.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:48.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 02:33:25 GMT","end":"Fri, 05 Jun 2026 02:33:24 GMT"},"fingerprint":{"sha1":"4A:66:11:51:1F:1F:F3:84:B6:E4:4F:81:C1:03:83:9F:01:17:7E:82","sha256":"DA:55:E3:02:D5:3C:4E:3A:51:ED:21:0D:F4:32:52:C2:C5:31:87:50:DC:AB:13:D9:93:4A:15:0C:D9:8C:D6:4F"}}},"request":{"raw":"GET /cti/e3/7f/34/e37f34186a90126ce3fb9c34cb5c55ca/1722092313.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41865\r\nserver: nginx/1.21.6\r\nlast-modified: Sat, 27 Jul 2024 14:58:34 GMT\r\netag: \"66a50b1a-a389\"\r\nexpires: Tue, 05 May 2026 13:45:48 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41865,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 728x90, components 3","md5":"46f2baee73a55cc0f58199b787bdf088","sha1":"b789136d9b707c28e8c09b0303f9e38e31cfb7bb","sha256":"75393b66d4a71186522793101f482547df6e939e0518b08f4b9ad638d2a01512","sha512":"9c96a491cb0775a04bf7b18c9cb306d86596505ca809fcc374c0be5ddd9f048771d8607c3815d78d983e4991a38e9ea10e561c0ef2cfb8e277ad4c10c5c9b07b","ssdeep":"768:4Yytqf2I0jpsQLcEK1gW1O56sPRkncaJizrqYzNy+qL5OIKjW0wbGq:46esQcEK1XO56WKcXsbsjZwbR","tlshash":"5213f1b52a49ed93e4a4d4fcdda997d6f043967f9b223be11c0cd00737c2580a4ad81e","first_seen":"2024-08-10T09:44:18Z","last_seen":"2026-05-16T09:42:21.815434Z","times_seen":84,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=538","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:50.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:39:42 GMT","end":"Mon, 27 Jul 2026 00:39:41 GMT"},"fingerprint":{"sha1":"72:D3:68:BC:A4:4E:55:26:DB:11:49:E2:96:21:2A:F6:6D:D9:43:08","sha256":"32:C2:2C:23:81:37:C1:17:20:76:3E:3A:3C:7A:DB:DC:43:10:FE:F6:F2:BA:21:05:A6:7F:B0:88:91:D5:10:02"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=538 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nCookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26971195=1; slec0d2187f588b93badfed924aa0d084bde=[4323731]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Platform, Sec-CH-UA-Model, Device-Stock-UA, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/impr.gif?sid=H4sIAAAAAAAC_1RSzW8bxRueTXL7_STEh7iB9pADSNiZtdf2LjkUKgoCQUJpUQ-c5mvTweOd7c6u7ZoDKQVOILXiwsdl8zhpLgjof4AcJA4RSOzNEs2FPwGpiBuyY6nwSPN-6JnD8z7v--lBeUaaKNn87bfsRBvDtjpN6j93TafSjpy_c9UPaJNu-9d02g23_fEi5MMXg3bYpM_7rynRt1stGlAa0MB_VecqseOtJQudfRsHzZg2w1Yz6IQY5__tXenBMQ9yeEaegJb1Y38k70GLGdLBD68o1y9s9sKlQWlYYXMM5fG7aT-1oxSDR2WSe0jS49VvWFcT8uUabHq8mgB2eLiYAFzXZO3pB-Dp8Uom-PDoXCk3UCm4_B9GwxmUmUGzGYS9DS1_I4CQ2NlFOri3Y_MRu3nOsgVbk42Hf0KParLx4Cmkg-8uGj32r1hTFtqmDuOkgh7PoPdmyMoTFJM16NEJRPERtPyVbD18E-ngcNcZCy3nm3HAmFBxqyHCTqcR9uJWI1YqbMRREkRMduNeHCwt0skMzHkoF097KBMPZeZhIOd-SKNQBKzdTWIpejRkYSgVp3HUopTFoodS3IKWdyDyfWT5Pvr6bk289d_h5DpcURPv8ocYyupIGtdy1T1pXMmDVW6tcrua2mLvgB3ZYk-lBCy_g1xWhzq74W5DFOvTSeLk1C4C40U1ZVxWUy0LgvzGfJMGsVQq6DaiRAWNnmTdBlNd1RAdxVmPhp2Edw4TV5TVQXZGHl947X3z2Tb6au5T2QqiXtKJIh63OZOJknErZIxKGoVcKjhdQbu1pUMTXZOXou-R6Zo86_8Mzk7gzAmE9sDKZ8BGFdj1CpP0fp8VAzvU6rpscj1pZgbSVsiKDRQ3vQNzRp6cvnP14o_Lvb_89xdQ4vTC_KsFvobIK2R5hff1TwR75tb93azQAz1hi0O4UrBCrYPpmngf_AKha_L_Ny4tb3Lz9U8gsn247PTCSXsJOEvAMw9GExh1SlYA4xXcv3r-qD5wH2Mv98CNN-Um9w65yc3dc5lOz_2krVqC0qjXDdoLx9uhFEknCmPZZbTdVihcrf-6_Pk_AQAA__92jnJ3EQQAAA==","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:51.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:39:42 GMT","end":"Mon, 27 Jul 2026 00:39:41 GMT"},"fingerprint":{"sha1":"72:D3:68:BC:A4:4E:55:26:DB:11:49:E2:96:21:2A:F6:6D:D9:43:08","sha256":"32:C2:2C:23:81:37:C1:17:20:76:3E:3A:3C:7A:DB:DC:43:10:FE:F6:F2:BA:21:05:A6:7F:B0:88:91:D5:10:02"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSzW8bxRueTXL7_STEh7iB9pADSNiZtdf2LjkUKgoCQUJpUQ-c5mvTweOd7c6u7ZoDKQVOILXiwsdl8zhpLgjof4AcJA4RSOzNEs2FPwGpiBuyY6nwSPN-6JnD8z7v--lBeUaaKNn87bfsRBvDtjpN6j93TafSjpy_c9UPaJNu-9d02g23_fEi5MMXg3bYpM_7rynRt1stGlAa0MB_VecqseOtJQudfRsHzZg2w1Yz6IQY5__tXenBMQ9yeEaegJb1Y38k70GLGdLBD68o1y9s9sKlQWlYYXMM5fG7aT-1oxSDR2WSe0jS49VvWFcT8uUabHq8mgB2eLiYAFzXZO3pB-Dp8Uom-PDoXCk3UCm4_B9GwxmUmUGzGYS9DS1_I4CQ2NlFOri3Y_MRu3nOsgVbk42Hf0KParLx4Cmkg-8uGj32r1hTFtqmDuOkgh7PoPdmyMoTFJM16NEJRPERtPyVbD18E-ngcNcZCy3nm3HAmFBxqyHCTqcR9uJWI1YqbMRREkRMduNeHCwt0skMzHkoF097KBMPZeZhIOd-SKNQBKzdTWIpejRkYSgVp3HUopTFoodS3IKWdyDyfWT5Pvr6bk289d_h5DpcURPv8ocYyupIGtdy1T1pXMmDVW6tcrua2mLvgB3ZYk-lBCy_g1xWhzq74W5DFOvTSeLk1C4C40U1ZVxWUy0LgvzGfJMGsVQq6DaiRAWNnmTdBlNd1RAdxVmPhp2Edw4TV5TVQXZGHl947X3z2Tb6au5T2QqiXtKJIh63OZOJknErZIxKGoVcKjhdQbu1pUMTXZOXou-R6Zo86_8Mzk7gzAmE9sDKZ8BGFdj1CpP0fp8VAzvU6rpscj1pZgbSVsiKDRQ3vQNzRp6cvnP14o_Lvb_89xdQ4vTC_KsFvobIK2R5hff1TwR75tb93azQAz1hi0O4UrBCrYPpmngf_AKha_L_Ny4tb3Lz9U8gsn247PTCSXsJOEvAMw9GExh1SlYA4xXcv3r-qD5wH2Mv98CNN-Um9w65yc3dc5lOz_2krVqC0qjXDdoLx9uhFEknCmPZZbTdVihcrf-6_Pk_AQAA__92jnJ3EQQAAA== HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nCookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26971195=1; slec0d2187f588b93badfed924aa0d084bde=[4323731]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:51 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,Sec-CH-UA-Full-Version-List,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA\r\nset-cookie: iprc_l+03cacda7d041994c28d4804b9a1087ff=4323731; expires=Mon, 04 May 2026 13:45:51 GMT; path=/; secure; SameSite=None\niprc_l:4323731=1; expires=Mon, 04 May 2026 13:45:51 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: bed909481c20a03f3270202ca4897ed7\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:51.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cataz.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Apr 2026 22:40:32 GMT\r\nexpires: Thu, 29 Apr 2027 22:40:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 313519\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-16T14:30:59.065751Z","times_seen":263968,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":23,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/zj82L9maBSW6CAVZltBoFBSuTk1.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/zj82L9maBSW6CAVZltBoFBSuTk1.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37864\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67f101b3-93e8\"\r\nlast-modified: Sat, 05 Apr 2025 10:10:59 GMT\r\ncdn-storageserver: NY-673\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 341\r\nperma-cache: HIT\r\ncdn-proxyver: 1.22\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/11/2025 09:04:33\r\ncdn-edgestorageid: 1053\r\ncdn-requestid: a79cd1b99b2223f5cabc5a606e4d80d6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":37864,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"686539c79404c75aa11302a816de9fe7","sha1":"9b25f3c8f153c6b0638b0bafb052de0b0af651cd","sha256":"c53de45420460140d5c87200e9737bea21470e4fe09b7a9413f1d686c76aded0","sha512":"9da2f949af41d20928a2241ee6cee1eac48d61b01b5577aa1e165791a30cb48c6a4a511f0467da0fb9d6a46702b47110ee04902e252aba01c8c82e9cdffec35d","ssdeep":"768:GkmORq1ox1sfMWll4LWCsDn8sXoaCc3A7Y+z9PLa/a6SCchQkybVZ+OQff4I:Gkm0s0PL5soj9G/a6SZl+eO3I","tlshash":"1803f2c0b2a1d33180163d5d1ee90d8f45385b8a136135bc4fc59c8b02de6746adeda7","first_seen":"2026-05-03T13:46:18.405296Z","last_seen":"2026-05-03T13:46:18.405296Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":34,"dns":65,"connect":22,"send":0,"wait":43,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/kYWFlYwYzs4Mn81Y2MvalgG5im3.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/kYWFlYwYzs4Mn81Y2MvalgG5im3.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31580\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Tue, 28 Apr 2026 08:39:24 GMT\r\nx-bo-version: 1.0.68\r\nx-bo-server: LA-289\r\nx-downloadsize: 58683\r\nx-bo-origindownloadtime: 149\r\nx-bo-processingtime: 8\r\nx-bo-compressionratio: 46.19%\r\ncdn-proxyver: 1.51\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 752\r\ncdn-cachedat: 04/28/2026 10:06:10\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 3ae5957303c2485f38078866aa72558f\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":31580,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x490, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c8b68ded511dfa8b9da3997e29fac799","sha1":"a74bf453dae3a7f5204059a509305c64d0cc8d17","sha256":"4eefdb4f27fbf616f27d033e4b2c7635e7dc376cba2afa9dafcc59035b986397","sha512":"3b1fa1485fb93ea5c0aecb42f40148c08829cde302ce0f53abacde3362fe516b9c800e3f46d488fcbb07f5b87963ef348f5341fbb743b725ca79a88714272b22","ssdeep":"768:cgVk3ycYm0v6okV9VPhT4/G2wLN/KD0aXVsBM:3uyOjomPdOkN/fUB","tlshash":"23e2f1d0a04e5877edbe20bb82771213afd41ea0950588dc31dd36286bfa2ed10f907b","first_seen":"2026-05-03T13:46:18.406321Z","last_seen":"2026-05-03T13:46:18.406321Z","times_seen":1,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":98,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/xqvX5A24dbIWaeYsMTxxKX5qOfz.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/xqvX5A24dbIWaeYsMTxxKX5qOfz.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37496\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67f0d292-9278\"\r\nlast-modified: Sat, 05 Apr 2025 06:49:54 GMT\r\ncdn-storageserver: NY-833\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 921\r\nperma-cache: HIT\r\ncdn-proxyver: 1.28\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/30/2025 15:50:14\r\ncdn-edgestorageid: 1054\r\ncdn-requestid: e3eac1dd709c5e710ca8e7c0681ac0bd\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":37496,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"43be5fd14316ef35a606a1afcce00f41","sha1":"d0b41b7a481ae5722c5017d360c6e5785ca266bb","sha256":"5c9380716958b11f86aba2bf38ffda9e9940400860ed6adb7ffbd77fa0a9de5a","sha512":"3db5579f6925609bb597a9283e6542a32b3393cdc07d3ab60a64bd1afb7235b6bbb23d7b725eea37498485214e0fb76ed7ac5f824ad4053876e936ee4b204d1a","ssdeep":"768:bsbyvmO55LglvsZCO+5Mfm00RTEW7by8bZUmCpRVwCoJQpzk/LjzEdMTV1uxN:IbKm1vyCO+5X+WyGZU1VSok/LjzxTo","tlshash":"d3f2f1e5d79928409fbec68257b863c785fcbb42c19879c57a810ead46c8c0cd79fb50","first_seen":"2026-05-03T13:46:18.407259Z","last_seen":"2026-05-03T13:46:18.407259Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":99,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/css/style.css","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:50.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/css/style.css HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cataz.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:50 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa84fe-d1b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=29irzG78%2FMbu0%2BtSpcMkKXcwYoUu3fiGaWDTBL0Ly7%2F0mvLjxxlV5eCkDLEsiLy%2FCHu3PJPdk4sDcN%2Fl%2B5sgKHy0yfQU6eLPHm5w49jjwRhkFvr8uO%2Bjlq3Up%2FZG4d63bkCdJBQoc10%3D\"}]}\r\ncf-ray: 9f5fb5583e9ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3355,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"039a6734d79ed9aa51cf81c52479c5fe","sha1":"9cf29c4ea1a3880681d50c7228374f8073b7778b","sha256":"a15bad73fc8907795285b78a4a1a1bf5e7f68b4d39988b9bb165444819cf9eb1","sha512":"879f067d02f582c2ff8f9c0308cbb44b24964136c4d8074f1a1b200169b520bb49fdd2b290772dfbc3ca432fba2ce9d5b1a398eb14746613cc942dd7567fa1d9","ssdeep":"","tlshash":"3a61ba966b670a04b51ad0ab3f667b4723084007995fed757fc8620ccfc92a8d6d378e","first_seen":"2024-02-12T03:25:01Z","last_seen":"2026-08-15T10:14:25.127099Z","times_seen":3465,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":31,"dns":10,"connect":3,"send":0,"wait":455,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/garCCMokkC9TbzmOGPvFTqpRD2C.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/garCCMokkC9TbzmOGPvFTqpRD2C.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38974\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 02 Mar 2026 02:33:34 GMT\r\nx-bo-server: LA-289\r\nx-downloadsize: 85156\r\nx-bo-origindownloadtime: 3950\r\nx-bo-compressionratio: 54.23%\r\nx-bo-processingtime: 5025\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.47\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1334\r\ncdn-cachedat: 03/03/2026 00:31:14\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: c1370bc1f909b3f8f0916e2e2a2f3acd\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":38974,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"76029f22d1d6c91ee0f3e54a26ed5c8b","sha1":"13a03960f7d31cae92af9ef7f679f2c99dec470e","sha256":"d2c87b2e4bbccb70d9d7f24758a3c2e3a2c018f54e955ee7f411bdb60e600d2b","sha512":"680e8c26a5b28ad614a493c4361c4acbdb2b3472d251fc09d88250c9b3461c323a0251e6245ca6717260a57a6d365e75a334428db9ccdc9b6dfd51b9186bfbf5","ssdeep":"768:ntSvfqObDhvSl6ck4HM4ZN8x+haF8Nr6Gs8CFCJ61UBWsqE5IP4ypWy9nG62t:nM3bDncN4LF8NOL5CA+IPPD5GB","tlshash":"d403021fd229c5467b8a7a1b9ad4bcf37de2377399105fd4335b403b2b3464a500e618","first_seen":"2026-05-03T13:46:18.408728Z","last_seen":"2026-05-20T07:42:00.641511Z","times_seen":4,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":100,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/sRTYF65JvbHLoC3LoBj4UKYqIlA.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/sRTYF65JvbHLoC3LoBj4UKYqIlA.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29732\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 27 Apr 2026 09:27:16 GMT\r\nx-bo-version: 1.0.68\r\nx-bo-server: LA-293\r\nx-downloadsize: 61371\r\nx-bo-origindownloadtime: 146\r\nx-bo-processingtime: 9\r\nx-bo-compressionratio: 51.55%\r\ncdn-proxyver: 1.51\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 863\r\ncdn-cachedat: 04/27/2026 09:27:16\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 18e519c202e0ee597a04aeea0bd39f8f\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":29732,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ba80dc7d3ef91fc3982d4fd3bd866d7e","sha1":"35055f21935f718cf13d225fd99e047a4321980a","sha256":"b1cd08f3a19a9b9e4972b0d6f12f5e28b718c2ae735be200cfd0c2ee974060e2","sha512":"40e6d18e1344052a504fcd76f057370a5e51cd50e2847d3de0dd7233dec8227794624418f783af8a559a3aa4477e089a441bc66c703b8e25244136c68dd49de2","ssdeep":"768:sS5KY63LPD5+k9Ntr2wXOn1YDLB4W+E0v9Ax4bYcPX6gyi:sSh63Lr5JB9B4WzG5Vv6gyi","tlshash":"b8d2e1363bbf9dd20f244c4a34a424da8d15f4f99a00977e4cb632ef0b69a15e7b6106","first_seen":"2026-04-28T07:57:46.516068Z","last_seen":"2026-05-04T16:09:58.032887Z","times_seen":12,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":98,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/ym7Kst6a4uodryxqbGOxmewF235.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/ym7Kst6a4uodryxqbGOxmewF235.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 49820\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67f7a72d-c29c\"\r\nlast-modified: Thu, 10 Apr 2025 11:10:37 GMT\r\ncdn-storageserver: NY-703\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 923\r\nperma-cache: HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/18/2025 18:03:31\r\ncdn-edgestorageid: 860\r\ncdn-requestid: b56f282d4498c6580222860857e6d68c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":49820,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"91fd313f76aa800845777c8f8a3b6303","sha1":"ffb6dc0fa32c1a5d72f3cc09e18c36ebde5d8eaa","sha256":"296516785d18dfdd607a5bd6e8f31b31c7f5ea1246fc6e377bb12385f71158c8","sha512":"12e8e0f659e78cb839d5798925467c738f63a176f32d1b08db7241d06ea0d7e4ecc73e9525e54fbe2d2a967c60583323bcc1a0e0c9960d9e14ab15a40ce55caf","ssdeep":"1536:SEMGaSoPkF9VA1arI1tUNxKwz17+BNgFVItw:zMWoMF9G1aMTwz1qWVIa","tlshash":"c3230212f10480a84fd3a35ab4b3fb065d7750701a6924c925b55bf13aff295ff4b289","first_seen":"2026-05-03T13:46:18.410195Z","last_seen":"2026-06-28T07:50:03.208829Z","times_seen":3,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":71,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/watch.479859318450.js?key=e374e32a8cd336033ad180d1424bb687\u0026kw=%5B%22cataz%22%2C%22sbs%22%2C%22watch%22%2C%22latest%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22online%22%2C%22free%22%2C%222024%22%2C%221080p%22%2C%22net%22%5D\u0026refer=https%3A%2F%2Fcataz.my%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=91aace92-c455-4792-9ee4-98f18ad69791%3A1%3A1\u0026rmtc=t\u0026shv=2\u0026sht=bdCnRcz7_Nrc19Sk_QWrJR0d5oq-1BT5KF-lowIJL5U\u0026fstu=019dee16-8acd-7efb-8335-7421208b388b\u0026st1=81ae11c05e81a6d67e5bd474e5c5dd39\u0026ps1=1777815947","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:48.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /watch.479859318450.js?key=e374e32a8cd336033ad180d1424bb687\u0026kw=%5B%22cataz%22%2C%22sbs%22%2C%22watch%22%2C%22latest%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22online%22%2C%22free%22%2C%222024%22%2C%221080p%22%2C%22net%22%5D\u0026refer=https%3A%2F%2Fcataz.my%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=91aace92-c455-4792-9ee4-98f18ad69791%3A1%3A1\u0026rmtc=t\u0026shv=2\u0026sht=bdCnRcz7_Nrc19Sk_QWrJR0d5oq-1BT5KF-lowIJL5U\u0026fstu=019dee16-8acd-7efb-8335-7421208b388b\u0026st1=81ae11c05e81a6d67e5bd474e5c5dd39\u0026ps1=1777815947 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cataz.my\r\nReferer: https://cataz.my/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.zIJG41O-yyChYotLJ4aVQHmImIk2-G_8aHM7shBIIks\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:48 GMT\r\nContent-Type: text/html\r\nContent-Length: 2277\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Platform,Sec-CH-UA-Model,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version-List\r\naccess-control-allow-origin: https://cataz.my\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; expires=Sun, 10 May 2026 13:45:48 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Mon, 04 May 2026 13:45:48 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Mon, 04 May 2026 13:45:48 GMT; path=/; secure; SameSite=None\npdhtkv23=true; expires=Mon, 04 May 2026 13:45:48 GMT; path=/; secure; SameSite=None\nuncs23=1; expires=Mon, 04 May 2026 13:45:48 GMT; path=/; secure; SameSite=None\nu_pl24385916=1; expires=Mon, 04 May 2026 13:45:48 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 17\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6f4d13297829458993b9a145e25cf361\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4359,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3483)","md5":"998ff1e8e9e9d7865cf95fcf8cd79b9f","sha1":"e6228bda7961844d2c26471b877afa2d071e6fa4","sha256":"be8f13a11a4b6ef3782129ecf62d983f165444dc8aa76bc3838a7e0fc37a5ded","sha512":"0466afcd7e628678c6dabc14a4bbee2638f60334361b03735eb4860d684605d335264cf7bf6d8b11d73a9cd15ae893d919abb6a1183abcc835ff0841b80380ff","ssdeep":"96:Wh9OmeAoz0Md9PGZN3k/TGZNd1ZDANcNCCfMEDaH:O9BeJz0sMBkrMNVkCkCaH","tlshash":"8a911bfe1c66c035142750b5189fa21d1c31a54f6100f940b43cd69affa27e96db9edc","first_seen":"2026-05-03T13:46:18.411117Z","last_seen":"2026-05-03T13:46:18.411117Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:49.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Apr 2026 00:48:28 GMT","end":"Fri, 03 Jul 2026 01:44:30 GMT"},"fingerprint":{"sha1":"21:8F:F6:2A:0C:60:8F:CF:6C:90:BD:69:DB:F8:82:BF:D5:02:9E:2A","sha256":"20:0D:6D:8F:30:A5:C6:F8:45:FA:9B:D0:D8:76:12:30:CC:08:8F:44:47:0D:A2:CA:80:14:E3:AA:E1:AF:EA:5F"}}},"request":{"raw":"GET /sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cataz.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:50 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Sep 2021 07:43:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XuozZJqXu67bhHQ7Yo2lTZheExoWRpno0nAGmmZNfNT%2B9SBWj46fcM1KMmoUhmtfbqANTMyjSKjuo5mLUMZ%2BMp2NkkuK%2FuGMzV660Z13J4SpP7gp%2FmFj48SWlQ5n%2B%2BSUjMs%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9f5fb55469fd120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":1325,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"f6990569c7ffeac1f4a3f6d9eee5da44","sha1":"e7d5e37acf89a8faee252c36fc2c9d6615501d76","sha256":"cc2a9756c81bd570fff8b32e48a413687c33f8abe9c934e743a0769178b4f690","sha512":"be3ebced9d65b29fef8caab46e95f54f1ca645ea5942331c84c964ec033fb7c78506d14eda131948b7f664f1635deaa8d82a63169f9214f72035b087ea104bda","ssdeep":"","tlshash":"a52105692df9c97311e750947b352f1bed92ea87c80a6e0173bc9d684f9ad84cd23407","first_seen":"2023-06-26T22:59:31Z","last_seen":"2026-08-15T10:14:25.116469Z","times_seen":3718,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":48,"dns":34,"connect":1,"send":0,"wait":509,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbs?c=1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:51.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nCookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26971195=1; slec0d2187f588b93badfed924aa0d084bde=[4323733]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, User-Agent, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Platform\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":103,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/gFddBLQ8wj9M9O82iPzgX5KVNHz.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/gFddBLQ8wj9M9O82iPzgX5KVNHz.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33472\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Sat, 22 Nov 2025 13:33:23 GMT\r\nx-bo-server: LA-294\r\nx-downloadsize: 44486\r\nx-bo-origindownloadtime: 145\r\nx-bo-compressionratio: 24.76%\r\nx-bo-processingtime: 12\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.40\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1054\r\ncdn-cachedat: 11/22/2025 13:33:53\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: c4d45d870da9c0e4d05c717fedde3e67\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":33472,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d916422b309738d713c5769c27e88dcb","sha1":"9a19f81f82dd9fa142bc8a4bcdeb22d40840981d","sha256":"9ed702d52a03ba67ef403d06091fc29e7f8f245c4b4b1df205738fc78cdaf693","sha512":"aa6edb00368383ce6963a06ad243fc5138af69d859c2c4ad38dedb7df4a73801c3c080d3e8b9ee0f3f7f8b0b00bb3c0fbbb34138123778210e3297898091accf","ssdeep":"768:qJvBvT0J1rUZSLShDaxCWSyyVnkfjSK2D4dOg+5e8:UKJ9EpaxCWPyVki4Uv","tlshash":"dfe2f1e754293f072785bb18f77b5227d468c5c81e321ca25e8538d4c383aade59392f","first_seen":"2025-11-22T20:24:59.188108Z","last_seen":"2026-05-03T13:46:18.412555Z","times_seen":4,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":98,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:48.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataz.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 02:08:50 GMT","end":"Fri, 19 Jun 2026 02:08:49 GMT"},"fingerprint":{"sha1":"B9:A9:8A:10:1F:C3:5E:12:DC:0D:D2:6E:0F:77:CE:AE:86:67:7B:C4","sha256":"D9:D6:9B:21:39:6B:BE:A9:42:6F:15:5A:C6:1A:95:73:3F:29:76:4E:2D:3F:16:A3:71:EF:E6:CC:54:22:7D:2D"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.4 HTTP/1.1\r\nHost: cataz.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nCookie: hu8935j4i9fq3hpuj9q39=true; s9ifs0idfjlwfie32dekl=0; dom3ic8zudi28v8lr6fgphwffqoz0j6c=91aace92-c455-4792-9ee4-98f18ad69791%3A1%3A1; pp_main_bd04966fff9d34711df560739f10f294=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 10 May 2026 13:45:48 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 03 Dec 2025 16:54:32 GMT\r\netag: \"58ea-69306b48-7282613d2b9c59a3;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4891\r\ndate: Sun, 03 May 2026 13:45:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-16T13:53:02.562153Z","times_seen":311462,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cataz.my","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbs?c=1","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:51.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:39:42 GMT","end":"Mon, 27 Jul 2026 00:39:41 GMT"},"fingerprint":{"sha1":"72:D3:68:BC:A4:4E:55:26:DB:11:49:E2:96:21:2A:F6:6D:D9:43:08","sha256":"32:C2:2C:23:81:37:C1:17:20:76:3E:3A:3C:7A:DB:DC:43:10:FE:F6:F2:BA:21:05:A6:7F:B0:88:91:D5:10:02"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nCookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26971195=1; slec0d2187f588b93badfed924aa0d084bde=[4323731]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Model, X-Device-User-Agent, X-UCBrowser-Device-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Mobile, Device-Stock-UA, X-OperaMini-Phone-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:51.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cataz.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Apr 2026 22:40:32 GMT\r\nexpires: Thu, 29 Apr 2027 22:40:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 313519\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-16T14:30:59.065751Z","times_seen":263968,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/9wuelP6jvq5KMJV275LUpXzsRuM.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/9wuelP6jvq5KMJV275LUpXzsRuM.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22672\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Sat, 25 Apr 2026 00:52:16 GMT\r\nx-bo-version: 1.0.68\r\nx-bo-server: LA-292\r\nx-downloadsize: 49528\r\nx-bo-origindownloadtime: 149\r\nx-bo-processingtime: 9\r\nx-bo-compressionratio: 54.22%\r\ncdn-proxyver: 1.51\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1333\r\ncdn-cachedat: 04/25/2026 04:34:18\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: e2f20b2c00ffcad5b31c5b950d91eeba\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":22672,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e22c43c6a04a6e97ab4284d9d3109f7e","sha1":"cdbd860b2e0bb219704c18558679bf676905c43e","sha256":"495a1111d401361d793841df0b496d07aa5d2f48f1dc1dac7258e021ba8fa10b","sha512":"0d9e58e90771017b113ddc470a681ac9ea57f2a0839d218be7c91eb5b315e32cabf266bed061133bd2125887c66516c626b61948840fd5ae502f8eeccf7eab1c","ssdeep":"384:MW0wP3o0mbpEAwG2IFs+4L81U8Azv7ZMIzdxnB3fUcWZJfz5zNLKEcbfdH:MWRmbKAwfXL81LAzv7ZDzdFBMdTLmbfd","tlshash":"7ca2e146cc94185e2f3a99e7ec9912779e1237975186a8086ed6e27832f868cc732391","first_seen":"2026-05-03T13:46:18.414091Z","last_seen":"2026-05-03T13:46:18.414091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":98,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Goldman\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"E9:E5:B7:DA:0A:AE:59:02:EA:10:61:71:9B:52:3A:08:42:A0:67:A5","sha256":"F6:1D:CE:31:AA:9C:7B:58:1D:1D:14:96:99:B6:58:CC:FB:AE:D5:3C:F8:FB:40:E3:45:2D:4A:54:11:B4:E2:F3"}}},"request":{"raw":"GET /css2?family=Goldman\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 03 May 2026 13:45:46 GMT\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1231,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"504fbd661f5b01bdca0be363a5cd0203","sha1":"ee184514b35aaf8e663a044dae741d9c7cd272b4","sha256":"e7fbf29654ff97463a60366ee37b2041421af60a15c723304ba65d581731c00e","sha512":"72dc51196251a92d88ae0fa028e359c554deaec8d4c3ac65674692dabd872cd438c0da8f8d69e0baead26683529703fa0f1a7a76e25868b62dd8e42f6693d04f","ssdeep":"","tlshash":"1221b191093ba500df834cc12bde7d37ad9ee252b860c5795ffe0888ac5ac25636671d","first_seen":"2025-09-21T23:10:45.141362Z","last_seen":"2026-08-06T05:25:46.694764Z","times_seen":59,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":291,"dns":0,"connect":8,"send":0,"wait":20,"receive":0,"ssl":318},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/70kTz0OmjjZe7zHvIDrq2iKW7PJ.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/70kTz0OmjjZe7zHvIDrq2iKW7PJ.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42826\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Sat, 03 Jan 2026 16:47:52 GMT\r\nx-bo-server: LA-295\r\nx-downloadsize: 94724\r\nx-bo-origindownloadtime: 154\r\nx-bo-compressionratio: 54.79%\r\nx-bo-processingtime: 13\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.43\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 722\r\ncdn-cachedat: 01/03/2026 16:57:11\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 7b41836c256796f60ecbf403b6ff1fd0\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":42826,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"191a9ac13872c950b40f6ce231dbc68e","sha1":"30969131d47fe0f11ca51aa818b76aff245fd19d","sha256":"d6cbab321298c3ff52f57ab8f44f7266bc6f9fdf2b6fa63a275b64eb0b6eceea","sha512":"6f9cfdd0fc1873be3e652a47f315a0adbe18f80d24dd6566d38998c08150ba5be2b537b3b43029e02d5d87cc84fc899c4b03f0222a652e44a3c4b376e755ba74","ssdeep":"768:+DrRjrlxpiMWmt5c/la9OtIBu+GF1TXvmgx0Uetru7b+mCA8r+4HXNca9H:a1/oOZ9OtJh1zRxSrQyLA8P3Nj","tlshash":"f113f146ad444161918e17ac811d139367a87f9cdf4ded6caab889e36c30ff5e38c89c","first_seen":"2026-01-11T23:49:11.977432Z","last_seen":"2026-08-16T13:18:00.950785Z","times_seen":68,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":99,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/tHhxWxge06goXU6ZQH1hj7vK8Hd.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/tHhxWxge06goXU6ZQH1hj7vK8Hd.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36452\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Thu, 02 Apr 2026 17:24:43 GMT\r\nx-bo-server: LA-292\r\nx-downloadsize: 82656\r\nx-bo-origindownloadtime: 150\r\nx-bo-compressionratio: 55.9%\r\nx-bo-processingtime: 38\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1333\r\ncdn-cachedat: 04/02/2026 17:26:51\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: e1d3caa4e994b0f5d9b52f98ba35dcbc\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":36452,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"98ac9e97163ceeccfd58c3b4285eaf68","sha1":"34fdac0fbe54b265edbcd80dd37d339d99eb8824","sha256":"752ba66e29fb425bd1e6d06f23672957771f7661d6573b861708b8c0d4f9bc15","sha512":"09d2f37fda95588b4f96d72577eab69010ed1b7aa46ce39ccd82d7bfceb3dcb3e606211f973ddac21b27d79ee868ca23e1e89a69c4e28db78d909290cdf675e9","ssdeep":"768:CfCfdL24ah5bq4YpbAl0wPn7dOfWWlZP469xDN0D2V+U+cxmLGTl:CfOd6Hh5+Vbg0w7dOfWMBy4kYl","tlshash":"09f2e13db39b59071fd97ab9a6ae0fb1e4c804292110b1c7308b529d097bd54e662e36","first_seen":"2026-05-01T14:21:22.237279Z","last_seen":"2026-08-16T13:18:00.850313Z","times_seen":133,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":97,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/img/close.png","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:50.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/img/close.png HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 591\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65aa84fe-24f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 2920880\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PG76dVR9ePnqpYStd7Xg7W9JEZEbLnM89TF8BUkObIlhCITB9tooW1NxxkkjonnQKFZhOcCNGgEbCUvHEDp%2BeJNPFst4XcOllOJeIJpKyjhfUJIzB%2BfWQitmIWDNjUpzU%2B8BB8Lc9sY%3D\"}]}\r\ncf-ray: 9f5fb5587f2cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced","md5":"9fd5bcb6103d86e317bd1eb019bcbe71","sha1":"6b5a52ea669dcb74946f2bed4bdd7ec985026113","sha256":"0ddd3be104ac7945fb062096df62034a6a24ecc76ba92493c35c62c3c25982ae","sha512":"e244a8842c009fa83e8d9d1088ec5b76ca2a42660568b7886e01724977b9ebd4e43690e0c651e25287c64dcc4826391b34cae6a106e2148139450dd05fc5a562","ssdeep":"","tlshash":"b0f0414e7c5903a1874caf3b18dd00119c27898077c82e0db689eed20e008e215471da","first_seen":"2023-04-11T11:09:41Z","last_seen":"2026-08-15T10:14:25.165507Z","times_seen":6410,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/impr.gif?sid=H4sIAAAAAAAC_1RSy4scRRyu3ixeRHyi5CJ9CKjgzFY_ZrrbXCT4QNBdTSI5eKpXb8rp6ep0dc9MBg8bI54C7iXgsfeb3ezBoOY_kFlBUBS2bwNmL_4JQrzKbAY2Kajfo76P4vf4vt2rT0gXNVt8-omZ6ixjG70udd-8pnNpxtbdvOp6tEsvutd03g8vupOlKUfveEHYpW-5HyoxMBs-9Sj1qOd-oEuVmsnGKQpd3E-8bkK7od_1eiEm5dO5rR1Y5kCOTshL0LJ9_p_0C2gxRz78-T1lB5Up3n5_WGesMiVG8vDzfJCbcY7hWZiWDtL8cMWGsS0h36_B5IerDmBG-8sOwHVL1l59CJ4frsoEHx08rpRnUDm4fBbj0RwqO4JmcwhzG1oeE0BIbG4hH97bNOWY3XyMsiXakvVH_0KPW7L-8BXkwx8vZXriXjFZXWmTW0zSBnoyh96eo6iPUE3XoMdHENXX0PIvsvHoY-TD_S2bGWi5uJB4jAmV-B0R9nqdMEr8TqJU2Eni1IuZ7CdR4p2OSKdzMOugXl7toE4d1IWDoVy4IY1D4bGgnyZSRDRkYSgVp0nsU8oSEaEWt6DlLkS5g6LcwUDfPXbutMR57o3j8z8cO9-1xDn3N6x0YCuCkWwOZGZ929yTma25t_L-ygfNzFTbe-zAVNsqJ2DlLkrZ7Ovihr0NUZ2bTVMrZ2ZpGK-aGeOymWlZEZQ3Fheol0ilvH4nFoHqRDTud5joqU4vSf2YxlHicbmf2qp-ksp52okkSzuMq17H70dcptGSTPeKE_LicjVOdf4rDNTCVUEUqsBnsZBB0KdBwKQXU-mFfsh5P45gdQNt104HOtUteTf-CYVuyevub-DsCDY7gtAOWP0a2HgW-THYdSQU0_zBgFVDM9LquuxyPe0WGaRpUFTrqG46e9kJeXl2-eqlX061cvnPAZT4g6wORNmgKBt8qX8l2M5uPdgqKj3UU7YUz5WKVeoZMH2sfofQLXnhrnOq4u5H9yGKHdji7CdrCHhBkGmCTJ29M97APpHzs3jPfoPt0gHPnBnPSrLPszLbhdULNw2ULyiNo74XxKnyglCKtBeHiewzGgQKlW31f5_d-T8AAP__m5b9Ej4EAAA=","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:48.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 21:50:47 GMT","end":"Thu, 23 Jul 2026 21:50:46 GMT"},"fingerprint":{"sha1":"23:74:93:25:BB:94:6A:F0:09:05:7F:57:73:50:14:CD:19:AA:AF:20","sha256":"13:12:D4:15:47:A9:32:60:B9:69:04:44:B0:1C:A6:FF:80:89:A8:57:85:61:DB:5D:BC:87:06:24:86:84:51:44"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSy4scRRyu3ixeRHyi5CJ9CKjgzFY_ZrrbXCT4QNBdTSI5eKpXb8rp6ep0dc9MBg8bI54C7iXgsfeb3ezBoOY_kFlBUBS2bwNmL_4JQrzKbAY2Kajfo76P4vf4vt2rT0gXNVt8-omZ6ixjG70udd-8pnNpxtbdvOp6tEsvutd03g8vupOlKUfveEHYpW-5HyoxMBs-9Sj1qOd-oEuVmsnGKQpd3E-8bkK7od_1eiEm5dO5rR1Y5kCOTshL0LJ9_p_0C2gxRz78-T1lB5Up3n5_WGesMiVG8vDzfJCbcY7hWZiWDtL8cMWGsS0h36_B5IerDmBG-8sOwHVL1l59CJ4frsoEHx08rpRnUDm4fBbj0RwqO4JmcwhzG1oeE0BIbG4hH97bNOWY3XyMsiXakvVH_0KPW7L-8BXkwx8vZXriXjFZXWmTW0zSBnoyh96eo6iPUE3XoMdHENXX0PIvsvHoY-TD_S2bGWi5uJB4jAmV-B0R9nqdMEr8TqJU2Eni1IuZ7CdR4p2OSKdzMOugXl7toE4d1IWDoVy4IY1D4bGgnyZSRDRkYSgVp0nsU8oSEaEWt6DlLkS5g6LcwUDfPXbutMR57o3j8z8cO9-1xDn3N6x0YCuCkWwOZGZ929yTma25t_L-ygfNzFTbe-zAVNsqJ2DlLkrZ7Ovihr0NUZ2bTVMrZ2ZpGK-aGeOymWlZEZQ3Fheol0ilvH4nFoHqRDTud5joqU4vSf2YxlHicbmf2qp-ksp52okkSzuMq17H70dcptGSTPeKE_LicjVOdf4rDNTCVUEUqsBnsZBB0KdBwKQXU-mFfsh5P45gdQNt104HOtUteTf-CYVuyevub-DsCDY7gtAOWP0a2HgW-THYdSQU0_zBgFVDM9LquuxyPe0WGaRpUFTrqG46e9kJeXl2-eqlX061cvnPAZT4g6wORNmgKBt8qX8l2M5uPdgqKj3UU7YUz5WKVeoZMH2sfofQLXnhrnOq4u5H9yGKHdji7CdrCHhBkGmCTJ29M97APpHzs3jPfoPt0gHPnBnPSrLPszLbhdULNw2ULyiNo74XxKnyglCKtBeHiewzGgQKlW31f5_d-T8AAP__m5b9Ej4EAAA= HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.zIJG41O-yyChYotLJ4aVQHmImIk2-G_8aHM7shBIIks; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl24385916=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:48 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: X-OperaMini-Phone-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Mobile,Device-Stock-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Model,X-Device-User-Agent\r\nx-envoy-upstream-service-time: 2\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: abbce952be199469dcb85109d2c202d0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-content/themes/Avada/js/jquery.min.js","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataz.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 02:08:50 GMT","end":"Fri, 19 Jun 2026 02:08:49 GMT"},"fingerprint":{"sha1":"B9:A9:8A:10:1F:C3:5E:12:DC:0D:D2:6E:0F:77:CE:AE:86:67:7B:C4","sha256":"D9:D6:9B:21:39:6B:BE:A9:42:6F:15:5A:C6:1A:95:73:3F:29:76:4E:2D:3F:16:A3:71:EF:E6:CC:54:22:7D:2D"}}},"request":{"raw":"GET /wp-content/themes/Avada/js/jquery.min.js HTTP/1.1\r\nHost: cataz.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 10 May 2026 13:45:46 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 02 Apr 2025 14:55:16 GMT\r\netag: \"16dc4-67ed4fd4-6a3dfdf122d10f75;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32162\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":93636,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65483)","md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-08-16T13:18:59.742671Z","times_seen":37764,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cataz.my","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:47.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 21:50:47 GMT","end":"Thu, 23 Jul 2026 21:50:46 GMT"},"fingerprint":{"sha1":"23:74:93:25:BB:94:6A:F0:09:05:7F:57:73:50:14:CD:19:AA:AF:20","sha256":"13:12:D4:15:47:A9:32:60:B9:69:04:44:B0:1C:A6:FF:80:89:A8:57:85:61:DB:5D:BC:87:06:24:86:84:51:44"}}},"request":{"raw":"GET /1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:48 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2574\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-PlatformUser-Agent,X-OperaMini-Phone-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List\r\nx-envoy-upstream-service-time: 1\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0e077fcc8dc08669adce3c18680213df\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5146,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5146), with no line terminators","md5":"a141d4cc0ea62b7e58f726a49c7b649e","sha1":"ca9a28b3d7e06f192f20989c96c710bd243d512e","sha256":"42554c0284cc374e33e51ba1c2980fad64bd7600955788facf38b137a1668c80","sha512":"148f99f86db9534dc360f8b266d2d648f7554e616703ff93c369a32f2540eb4d3fad86b449b34e9c19e0805d1aa38dd2cf00412d5569df4fb92a018f70fbbfe4","ssdeep":"96:ctGAdiByQnKauwtTMpX8TxnOgV27JBrHVtH41:c4fycnsgUDpl41","tlshash":"8db1858c3f81f2d407b270af2f2f1509f16d5c20ba89d498d01b95d03e5862adaa7f71","first_seen":"2026-04-30T15:37:40.418293Z","last_seen":"2026-05-04T13:42:54.864213Z","times_seen":154,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":335,"dns":57,"connect":92,"send":0,"wait":98,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/in1R2dDc421JxsoRWaIIAqVI2KE.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/in1R2dDc421JxsoRWaIIAqVI2KE.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22458\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Tue, 10 Mar 2026 17:01:27 GMT\r\nx-bo-server: LA-295\r\nx-downloadsize: 56390\r\nx-bo-origindownloadtime: 141\r\nx-bo-compressionratio: 60.17%\r\nx-bo-processingtime: 28\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.47\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1055\r\ncdn-cachedat: 03/10/2026 17:06:04\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: a7b8fe0fc6cfde679347854e2fa36542\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":22458,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f9895588e7d9c5719dc0029dfa8a6f1e","sha1":"17c588e2648a6e5db9c7a182a704422084f2136e","sha256":"000e55aaebf75acc1e61bcbc15916af070d7445443a732ae86fb437780714baf","sha512":"6ff87ab096397b6f79857fe8445200ef3cc66a5b71d7991f9c736b630d2cc937eb041e31e18cd8ecb3b7bcdb8089cc2fa095095a98f6648613fa6e2356986233","ssdeep":"384:W+P+DVeGwLp7xcBaP419i6idwZSC5Yqz/q+rxt0LnehMeMXubVisoDwLabu:WkEaP6hZ15YA/5rxtUe6rOVisoEOC","tlshash":"aca2d03f7e62d0419ff276819641b2dcdfaa80e128b6e78a95988c1c61416fff46e520","first_seen":"2026-03-28T20:40:41.299819Z","last_seen":"2026-07-28T03:59:13.145485Z","times_seen":133,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":98,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/aamw6JjKwTy6bdviyIcFKekSD6x.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/aamw6JjKwTy6bdviyIcFKekSD6x.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23384\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"68923a24-5b58\"\r\nlast-modified: Tue, 05 Aug 2025 17:06:44 GMT\r\ncdn-storageserver: NY-753\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 751\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/05/2025 18:01:02\r\ncdn-edgestorageid: 1333\r\ncdn-requestid: 06a8289373c47a0674a9b2342b481ea0\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":23384,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fce1358bd645d0ba4345d943bc3fa909","sha1":"9dadbf0f2c13e5bdb1700c44521b710bb41197f2","sha256":"526c293a281a7054b170eb2987395abca3c6167e0e5877674845679728ae3af5","sha512":"2afb5a5c214488a7a95d91dc1c450a8657a76e6009a76a110b67264866137712e4eee928bd1562957110e4192cd48ecb67d9f8eaecd90a9d2148d03ec5258b36","ssdeep":"384:Mrd676188ziOu+Bxa7ajRJhh+0ShWQkd5MYps33OuI0C0izZHYTyu11nDKDoiUSg:MrcjbOu+Oa9Jhh+0SYQkPcH4Kizgyu11","tlshash":"c7b2e16747accf96814842d879601d0e5f0370d63e671e99d4aaba425fdb0d23124ab7","first_seen":"2025-08-30T17:04:22.071124Z","last_seen":"2026-05-03T13:46:18.421562Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":98,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/goldman/v21/pe0uMIWbN4JFplR2HDVyBw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:47.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/goldman/v21/pe0uMIWbN4JFplR2HDVyBw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cataz.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17352\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Apr 2026 08:35:31 GMT\r\nexpires: Fri, 30 Apr 2027 08:35:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 277817\r\nlast-modified: Wed, 10 Sep 2025 16:51:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17352,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17352, version 1.0","md5":"031163d07432c74c68c31fa55a7bf4e4","sha1":"2289ec98adbbc50a6734ba5a78f736bbf70d386a","sha256":"47db53f64d844538346de9daa4200026033bebc71ea7024c9b57c6879adc5299","sha512":"a38a4620093f467b37c8e1057d126f5e24456db25a83ff67cc027bd5557c1610a6c1f0f1eb3b82a38139c29b4e76bf1f8034a96d4e4c55957e7aba247e6fdb00","ssdeep":"384:LkHfk2xW/cpjv1LZ0Qr2Ke5xn/dVa1wc6m/ZmbC:LkM2xW0pjdLZDS/vhy/Zmu","tlshash":"8972cf0e98a6519b5247ccf78dc4365b20df98ec2d32ebf656788ce074ed404a5b81f1","first_seen":"2025-09-19T21:44:58.658559Z","last_seen":"2026-08-01T17:04:22.110858Z","times_seen":199,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":96,"dns":1,"connect":21,"send":0,"wait":22,"receive":5,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/3e/cb/86/3ecb8661368ec67627b66e61e9b95348/1716370706.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:48.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 02:33:25 GMT","end":"Fri, 05 Jun 2026 02:33:24 GMT"},"fingerprint":{"sha1":"4A:66:11:51:1F:1F:F3:84:B6:E4:4F:81:C1:03:83:9F:01:17:7E:82","sha256":"DA:55:E3:02:D5:3C:4E:3A:51:ED:21:0D:F4:32:52:C2:C5:31:87:50:DC:AB:13:D9:93:4A:15:0C:D9:8C:D6:4F"}}},"request":{"raw":"GET /cti/3e/cb/86/3ecb8661368ec67627b66e61e9b95348/1716370706.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55427\r\nserver: nginx/1.21.6\r\nlast-modified: Wed, 22 May 2024 09:38:35 GMT\r\netag: \"664dbd1b-d883\"\r\nexpires: Tue, 05 May 2026 13:45:48 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55427,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 728x90, components 3","md5":"b06bb7ae2540d189906c43e34d263ced","sha1":"387199d671058112bbc858e8830675a08160553d","sha256":"5badfd4a6deeb45d2867ddf90e145131b1edde007ced7347f6a3c737ea2bb391","sha512":"3e35fdff1f2575509462dd548140cdcfdb1eaf9607b12c9c5893e1ef2b94052d194e30a300a7cf58df70c2d42ca98cb4de56229533c876b8813e2aaf1108cfb9","ssdeep":"1536:XkGNq03nN+cF0SgAO1ehMlEiE4yV3j34OerA4trw:0T03BWb1ehexP0z34BA4Jw","tlshash":"6743f1d0aed3ba6be776a143451f485f8938e89482fe81875502c100e4aff5a3f59e8c","first_seen":"2024-06-22T22:57:48Z","last_seen":"2026-05-19T00:50:42.697656Z","times_seen":124,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":132,"dns":88,"connect":19,"send":0,"wait":24,"receive":39,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/7SNT4nhTiiI8rpJWULj0tpIHo61.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/7SNT4nhTiiI8rpJWULj0tpIHo61.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27854\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Fri, 27 Mar 2026 22:23:00 GMT\r\nx-bo-server: LA-296\r\nx-downloadsize: 62585\r\nx-bo-origindownloadtime: 362\r\nx-bo-compressionratio: 55.49%\r\nx-bo-processingtime: 11\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1075\r\ncdn-cachedat: 04/01/2026 07:55:53\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: e77b2dbc143de9093805b2925d3874a9\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":27854,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e251971c0ae45564501f146cb16dab49","sha1":"7051d448dc34f34a270014fc54c88b804c8b328f","sha256":"61b129bb865d111adcb24f4ae17323126d3ae80d318455297264be0f21265e88","sha512":"6b41f474eba2d3be8ecfb6151cf21d08ca17a187f08a490e4b80caf6bf0900c94cac1c3b67ad728aa65a70ffa556b4f61a74c8e511d6c3ab81efbd3c2607e558","ssdeep":"768:Il6re9qixLZlcurmHhsbLxLNPl8Z4gnRF:Il6re9ntlxrmB05+ZDnf","tlshash":"0ac2f11ea993380b9f8291ae6b4724fd437ce3eeda2b3022547119e5eca15f031d1ca4","first_seen":"2026-05-03T13:46:18.42358Z","last_seen":"2026-05-03T13:46:18.42358Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":99,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-content/themes/Avada/img/default.jpg","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataz.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 02:08:50 GMT","end":"Fri, 19 Jun 2026 02:08:49 GMT"},"fingerprint":{"sha1":"B9:A9:8A:10:1F:C3:5E:12:DC:0D:D2:6E:0F:77:CE:AE:86:67:7B:C4","sha256":"D9:D6:9B:21:39:6B:BE:A9:42:6F:15:5A:C6:1A:95:73:3F:29:76:4E:2D:3F:16:A3:71:EF:E6:CC:54:22:7D:2D"}}},"request":{"raw":"GET /wp-content/themes/Avada/img/default.jpg HTTP/1.1\r\nHost: cataz.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 10 May 2026 13:45:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 02 Apr 2025 14:55:16 GMT\r\netag: \"2cf0-67ed4fd4-7dc0e54255b26274;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 11504\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":11504,"size_decoded":0,"mime_type":"image/jpeg","magic":"PNG image data, 123 x 182, 8-bit/color RGBA, non-interlaced","md5":"6b7fad2460aa0eb3efdc7d785ddb69db","sha1":"f5400514f960deb8586058c4eb2e4666f88c2f18","sha256":"71fcc805250d301bf7161c6fe5aec55456057d0a38f802dec36137489c91f16a","sha512":"767a7342e2eaee4d3feaa93e085abb6151c36eab2ed891c253b479abe550104abaf8d352bdb86ead6fbfba740b4c4d3a642806995081bc2e25bf4e4ef89d5145","ssdeep":"192:CJxDDoFqNr+I8yuPg3td3sZXeSs3Fnu5bhGLcOAJHrXA50jGw7anL+T:CJx4FqAUagdd3SXevChGofHrQijR7S2","tlshash":"5d32afd4e317bb3067a1dd7a707405ff9412bdb42068f180bd0fa8237caaa71aad81c4","first_seen":"2026-05-03T13:46:18.424566Z","last_seen":"2026-05-03T13:46:18.424566Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cataz.my","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/854ZZxXdeabAs90mrV72NqShJqR.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/854ZZxXdeabAs90mrV72NqShJqR.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41536\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"6803b311-a240\"\r\nlast-modified: Sat, 19 Apr 2025 14:28:33 GMT\r\ncdn-storageserver: NY-346\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 918\r\nperma-cache: HIT\r\ncdn-proxyver: 1.30\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/20/2025 14:58:43\r\ncdn-edgestorageid: 874\r\ncdn-requestid: a819b239d2abd25f4244ad9747af4d39\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":41536,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"98bcc317da3319b7c71d032028dd683a","sha1":"8cbf0aa3d604e23ddc35bf7c7e7492b4aa512625","sha256":"91494054e4ab4c1fee8068d7db653a460f2ab90a6ce510369f4d589bb42c3425","sha512":"42de512d654a316415bd700c1f21b5c5f2fd19bf9563a001cff55523a4ea0797b775c535a691e4a262aa25d5ca93d15327719625c8183526d100bcc9ba7f14e1","ssdeep":"768:TKQ8y4ULlN/OxoLPxsXr+3PewpI1iitwYu35hqg816y0dCAiy:GzxUh1LpcSnIQitwYwhT816yaMy","tlshash":"31130185034ccf7a2e984146ef1f4ded8da708c38bf4a8ec9b77a904155242e75ca9d4","first_seen":"2026-05-03T13:46:18.425395Z","last_seen":"2026-05-03T13:46:18.425395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":99,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:47.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 01:34:17 GMT","end":"Mon, 27 Jul 2026 01:34:16 GMT"},"fingerprint":{"sha1":"95:86:03:59:0E:03:98:91:87:F0:07:36:44:10:95:8E:67:97:47:D8","sha256":"51:F3:91:79:18:08:9A:FD:A7:80:AD:AA:80:FB:C8:8B:AE:27:FD:79:25:B6:37:2F:1B:C5:60:67:25:A8:A7:02"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:47 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5ee6a6bd0fbc25d8a311c95749e259d4\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-16T13:31:33.505891Z","times_seen":26647,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":74,"dns":0,"connect":30,"send":0,"wait":19,"receive":18,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fjs%2Fscript.js\u0026l=962\u0026fd=10","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:50.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:39:42 GMT","end":"Mon, 27 Jul 2026 00:39:41 GMT"},"fingerprint":{"sha1":"72:D3:68:BC:A4:4E:55:26:DB:11:49:E2:96:21:2A:F6:6D:D9:43:08","sha256":"32:C2:2C:23:81:37:C1:17:20:76:3E:3A:3C:7A:DB:DC:43:10:FE:F6:F2:BA:21:05:A6:7F:B0:88:91:D5:10:02"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fjs%2Fscript.js\u0026l=962\u0026fd=10 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nCookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26971195=1; slec0d2187f588b93badfed924aa0d084bde=[4323731]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Device-Stock-UA, User-Agent, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, Sec-CH-UA-Platform-Version\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":96,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/tO9X4MKXRDi5sEIIake6GJiW8AZ.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/tO9X4MKXRDi5sEIIake6GJiW8AZ.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21342\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Sat, 25 Apr 2026 07:39:40 GMT\r\nx-bo-version: 1.0.68\r\nx-bo-server: LA-296\r\nx-downloadsize: 50711\r\nx-bo-origindownloadtime: 460\r\nx-bo-processingtime: 6\r\nx-bo-compressionratio: 57.91%\r\ncdn-proxyver: 1.51\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1334\r\ncdn-cachedat: 04/25/2026 08:30:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 6f66094d0ce557164dfe764aa58d9052\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":21342,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x456, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"48cbddafd7a0bf342cbf8418faa63d4f","sha1":"c715224923b7d492249f44d66b28e36aa33e760c","sha256":"282aaa3f95c064a8d76139a993e5ad1dc111fc5b7d60535983acceef64ef3a54","sha512":"53cea561f5337ca1d6ad324891ea1aea087fa10dc9c98047bd00a9b8bc917b2967476fd22e7b26492c266e025c493becda80a4d7fcb7c0606bb9ce47caec6ec6","ssdeep":"384:AgbltL9sGykTeKsYht+4BVPfw2S3eBzEZ2yunTFeBHNYh+CNeVoZjLtdLR:AslUth2tHVXwXeuTunTFQYjN0oZjLh","tlshash":"f9a2d1667ac64f26cec52b094795ff278a4a0cbd16ebd6da8f9c840cd785534b350901","first_seen":"2026-05-03T13:46:18.426256Z","last_seen":"2026-05-03T13:46:18.426256Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":98,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:47.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:47 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2574\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,X-UCBrowser-Device-UA,Sec-CH-UA-Full-Version\r\nx-envoy-upstream-service-time: 1\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0e1d381e80cafeea3edeacf2a439ad51\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5146,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5146), with no line terminators","md5":"a141d4cc0ea62b7e58f726a49c7b649e","sha1":"ca9a28b3d7e06f192f20989c96c710bd243d512e","sha256":"42554c0284cc374e33e51ba1c2980fad64bd7600955788facf38b137a1668c80","sha512":"148f99f86db9534dc360f8b266d2d648f7554e616703ff93c369a32f2540eb4d3fad86b449b34e9c19e0805d1aa38dd2cf00412d5569df4fb92a018f70fbbfe4","ssdeep":"96:ctGAdiByQnKauwtTMpX8TxnOgV27JBrHVtH41:c4fycnsgUDpl41","tlshash":"8db1858c3f81f2d407b270af2f2f1509f16d5c20ba89d498d01b95d03e5862adaa7f71","first_seen":"2026-04-30T15:37:40.418293Z","last_seen":"2026-05-04T13:42:54.864213Z","times_seen":154,"resource_available":true,"data":null}},"time_used":662,"timings":{"blocked":284,"dns":1,"connect":92,"send":0,"wait":94,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sensibleexterminatorprivate.com/e374e32a8cd336033ad180d1424bb687/invoke.js","fqdn":"sensibleexterminatorprivate.com","domain":"sensibleexterminatorprivate.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sensibleexterminatorprivate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:40:40 GMT","end":"Tue, 07 Jul 2026 23:40:39 GMT"},"fingerprint":{"sha1":"4C:DE:F3:9F:F1:1D:00:32:A4:14:07:0D:1E:1F:BB:61:B4:81:3A:26","sha256":"14:23:63:9A:6C:B4:FE:B2:DB:AB:CF:63:11:0C:1E:1D:3B:B8:F3:F6:8A:2E:C9:4F:B9:A1:27:4C:94:FA:04:5F"}}},"request":{"raw":"GET /e374e32a8cd336033ad180d1424bb687/invoke.js HTTP/1.1\r\nHost: sensibleexterminatorprivate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:46 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 20261\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA-PlatformUser-Agent\r\nx-envoy-upstream-service-time: 5\r\nHost: sensibleexterminatorprivate.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: fe816c976f53e8dc05f67cd86f2fff0b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51173,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51173), with no line terminators","md5":"ab4c0cd3026680934ce30e3fd8b63e7b","sha1":"9e5ee8c3c7f4cd34ea8c6d359cbe616cda242374","sha256":"20e8358043a7508f9bf72094035b743d2ccaa3f210bd573a9c77cb3fad64468d","sha512":"8aeb4d04a40e882c5484a0db298636f2581c9245b005dfabbd32a0285fdfb004b56c6522483b8b14604fdafd9f1783f2b29e1c502ca69b55a04eac97da3946b2","ssdeep":"768:U17O2e76mHp9GzuNWlpBCHpDBRKO8doFtXj9H6sgT:D2e76mHp9zA7BCHpDBcV+fz9H6sS","tlshash":"283317887fa1b07503b67473622f9046f25c0d0956ecd8dcd087a8a87ea87e9d1b7b25","first_seen":"2026-05-03T13:46:18.427165Z","last_seen":"2026-05-03T13:46:18.427165Z","times_seen":1,"resource_available":true,"data":null}},"time_used":840,"timings":{"blocked":302,"dns":55,"connect":94,"send":0,"wait":101,"receive":95,"ssl":191},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/aJrG7OkoTMPWG5c8opz8a93AZPY.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/aJrG7OkoTMPWG5c8opz8a93AZPY.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37062\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Wed, 25 Mar 2026 02:47:13 GMT\r\nx-bo-server: LA-290\r\nx-downloadsize: 85173\r\nx-bo-origindownloadtime: 236\r\nx-bo-compressionratio: 56.49%\r\nx-bo-processingtime: 12\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1082\r\ncdn-cachedat: 03/25/2026 02:47:14\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: e41a400474d90cddd7d9c58cf13764f5\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":37062,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d061b6e620913e331c662323dcf3025e","sha1":"6bacfb254cf385dfcbebdf2a687ceebaba43a5f9","sha256":"d266eccc219d0b9f7128efb48e77fd20b271054bdfb68b5e961140f964799d17","sha512":"7b8888b3e181283e5374fe236fb59c52f74a690433ca417b7ee42531d7dffe84ea57d797871cb1a8c39371d34babd0748fc57b1db514e621c3499aa6e19951f2","ssdeep":"768:Kvfa3exlD4yYXgIhsJsziWFNPPI5cGKGs/KS1shdK:Kvi3ex6y1OYsziwNnI+JGhdK","tlshash":"a9f2f151c375152abfefd2d0877c2304ba9b039d9da37a59023415db96db2c8356c48c","first_seen":"2026-04-13T17:10:24.098874Z","last_seen":"2026-07-26T02:24:15.913712Z","times_seen":72,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":99,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/beAI26xV7zOMJvJ7UWZt9wtyzkX.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/beAI26xV7zOMJvJ7UWZt9wtyzkX.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33648\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Sun, 12 Apr 2026 21:15:53 GMT\r\nx-bo-version: 1.0.65\r\nx-bo-server: LA-291\r\nx-downloadsize: 67218\r\nx-bo-origindownloadtime: 375\r\nx-bo-processingtime: 9\r\nx-bo-compressionratio: 49.94%\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1053\r\ncdn-cachedat: 04/13/2026 16:55:44\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 17615fb906d43d41cd98f3c9beb42f94\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":33648,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"335641e1a5635c82d9a1270ed2010622","sha1":"b850e94be8d937b84eb48681567ae5fb9f5427fe","sha256":"488c6eaca76cd62037b7645ca698ba40afd2859d729b8570fc174062d2f9f0dc","sha512":"2ea1ac941178d9d99c0174851eda4a63283f10b5ad2a542aedbc0a3bf1690428166581cf49d14e1d0e8aa9a645ac8edb3eb1e0cc60a763840fdca29c4ad0aca1","ssdeep":"768:AZLapwIyg7WeirxUddiQCkEWYflyfDMSomN2AD:AZQRHdgZfly7DkM","tlshash":"44e2f1bfaa6075c3206cad86ec80371d9b525942315993d8cf7d37f2d48fb9c0623a82","first_seen":"2026-05-03T13:46:18.428491Z","last_seen":"2026-05-03T13:46:18.428491Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":98,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/ytCQyuhipANedA1to4EKAOv10xv.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/ytCQyuhipANedA1to4EKAOv10xv.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18742\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67ef6eb9-4936\"\r\nlast-modified: Fri, 04 Apr 2025 05:31:37 GMT\r\ncdn-storageserver: NY-753\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 838\r\nperma-cache: HIT\r\ncdn-proxyver: 1.28\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/26/2025 09:17:47\r\ncdn-edgestorageid: 1054\r\ncdn-requestid: c751170671c54fa81d9dadccc5abb112\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18742,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"54fe879a1b9ae21b8d13508033b1faf7","sha1":"846eeb666b8d3a37a7176d73a1e646c835b7f222","sha256":"f5835a6314739366d0bf29742c46572d32d117a4e01fc1f14ef96d09d06bb85f","sha512":"29774c57c061dbc84d071da74ab9127c70efef7906228b361a3cfccb9f5c4aa568c6bac167be9a2342ebf5d5a9b90ee4d619d7114006e395cedc08fd162d6dad","ssdeep":"384:bS8SrRxcr2xbGPpL+NtF8E6W+cvXRg8nMd/SBaFZszsqy:bZQcr2xyxG2E6LCBgA6/LZKzy","tlshash":"ea82d1a120400455bba9b676bf4f9957642600ce1a748df9d8ff1638e4dd0056df33e7","first_seen":"2026-04-06T18:55:23.706564Z","last_seen":"2026-05-03T13:46:18.429402Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":62,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/z44fNip4QQkZ67adrOqJk63cxsI.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/z44fNip4QQkZ67adrOqJk63cxsI.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43466\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Thu, 30 Apr 2026 13:14:04 GMT\r\nx-bo-version: 1.0.69\r\nx-bo-server: LA-295\r\nx-downloadsize: 76591\r\nx-bo-origindownloadtime: 152\r\nx-bo-processingtime: 13\r\nx-bo-compressionratio: 43.25%\r\ncdn-proxyver: 1.51\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1049\r\ncdn-cachedat: 04/30/2026 13:14:05\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: ab27c93c8753a6ba493fc656f72febb3\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":43466,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"99819bb13f8118dea2d9b5cbb9e57b63","sha1":"88dd5ebdff954c9b770b44b937c2f5d1fa611f72","sha256":"4895d124f273b926b1b72a80bb50453918d6a224b9de1a33750fc79bc5db1a97","sha512":"818bbabb438725421aa429ecf0dded3b99fa6714c2bdb43cb882454e091ae9fd62fb89f89d9dee1d976f6993c7756b19ca7c9e8db4b0cc9864f9fbba06827fa2","ssdeep":"768:dOQ2QUg46k5+18Jzl6RdzU3nK2PTFFQS1ckBj7/77bcLJMS4xvLYrrNpJHzYE/u:dsg45KRRdzU3lPJXqkBjbfgLqTYrr/Jq","tlshash":"9e13f2a2739e4de3124310d17149dea82f673f9711c5f262db2d714f0e96ee418a3b98","first_seen":"2026-05-03T13:46:18.430361Z","last_seen":"2026-05-22T22:27:44.070263Z","times_seen":3,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":98,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"3.120.155.52","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:47.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 14 Apr 2026 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:66:77:D7:9E:99:80:D4:C4:22:4B:79:2F:16:2B:49:2C:08:07:99","sha256":"54:26:39:E0:45:11:B3:20:EE:6C:3E:B3:C0:57:5D:F2:28:8C:E0:E1:C4:F0:BD:56:E7:8C:91:6B:40:CC:0E:0D"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cataz.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Mobile,Device-Stock-UA,User-Agent\r\naccess-control-allow-origin: https://cataz.my\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; expires=Wed, 30 Apr 2036 13:45:47 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"e4841e0961e4f21dab8262cd3f71c32f","sha1":"a0c50467870cb004e3f28479775d1bd5d2717dea","sha256":"f470c3b966690b8dc968d67c8062f9e09beab1bae223009b036954d590e85697","sha512":"51b2fbe094edd5ab1acb49a668bfdf8084ef61dc0dde36d613e791488496e53ba042e29ed1306045223c77dfeb4966f2a2a7381554c053a06292f85fc5ec5b20","ssdeep":"","tlshash":"449004d4477035d0c741d0541151314151cf1105040f15c17330401c070040101f500c","first_seen":"2026-05-03T13:46:18.431169Z","last_seen":"2026-05-03T13:46:18.431169Z","times_seen":1,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":135,"dns":29,"connect":21,"send":0,"wait":22,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-content/uploads/2024/08/Cataz-Favicon.png","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:48.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataz.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 02:08:50 GMT","end":"Fri, 19 Jun 2026 02:08:49 GMT"},"fingerprint":{"sha1":"B9:A9:8A:10:1F:C3:5E:12:DC:0D:D2:6E:0F:77:CE:AE:86:67:7B:C4","sha256":"D9:D6:9B:21:39:6B:BE:A9:42:6F:15:5A:C6:1A:95:73:3F:29:76:4E:2D:3F:16:A3:71:EF:E6:CC:54:22:7D:2D"}}},"request":{"raw":"GET /wp-content/uploads/2024/08/Cataz-Favicon.png HTTP/1.1\r\nHost: cataz.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nCookie: hu8935j4i9fq3hpuj9q39=true; s9ifs0idfjlwfie32dekl=0; dom3ic8zudi28v8lr6fgphwffqoz0j6c=91aace92-c455-4792-9ee4-98f18ad69791%3A1%3A1; pp_main_bd04966fff9d34711df560739f10f294=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 10 May 2026 13:45:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Apr 2025 14:55:16 GMT\r\netag: \"1d9c-67ed4fd4-a59026e686a1e66c;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 7580\r\ndate: Sun, 03 May 2026 13:45:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":7580,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"2ffc3a858c753ec8a1438f9fa19350ca","sha1":"95a813a783a8a285df6faff4e434bfff77ee1d81","sha256":"8809dc5b72e2969fa16b0995cd1fdbc9d4da3b5be8c8bbc415be6019e4473f6e","sha512":"a8a23be2d4fcd4484577952f1dcce4b135ba0fa4d00d8ee913c6b9c3048eae522b0804a55f2d6f836c4a77db785e5e0043cf36abfb816b065593ba04406bcc2b","ssdeep":"192:S/3WR8Ehgmz8vaUvJMDFtLW4fALUsFtaPS9c/:S/37Ehgmz8vQzA7aPS6/","tlshash":"eef19f25a59a74107249d989b8d640e94db3d8d4eaa046b3fcc4d1075c360ffed286eb","first_seen":"2023-05-21T19:51:20Z","last_seen":"2026-05-03T13:46:18.432031Z","times_seen":36,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cataz.my","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html\u0026l=1325\u0026fd=566","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:50.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:39:42 GMT","end":"Mon, 27 Jul 2026 00:39:41 GMT"},"fingerprint":{"sha1":"72:D3:68:BC:A4:4E:55:26:DB:11:49:E2:96:21:2A:F6:6D:D9:43:08","sha256":"32:C2:2C:23:81:37:C1:17:20:76:3E:3A:3C:7A:DB:DC:43:10:FE:F6:F2:BA:21:05:A6:7F:B0:88:91:D5:10:02"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html\u0026l=1325\u0026fd=566 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nCookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26971195=1; slec0d2187f588b93badfed924aa0d084bde=[4323731]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, X-UCBrowser-Device-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Model\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/impr.gif?sid=H4sIAAAAAAAC_1RSvW8cxRuetd39fhLiQ3SgLVyAxJ1nP-5uFxeBiIBAYBMSlIJqZmfWGW5uZ7Oze3c5ChyCoAEpKZD4aNbP2XGDgPwH6IxEYYHEdicRN_wJSEF06M4nBR5p3g89Uzzv876fHFRnpI2Kzd9-y0yU1myr06buc9dUJszIujtXXY-26bZ7TWXdcNsdL0IxfNELwjZ93n1NJn2z5VOPUo967quqkKkZby1ZqPzb2GvHtB36ba8TYlz8t7eVA8sciOEZeQJKNI_9kb4HlcyQDX54Rdp-afIXLg0qzUpTYCiO3836mRllGDwq08JBmh2vfsPYhpAv12Cy49UEMMPDxQTgqiFrTz8Az45XMsGHR-dKuYbMwMX_MBrOIPUMis2QmNtQ4jcCJAI7u8gG93ZMMWI3z1m2YBuy8fBPqFFDNh48hWzw3UWtxu4Vo6tSmcxinNZQ4xnU3gx5dYJysgY1OkFSfgQlfiVbD99ENjjctdpAiflm7DGWyNhvJWGn0wp7sd-KpQxbcZR6ERPduBd7S4tUOgOzDqrFUw6q1EGVOxiIuRvSKEw8FnTTWCQ9GrIwFJLTOPIpZXHSQ5XcghJ3kBT7yIt99NXdhjjrv8OKddiyIc7lDzEU9ZHQ1rf1PaFtxb1V9lc5qKem3DtgR6bckxkBK-6gEPWhym_Y20jK9ekktWJqFoHxsp4yLuqpEiVBcWO-Sb1YSOl1W1HaEa1eV4QtnnbTloiCtBdGIe16vcPUllV9kJ-RxxdeO998to2-nLtU-F7USztRxOOAM5FKEfshY1TQKORCwqoayq4tHZqohrwUfY9cNeRZ92dwdgKrT5AoB6x6BmxUg12vMcnu91k5MEMlr4s2V5N2riFMjbzcQHnTOdBn5MnpO1cv_rjc-8t_fwGZnF6Yf7XA10iKGnlR4331E8GevnV_Ny_VQE3Y4hCulKyU62CqIc4HvyBRDfn_G5eWN7n5-qdI8n3Y_PTCSbAErCHguQOtCLQ8JSuA8Rr2Xz1_VB_Yj7FXOODamXJdOIdcF_ruuUyr5m4aSD-hNOp1vSBKpReEIkk7URiLLqNBIFHaRv11-fN_AgAA__9mFX3MEQQAAA==","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:51.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSvW8cxRuetd39fhLiQ3SgLVyAxJ1nP-5uFxeBiIBAYBMSlIJqZmfWGW5uZ7Oze3c5ChyCoAEpKZD4aNbP2XGDgPwH6IxEYYHEdicRN_wJSEF06M4nBR5p3g89Uzzv876fHFRnpI2Kzd9-y0yU1myr06buc9dUJszIujtXXY-26bZ7TWXdcNsdL0IxfNELwjZ93n1NJn2z5VOPUo967quqkKkZby1ZqPzb2GvHtB36ba8TYlz8t7eVA8sciOEZeQJKNI_9kb4HlcyQDX54Rdp-afIXLg0qzUpTYCiO3836mRllGDwq08JBmh2vfsPYhpAv12Cy49UEMMPDxQTgqiFrTz8Az45XMsGHR-dKuYbMwMX_MBrOIPUMis2QmNtQ4jcCJAI7u8gG93ZMMWI3z1m2YBuy8fBPqFFDNh48hWzw3UWtxu4Vo6tSmcxinNZQ4xnU3gx5dYJysgY1OkFSfgQlfiVbD99ENjjctdpAiflm7DGWyNhvJWGn0wp7sd-KpQxbcZR6ERPduBd7S4tUOgOzDqrFUw6q1EGVOxiIuRvSKEw8FnTTWCQ9GrIwFJLTOPIpZXHSQ5XcghJ3kBT7yIt99NXdhjjrv8OKddiyIc7lDzEU9ZHQ1rf1PaFtxb1V9lc5qKem3DtgR6bckxkBK-6gEPWhym_Y20jK9ekktWJqFoHxsp4yLuqpEiVBcWO-Sb1YSOl1W1HaEa1eV4QtnnbTloiCtBdGIe16vcPUllV9kJ-RxxdeO998to2-nLtU-F7USztRxOOAM5FKEfshY1TQKORCwqoayq4tHZqohrwUfY9cNeRZ92dwdgKrT5AoB6x6BmxUg12vMcnu91k5MEMlr4s2V5N2riFMjbzcQHnTOdBn5MnpO1cv_rjc-8t_fwGZnF6Yf7XA10iKGnlR4331E8GevnV_Ny_VQE3Y4hCulKyU62CqIc4HvyBRDfn_G5eWN7n5-qdI8n3Y_PTCSbAErCHguQOtCLQ8JSuA8Rr2Xz1_VB_Yj7FXOODamXJdOIdcF_ruuUyr5m4aSD-hNOp1vSBKpReEIkk7URiLLqNBIFHaRv11-fN_AgAA__9mFX3MEQQAAA== HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nCookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26971195=1; slec0d2187f588b93badfed924aa0d084bde=[4323733]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:51 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Platform,Sec-CH-UA-Model,Device-Stock-UA,X-Device-User-Agent,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Mobile,X-OperaMini-Phone-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List\r\nset-cookie: iprc_l+fb11781c4d354aa8b2f6b63887d263e6=4323733; expires=Mon, 04 May 2026 13:45:51 GMT; path=/; secure; SameSite=None\niprc_l:4323733=1; expires=Mon, 04 May 2026 13:45:51 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 3\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2f89fdea1b6d4005e5868e9a932d377c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/8HLQLILZLhDQWO6JDpvY6XJLH75.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/8HLQLILZLhDQWO6JDpvY6XJLH75.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35430\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"6800f45d-8a66\"\r\nlast-modified: Thu, 17 Apr 2025 12:30:21 GMT\r\ncdn-storageserver: NY-346\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 831\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/01/2025 15:50:08\r\ncdn-edgestorageid: 1077\r\ncdn-requestid: 82814d79e649da84475fa2e22d5547dd\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":35430,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9b112f21afe4302c92b2b9d168c57387","sha1":"edcedb42f5b60475d60de605802084353063afac","sha256":"5c8be5e13eabd34446a5861fbbe82976128782d7aba3a5abb4195651d918cc96","sha512":"1d25afe5af549d0526bd108817242cfae9b630dbd2029770e247ab839d00844d2f9dfe05f01c8140eecd09c13d8c669123b6ac59d14f895ececa747b5c328948","ssdeep":"768:V+79fyxe2NweSOgZMKeKXT6CT6ur6g0aG6:IEk2NweSqpKXGCuuWD6","tlshash":"2af2f29b170324d1f6ee8281ec9318e48aeb505b73a755e1372872ad115f0b13dff2a5","first_seen":"2026-05-03T13:46:18.433227Z","last_seen":"2026-05-03T13:46:18.433227Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":98,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/udAxQEORq2I5wxI97N2TEqdhzBE.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/udAxQEORq2I5wxI97N2TEqdhzBE.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17074\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Thu, 04 Dec 2025 08:24:43 GMT\r\nx-bo-server: LA-294\r\nx-downloadsize: 54011\r\nx-bo-origindownloadtime: 260\r\nx-bo-compressionratio: 68.39%\r\nx-bo-processingtime: 8\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.41\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 752\r\ncdn-cachedat: 12/15/2025 10:15:32\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 5a79602fdad7c1daad2b3c57e6ab7ef3\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":17074,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"95b79454d78153818d8042ebc281cf33","sha1":"13c55fcccee7f70b617284a30685daed060cb382","sha256":"faa8dc349488fd5a3f777e6c446276c8afdc2e765e93a567ee5195d6c70e2e97","sha512":"b31d9ccd69c5c77add0b8ffdcebf0146d552c419be1f5fdf62be3b570722dc2e5e130b569b0fefcfb31bbb83dbbc6b36688957fe47fc8d246b3302bcace9feec","ssdeep":"384:MfHc7bQrHYp2PfPTKnInr91k3pf7R3lRh+jMLE:MibQrHYQfrKnIr9OF7R11LE","tlshash":"8c72cf41d44ee0e86bdd10bd8181f2348841556aec6d5b839a37bf73a3f9283b78229d","first_seen":"2025-12-23T05:49:57.359747Z","last_seen":"2026-07-05T20:39:17.4606Z","times_seen":12,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":98,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/js/script.js","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:50.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/js/script.js HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cataz.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 13:45:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 155745\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SEZznnOgh6bNuE%2FoJRXfMG40Fo7bmAs1hMxQSENgt8bYJOUU3WpbujZjkp7T6mMiNyAHl3oy7UWcw05KJ2s1SqxiZo7dpI25%2Flcv6YWeOHk%2Fdws7Nm6Fag1JHp9B5ud70RXrZ4pc3NI%3D\"}]}\r\netag: W/\"65aa84fe-3c2\"\r\ncontent-encoding: br\r\ncf-ray: 9f5fb5592adb35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":962,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"0013fbb3bd9e7300fa1bc9f62501dcf0","sha1":"447e4a8994979e2e158b9beff79b94e7d1b29508","sha256":"4cf18df81115ddab6967dc82096077ee024223dac3c6ffc9b810bffb7780a20e","sha512":"288a5e82fdbfdadf11f5a15ed40b54b67dd43fd83f0666abf85ebc0f14ef3b6e5e9104c3491fdb85b40e5556b252d933ee8cbe6e381e96e01170e76c60003dc6","ssdeep":"","tlshash":"e7117d37156882f06257f027a15729d6ee32029ee81a5707721c06cd0ec47b913fa6e7","first_seen":"2023-06-25T06:36:24Z","last_seen":"2026-08-15T10:14:25.093466Z","times_seen":3562,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/jLDEa4aCP4LJAiIyBfMHEnDPYRi.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/jLDEa4aCP4LJAiIyBfMHEnDPYRi.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36884\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Wed, 29 Apr 2026 13:17:19 GMT\r\nx-bo-version: 1.0.68\r\nx-bo-server: LA-296\r\nx-downloadsize: 69966\r\nx-bo-origindownloadtime: 555\r\nx-bo-processingtime: 18\r\nx-bo-compressionratio: 47.28%\r\ncdn-proxyver: 1.51\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1047\r\ncdn-cachedat: 04/29/2026 13:17:20\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 556b14298b35348b714ca027f8fba790\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":36884,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7a76fd1bc1f524b95407efc9a8631090","sha1":"baf5ff4b1cb57b87746b2c843dbd0283b75244f0","sha256":"c181c29333aab9423c57c8d0fdf25bb73f6c27f1c383cf149022f45fd7e32a53","sha512":"1d1dc50d5050026306ee20dca68e81e81566878c7f0ac520d00f121886160b8ff0aed7e926e5a6e73ff70ea01bb115f615c219e9327051145a26275730507d49","ssdeep":"768:/mLcc+X3D9YZv69dNuvvpZyrOgDYuuabdLpocfFsiK/ycNWASAG+fjr:/owX3DscsvOKg0FaZao6i/IWA5NX","tlshash":"fdf2f16371195b5b264dec7c2a3eace1e971743960cc398dd2126ceadc9c3801cc55bd","first_seen":"2026-05-03T13:46:18.435101Z","last_seen":"2026-06-01T06:04:58.833668Z","times_seen":2,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":98,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/hNxs9gVtHK6TDoaHgSi54IkvZkk.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/hNxs9gVtHK6TDoaHgSi54IkvZkk.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31800\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Fri, 01 May 2026 12:27:28 GMT\r\nx-bo-version: 1.0.69\r\nx-bo-server: LA-293\r\nx-downloadsize: 65641\r\nx-bo-origindownloadtime: 532\r\nx-bo-processingtime: 9\r\nx-bo-compressionratio: 51.55%\r\ncdn-proxyver: 1.51\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1076\r\ncdn-cachedat: 05/02/2026 19:28:16\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 1e441b6944d1b1c92fedd2eea21ae336\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":31800,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ede7e52bcf1fefd5f6fbf0dc403e7b91","sha1":"2a673079ea23a6ff3ca2f41e90b35adad9a656b0","sha256":"c202624bbc3cf702eab3967f3571450f8d410bb785385cd024502250092f9539","sha512":"e6a5f8d2ed4cbcb039a8bcfa07c14a441db0e98658785a7cb2344fe13316f41218a77cf43e5ec71165fdadcae6a902b422a8d4180c06a0636590c36d6b5aeff1","ssdeep":"768:u+/TzaaPqJ2skz9BijFEiVJlKM7JQ5MWVqx:17qUskPijiuJlVu5Mf","tlshash":"2de2e1e487dd7e71e3a17e7bb3b16da071d91e946a21b50868a0d706bec2d030cf41b4","first_seen":"2026-05-03T13:46:18.435956Z","last_seen":"2026-05-03T13:46:18.435956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":93,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/abqOz6EL3yXyOOafCPZxjL1M5bQ.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/abqOz6EL3yXyOOafCPZxjL1M5bQ.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43742\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Tue, 09 Dec 2025 23:16:42 GMT\r\nx-bo-server: LA-291\r\nx-downloadsize: 57817\r\nx-bo-origindownloadtime: 146\r\nx-bo-compressionratio: 24.34%\r\nx-bo-processingtime: 12\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.43\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1334\r\ncdn-cachedat: 02/07/2026 20:25:01\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 36f786e7559dc69295479c934bba7e08\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":43742,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x507, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f2cec932f95c08f8a8137cc6d74f4b11","sha1":"1dae1826192a95ad3a4269ac373cd0f09a946254","sha256":"74757f0f308e9378c49522f398a281c1d3ff2f3f69fb0ba3a82bae52ad9eae23","sha512":"953448c947e95d938fa2693383c22a2d6739d9204d971434b02976b0d340d62cfc1eba4e4486662dc355731c16f521feb89e05d161f3a03df551815124f3606b","ssdeep":"768:irDEOlQ79ixAtHPREn88v91B+PQOQG6OqSPdD8IdAWCVx:ipKJiutHZ+88F+oGRqSFDl6WC7","tlshash":"7413f17e137cb8aad090eb5b83c85192362b736f4a8790e76321e7a46487453c3fd11b","first_seen":"2026-01-25T13:17:08.107049Z","last_seen":"2026-05-03T13:46:18.436841Z","times_seen":2,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":98,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/7BpNtNfxuocYEVREzVMO75hso1l.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/7BpNtNfxuocYEVREzVMO75hso1l.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30368\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Tue, 10 Mar 2026 17:57:35 GMT\r\nx-bo-server: LA-292\r\nx-downloadsize: 42228\r\nx-bo-origindownloadtime: 146\r\nx-bo-compressionratio: 28.09%\r\nx-bo-processingtime: 24\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 755\r\ncdn-cachedat: 03/22/2026 11:33:20\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 5a9f34e7a415dc9b798662196906d1b9\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":30368,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bb4eb72d5e9e5ad9045c7a4cfcc769ee","sha1":"52925fd8c3c0f4de006187246502f936e20f1df8","sha256":"694df630e21e4c175bd5c40f1fd2c2213482341774a2621321b61090cf4ec2f6","sha512":"8b2e6d3b2f57716ab0363e64da5667e1cba2777ac8272d775dabdf27ef42ce07d946c58b81d714c8f4c8e4b6cb02ea0ad3b0a2c90d2dab2e0b042c97a8b95377","ssdeep":"768:ehsPMJUrG/TxdxUAVTEFDV51iAV4Exbit:Ny/znQDwPWbit","tlshash":"08d20201c705e91acdda72ca0f79a691f0426c867dcd0655c599bfb345ecd23c15df84","first_seen":"2026-05-03T13:46:18.438099Z","last_seen":"2026-05-03T13:46:18.438099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":100,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-content/plugins/sharethis-share-buttons/css/mu-style.css?ver=1743605716","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataz.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 02:08:50 GMT","end":"Fri, 19 Jun 2026 02:08:49 GMT"},"fingerprint":{"sha1":"B9:A9:8A:10:1F:C3:5E:12:DC:0D:D2:6E:0F:77:CE:AE:86:67:7B:C4","sha256":"D9:D6:9B:21:39:6B:BE:A9:42:6F:15:5A:C6:1A:95:73:3F:29:76:4E:2D:3F:16:A3:71:EF:E6:CC:54:22:7D:2D"}}},"request":{"raw":"GET /wp-content/plugins/sharethis-share-buttons/css/mu-style.css?ver=1743605716 HTTP/1.1\r\nHost: cataz.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 10 May 2026 13:45:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Apr 2025 14:55:16 GMT\r\netag: \"1a-67ed4fd4-7f4b8a0b067eb318;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 26\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"59e211863955a948e58478e522b402c4","sha1":"fb63c77d17ff41f6347ca2b25e32686f2b3c3bcc","sha256":"f85e538e44687fc0feaa2f66a67831ec9f9b03446f115dec74b996da4a0a4a52","sha512":"ca22caa4491919ed44d39e08089e7b6d9851d57a04a55e31c7827474a6d6b904428e069b51a0234a6d1ee048f0c24235bd4c03e7d567e5496cdefc9f2e66bb92","ssdeep":"","tlshash":"4a80008082080a30038282088a0200a0a38a88e003e2a00008a200800aa000020b8083","first_seen":"2023-04-11T19:00:21Z","last_seen":"2026-08-16T12:07:43.658714Z","times_seen":1479,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cataz.my","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/dD5ANxZwvDGbDzKO90EJaUmPrR7.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/dD5ANxZwvDGbDzKO90EJaUmPrR7.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 51912\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Tue, 21 Apr 2026 14:29:54 GMT\r\nx-bo-version: 1.0.65\r\nx-bo-server: LA-291\r\nx-downloadsize: 90695\r\nx-bo-origindownloadtime: 149\r\nx-bo-processingtime: 10\r\nx-bo-compressionratio: 42.76%\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1333\r\ncdn-cachedat: 04/21/2026 14:29:54\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 480e935bec266f8032294164d0c4a30f\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":51912,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a023b1a3704dd5cdd38924a02a88a99d","sha1":"00c0057a95ed328113e06775249942d140c791d3","sha256":"6511c4d9f78e8ec21edee110cf71f48cf1efea0552894d9b781dcc1c30803c4a","sha512":"90febd6992eb3c2542f441b90f856e951485704162f3ff166705969ed3de768a898920cc68ce65f10bdf39db1c7d1ac72ba90276fa6af12b5caea580fccaf050","ssdeep":"768:HtElZIB1JfD5KknJvfRDj3q2bi4pNVbDIVeDdp4Eu8kJy63LFjRleI8t1wS4sTK/:HtoCZlKOdZDTqKdD9pjw5jRlulSfo4","tlshash":"7e330258b1d3c15dcf88c076f65a832bab317f8899ae2335a54317bbe8c1c06d913368","first_seen":"2026-05-03T13:46:18.439615Z","last_seen":"2026-05-03T13:46:18.439615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":99,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/7lRL9n6Zvvl7BMpGzELvzWJx2df.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/7lRL9n6Zvvl7BMpGzELvzWJx2df.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43902\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67ff192c-ab7e\"\r\nlast-modified: Wed, 16 Apr 2025 02:42:52 GMT\r\ncdn-cachedat: 09/18/2025 12:03:00\r\ncdn-storageserver: NY-753\r\ncdn-requestpullcode: 200\r\ncdn-fileserver: 858\r\nperma-cache: HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 755\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: eccebf332579d54b426af99297c8de53\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":43902,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8aea4623c3a87c95b4c50c7c300ccf55","sha1":"d55a37989902f8de85c27e3cccab39f337dc1d43","sha256":"38f73174924321900e3f3f05b43452c8c1cb2613ef33ebd82a52a1083a42100b","sha512":"11beb78e04367f67eb30679e98092425f62bab6e6b5fcb6753f37e82babe3263ce7bcc375ae7ee6927fde4357e5e572d945079529819d1b98aa1711a9f203739","ssdeep":"768:e+ckJNLKDqQtFoMA76Iln+5SfxZcAVyoOO7BYjnADCFPJPGqyYvLlLhirE/:ssp1MA7noCL3woZBYjADkPByYDlLwI","tlshash":"3413f10af535ebfa0de45f538349f62fe947cdbb069a0e8b7c38e95b04a4a03125416c","first_seen":"2026-05-03T13:46:18.440484Z","last_seen":"2026-05-03T13:46:18.440484Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":98,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/cMwLTcG5aVBYeh5W6SVSfowboAf.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/cMwLTcG5aVBYeh5W6SVSfowboAf.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27840\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67f716f4-6cc0\"\r\nlast-modified: Thu, 10 Apr 2025 00:55:16 GMT\r\ncdn-storageserver: NY-753\r\ncdn-requestpullcode: 200\r\ncdn-fileserver: 266\r\nperma-cache: HIT\r\ncdn-proxyver: 1.47\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1082\r\ncdn-cachedat: 02/28/2026 13:52:45\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: cbdc1e7f71600819955d128a28b0e319\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":27840,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2eaf0351c25beb4095f10c8ea38aba1d","sha1":"e7eb55b396fb1ef2440b87659073d0ea01380517","sha256":"1edee3b24f0df0376c510bafef466a0311bf1c66fc11eaafb871e4741432cd6f","sha512":"9b308f29a7186782f3f52f88e52234b53c807ee76c028c072f35cf7b744df91e549d6d7d1bdba1af2710f434198a211adae7fa803fd06dcc2154175f3668aabc","ssdeep":"384:SAwkBGyiIe84nljxRr3BA7lg1do3muQpFtdFbfdWdoqfFzQJJ8B5fhUfNKuAio:SAFltVQjxW5qLbfdWyqtzPfhUfNKu+","tlshash":"d8c2f23225a859f87a7649d4337d6012bad1befe2f3b0c7a3c9384848723436258dd75","first_seen":"2026-05-03T13:46:18.44138Z","last_seen":"2026-05-03T13:46:18.44138Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":98,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"victoriousmansion.com/bd/04/96/bd04966fff9d34711df560739f10f294.js","fqdn":"victoriousmansion.com","domain":"victoriousmansion.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:47.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"victoriousmansion.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:33:52 GMT","end":"Mon, 27 Jul 2026 00:33:51 GMT"},"fingerprint":{"sha1":"73:E9:28:32:5A:02:72:A5:10:EC:3B:5B:D0:C2:FC:6A:2A:56:F5:2A","sha256":"7B:E6:03:4C:36:38:76:B1:AA:B3:C5:92:0F:21:D9:80:60:C3:91:BB:E1:D8:C9:4A:E5:1A:06:FC:56:33:86:28"}}},"request":{"raw":"GET /bd/04/96/bd04966fff9d34711df560739f10f294.js HTTP/1.1\r\nHost: victoriousmansion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:47 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34815\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: X-Device-User-Agent,X-OperaMini-Phone-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Device-Stock-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Mobile\r\nx-envoy-upstream-service-time: 5\r\nHost: victoriousmansion.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 316fda9f0ba8a77311fbdfbb168ac319\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":96908,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4c6078b53c99245a8ea43377342d8a79","sha1":"edc400bd6512723da18d017651f0517c75cac4af","sha256":"2d9141bd684636a1888034d6108402ef4ef541b27492a725122a9263e3e5da4a","sha512":"24c893fe94c024aabdbf09b019cb3099b807781ef8d9f512cb15c5e0e569044b2b2ae1d4d6f9768158246f3339aa96bce10557eac79e1d53f50526666149adc3","ssdeep":"1536:8G6g/qn/325q6EWa8oN39IRnG1VDcN6CwkMDCF9q+Flxx8A9:vIeZB0mdc5cSgq8","tlshash":"0093e8c8bf80f16443f26836222f501ff0a90c5552ddd18de9a2b8af7fb9b48e635594","first_seen":"2026-05-03T13:46:18.442361Z","last_seen":"2026-05-03T13:46:18.442361Z","times_seen":1,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-03T13:45:45.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataz.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 02:08:50 GMT","end":"Fri, 19 Jun 2026 02:08:49 GMT"},"fingerprint":{"sha1":"B9:A9:8A:10:1F:C3:5E:12:DC:0D:D2:6E:0F:77:CE:AE:86:67:7B:C4","sha256":"D9:D6:9B:21:39:6B:BE:A9:42:6F:15:5A:C6:1A:95:73:3F:29:76:4E:2D:3F:16:A3:71:EF:E6:CC:54:22:7D:2D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cataz.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.2.30\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://cataz.my/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]},{"name":"Yoast SEO:27.4","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Yoast SEO Premium:18.0","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":168233,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (10336), with CRLF, LF line terminators","md5":"3158f31d07007545826ab7e789185ea5","sha1":"f59a72281a7bcf6818f1f91c9dc73d8aa367f43b","sha256":"9dcf569afc9b1efcc898017b6dfbd0ac45742106d30c1292e5dd53f6b750ebaa","sha512":"24fb7b2f7c829af8dfdd540c909228c37449aee47aa66d73d531db1bd242b75b676463a04be07a5385393b622a90e092c61049f7ae1c9ac73904e3a890afaccb","ssdeep":"1536:2rBwZsypNYiAXHTtovHqhI3KkaLP6hc6AEYqATiz4hoNEjzMldBCvMEGQEsqQjNB:2rBw70ztrM7Tjt7g","tlshash":"85f392f20c6214ab624793d1b451bf2ce2d6834edb636d58b3bda357b7d4ca89723108","first_seen":"2026-05-03T13:46:18.443135Z","last_seen":"2026-05-03T13:46:18.443135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1114,"timings":{"blocked":275,"dns":217,"connect":24,"send":0,"wait":561,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cataz.my","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/p9ZUzCyy9wRTDuuQexkQ78R2BgF.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/p9ZUzCyy9wRTDuuQexkQ78R2BgF.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18878\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Wed, 02 Apr 2025 01:58:41 GMT\r\nperma-cache: MISS\r\nx-bo-server: LA-293\r\nx-downloadsize: 26449\r\nx-bo-origindownloadtime: 852\r\nx-bo-compressionratio: 28.62%\r\nx-bo-processingtime: 9\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 755\r\ncdn-cachedat: 04/06/2026 13:15:39\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: f59fe7baf290d22f110d3d78a8d49252\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18878,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4f02d08e6614fb0366e7ef9a00971edd","sha1":"27aff8bc593f752e0af9d883425e2f6588ce03fd","sha256":"8f3b1115c8b6739e39074d521a8608e2d6c0bc8f0387f5a917140ae2ca3e497e","sha512":"59955aa302fcac60be0a49ef8becf5b9c3271e3cd6431f7ed2698cdf1ae372964b0a82c1cd17fa909b6a67106e56e5d64ca9a22d6f9ea164260a437635f7676f","ssdeep":"384:vCkcw6bqHtcr3xjqOSHtdNRGyOhK/3NZDFZBqaCCE2vR99QuwhnY4+2uR:qkFhHtlNdNRGyX/9Tqa9p92hnL6","tlshash":"0782e1cc5cbcb66f2429ea59bcc396055019e364d7a0113ac79c067be592f3a27cdc27","first_seen":"2026-05-03T13:46:18.444351Z","last_seen":"2026-05-26T05:20:51.882286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/5P68by2Thn8wHAziyWGEw2O7hco.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/5P68by2Thn8wHAziyWGEw2O7hco.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43820\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67f0d292-ab2c\"\r\nlast-modified: Sat, 05 Apr 2025 06:49:54 GMT\r\ncdn-storageserver: NY-703\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 913\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/01/2025 15:37:30\r\ncdn-edgestorageid: 1079\r\ncdn-requestid: 8cf529a2c581b5ff721eac09dcc8fe8c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":43820,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a95411b2eb0b4aecae3055348f2a46ed","sha1":"a5eca5a638a71c518da7c9326f29a966afa82c18","sha256":"287dbdbaaa13bd0c0174c3918c52b9e1d8d34809a6b664e9d909c0cbebd5e8be","sha512":"41fea81214dc0616426ee7815b3f1904ebf18f8f05d22022b0114dcf7d8c38cc946588a196ce7b2007c7402782c34d44ecb65a018d17793d9358080722b71310","ssdeep":"768:YN366ZSQ0aONSuHSj5HexymA7wpDCg8WNUjJzzkR9hesxGSam1jTrO4IyhDvMZ6m:YkPQsSgG1mA7OC1WNUdz29hhVa0T5bho","tlshash":"c813f1fb6836982b54ce175a6c7d3f94f0b2d96e7081d27c9c1d041a6ed75fa8e22009","first_seen":"2026-05-03T13:46:18.445301Z","last_seen":"2026-05-03T13:46:18.445301Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":99,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"undefined/9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js","fqdn":"undefined","domain":"undefined","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:47.383Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js HTTP/1.1\r\nHost: undefined\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/css/animate.css","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:50.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/css/animate.css HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cataz.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:50 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa84fe-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Ds99JXbolTM7Q%2FMWiqDFegY0yMCFUPopkLtcmVDOUY308Hd%2FKqOVTJ4X4%2BxRCQJN1dZGRFzBpYYCJe70pl85fr2aNkhYpC0IUIxmG2H5WzFrVSgO8Aj28mUC9v%2BYAXoHFQHO30bMEo%3D\"}]}\r\ncf-ray: 9f5fb5583e8fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-08-16T14:36:51.087947Z","times_seen":13407,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":42,"dns":21,"connect":1,"send":0,"wait":457,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css\u0026l=3355\u0026fd=519","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:50.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:39:42 GMT","end":"Mon, 27 Jul 2026 00:39:41 GMT"},"fingerprint":{"sha1":"72:D3:68:BC:A4:4E:55:26:DB:11:49:E2:96:21:2A:F6:6D:D9:43:08","sha256":"32:C2:2C:23:81:37:C1:17:20:76:3E:3A:3C:7A:DB:DC:43:10:FE:F6:F2:BA:21:05:A6:7F:B0:88:91:D5:10:02"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css\u0026l=3355\u0026fd=519 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nCookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26971195=1; slec0d2187f588b93badfed924aa0d084bde=[4323731]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Platform-Version, Device-Stock-UA, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, User-Agent\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/0d/21/87/0d2187f588b93badfed924aa0d084bde.js","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:47.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /0d/21/87/0d2187f588b93badfed924aa0d084bde.js HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:48 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34782\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,Device-Stock-UA,User-Agent\r\nx-envoy-upstream-service-time: 5\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: ed84917efa2c1b9a64da8a5880d54e0a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":92484,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ab6c36f87d4fca06e4790da97d654a6a","sha1":"e27ace5c223b9537d6560b5adaeab0efeb0f56eb","sha256":"932b428d283806b032856103ad24fd064d5a283aa59fc8cffff1bda9136850c9","sha512":"f4f76bf599e7d67be2ef4172fd4bd7436b4055f314169a0a05baf02a6a3b0475b428b44db6331178a0ab80c06c3336f3e02b623aa5b9533c084629bee21e84af","ssdeep":"1536:2l2eABAdWrl7QJWX8jlvjwZ1PTz5Ysk5qMUPK44K:2dSAkrdQJoYlLwrBFkhk","tlshash":"2993c78c7f92f0f5039a24b3232fac16f2ab1d5124fce444d903a8e5ae25319d57ad6c","first_seen":"2026-05-03T13:46:18.446284Z","last_seen":"2026-05-03T13:46:18.446284Z","times_seen":1,"resource_available":true,"data":null}},"time_used":784,"timings":{"blocked":289,"dns":1,"connect":96,"send":0,"wait":107,"receive":95,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/impr.gif?sid=H4sIAAAAAAAC_1RSzYscRRSv3gQvIsEPlFykDwEVMrPVHzPdbS4SNF50N5poDp7qqzfl9HR1urpnJoOHjRFPAfcieOz9zW72oBjzH8isICgI254Gkr149yLEq8xmYGNBvY_6PYr3fu_39W59TLqo2eLqh2aqs4yt97rUffOGzqUZW3fjuuvRLr3k3tB5P7zkTpamHL3tBWGXvuW-r8TArPvUo9SjnntFlyo1k_UTFLr4IfG6Ce2GftfrhZiU_89t7cAyB3J0TF6Clu25v9LPoMUc-fCnd5UdVKa4-N6wzlhlSozkwSf5IDfjHMPTMC0dpPnBqhrGtoR8twaTH6wmgBntLScA1y1Ze_UxeH6wahN8tP-0U55B5eDyeYxHc6jsEJrNIcxdaHlEACGxsYl8eH_DlGN2-ynKlmhLzj75B3rckrOPX0E-_PFypifuNZPVlTa5xSRtoCdz6K05ivoQ1XQNenwIUX0JLf8g608-QD7c27SZgZaLC4nHmFCJ3xFhr9cJo8TvJEqFnSROvZjJfhIl3glFOp2DWQf18moHdeqgLhwM5cINaRwKjwX9NJEioiELQ6k4TWKfUpaICLW4Ay13IMptFOU2BvrbI-deS5wX3jg6__2R801LnDOPYKUDWxGMZLMvM-vb5r7MbM29lfdXPmhmptraZfum2lI5ASt3UMpmTxe37F2I6sxsmlo5M0vDeNXMGJfNTMuKoLy1uEC9RCrl9Tsx73udyFO8k0jOOyKQVIqgJ_tU7qW2qp8tZUJ2IpXyThwEvU4U-p5PYx7EMd8tjsmLy9U41fkvMFALVwVRqAKfxUIGQZ8GAZNeTKUX-iHn_TiC1Q20XTshdKpb8k78AIVuyevur-DsEDY7hNAOWP0a2HgW-THYTSQU0_zhgFVDM9LqpuxyPe0WGaRpUFRnUd12drNj8vLs4-uXfz7RytUrn0KJ38nqQJQNirLB5_oXgq3szsPNotJDPWVL8VyrWKWeA9NH6jcI3ZJzfz86UfHFPx9AFNuwxelP1hDwgiDTBJk6fWe8gX0m56fxrv0KW6UDnjkznpVkj2dltgOrF24aKF9QGkd9L4hT5QWhFGkvDhPZZzQIFCrb6n8_uvdfAAAA___0qIKvPgQAAA==","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:48.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSzYscRRSv3gQvIsEPlFykDwEVMrPVHzPdbS4SNF50N5poDp7qqzfl9HR1urpnJoOHjRFPAfcieOz9zW72oBjzH8isICgI254Gkr149yLEq8xmYGNBvY_6PYr3fu_39W59TLqo2eLqh2aqs4yt97rUffOGzqUZW3fjuuvRLr3k3tB5P7zkTpamHL3tBWGXvuW-r8TArPvUo9SjnntFlyo1k_UTFLr4IfG6Ce2GftfrhZiU_89t7cAyB3J0TF6Clu25v9LPoMUc-fCnd5UdVKa4-N6wzlhlSozkwSf5IDfjHMPTMC0dpPnBqhrGtoR8twaTH6wmgBntLScA1y1Ze_UxeH6wahN8tP-0U55B5eDyeYxHc6jsEJrNIcxdaHlEACGxsYl8eH_DlGN2-ynKlmhLzj75B3rckrOPX0E-_PFypifuNZPVlTa5xSRtoCdz6K05ivoQ1XQNenwIUX0JLf8g608-QD7c27SZgZaLC4nHmFCJ3xFhr9cJo8TvJEqFnSROvZjJfhIl3glFOp2DWQf18moHdeqgLhwM5cINaRwKjwX9NJEioiELQ6k4TWKfUpaICLW4Ay13IMptFOU2BvrbI-deS5wX3jg6__2R801LnDOPYKUDWxGMZLMvM-vb5r7MbM29lfdXPmhmptraZfum2lI5ASt3UMpmTxe37F2I6sxsmlo5M0vDeNXMGJfNTMuKoLy1uEC9RCrl9Tsx73udyFO8k0jOOyKQVIqgJ_tU7qW2qp8tZUJ2IpXyThwEvU4U-p5PYx7EMd8tjsmLy9U41fkvMFALVwVRqAKfxUIGQZ8GAZNeTKUX-iHn_TiC1Q20XTshdKpb8k78AIVuyevur-DsEDY7hNAOWP0a2HgW-THYTSQU0_zhgFVDM9LqpuxyPe0WGaRpUFRnUd12drNj8vLs4-uXfz7RytUrn0KJ38nqQJQNirLB5_oXgq3szsPNotJDPWVL8VyrWKWeA9NH6jcI3ZJzfz86UfHFPx9AFNuwxelP1hDwgiDTBJk6fWe8gX0m56fxrv0KW6UDnjkznpVkj2dltgOrF24aKF9QGkd9L4hT5QWhFGkvDhPZZzQIFCrb6n8_uvdfAAAA___0qIKvPgQAAA== HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.zIJG41O-yyChYotLJ4aVQHmImIk2-G_8aHM7shBIIks; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl24385916=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:48 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Platform,Sec-CH-UA-Model,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version-List\r\nx-envoy-upstream-service-time: 3\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b344280d99a211a27da4d497c6e279a0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-content/uploads/2026/05/Haplos-At-Pagmamahal-2026-09876wyjekr.jpg","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataz.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 02:08:50 GMT","end":"Fri, 19 Jun 2026 02:08:49 GMT"},"fingerprint":{"sha1":"B9:A9:8A:10:1F:C3:5E:12:DC:0D:D2:6E:0F:77:CE:AE:86:67:7B:C4","sha256":"D9:D6:9B:21:39:6B:BE:A9:42:6F:15:5A:C6:1A:95:73:3F:29:76:4E:2D:3F:16:A3:71:EF:E6:CC:54:22:7D:2D"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/Haplos-At-Pagmamahal-2026-09876wyjekr.jpg HTTP/1.1\r\nHost: cataz.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 10 May 2026 13:45:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 03 May 2026 08:33:12 GMT\r\netag: \"cd92-69f70848-a3aed424f62b7282;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 52626\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":52626,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 445x700, components 3","md5":"3b1ba0b054d498de964da890538bfac1","sha1":"cc864bea36ba59a8888e9207c48e6e5212e0ed41","sha256":"9d5e5cdd2c3b59e5fefa715bb0d9588282ece8f19c11b52bf4094a5761f53934","sha512":"928af607874d595cbb93f9a20c8d862e1a9044c9f721e6bfd32f9e12aaf6d3d0164ec7d0f54c621d5a1880fb58d18c98ce2c2291da37029a2334b2e60f73ea99","ssdeep":"768:QVIfPrHlDIWwWaQ9XXv/uGg6cPrY3yqOoX89GSWYIaCDA5r9z40h+RyApPGsgJ4E:hjNIa1+fVTtdpFCDA5hU1PG4Tax","tlshash":"c033f12951a25a617c5c4f59307b262fc912a473c2a14d135aeaedbc3db48c3aed25f0","first_seen":"2026-05-03T13:46:18.447401Z","last_seen":"2026-05-03T13:46:18.447401Z","times_seen":1,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cataz.my","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/5mVyFHSY2rSsNgD4NfEwV82HigU.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/5mVyFHSY2rSsNgD4NfEwV82HigU.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16578\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67fb2068-40c2\"\r\nlast-modified: Sun, 13 Apr 2025 02:24:40 GMT\r\ncdn-storageserver: NY-833\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 916\r\nperma-cache: HIT\r\ncdn-proxyver: 1.28\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/04/2025 16:59:00\r\ncdn-edgestorageid: 874\r\ncdn-requestid: d9727103f1cd911388d31b076de78f6a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16578,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b7d538dfa0b926f0f7a0fd91b75a1703","sha1":"ea519a466edd6df7ab8e36836f2e34286daafa9d","sha256":"18baa553d6ce0123b3d52cf0d2f38d92e1aedff0b8d2f62ee518346d7561a275","sha512":"4ded5a51cbc99e2af1bd44dfaa40bfaad1509a8b5eff282d27b77974881a4d2c0bb49d12b7af04d6f7c88358912727d14558993ec37ffbd69fa3f63b0bd075a8","ssdeep":"384:Xi4idogoX5TtVqnnGgNsKM5lG/smbkCJYsy6apYV:S4i0RbqnnG+p/smQC6BpYV","tlshash":"ce72d0ed90856481319f77599a2c9f9ad39fa90c0cc38fc1d51b4526fe63063cad0dea","first_seen":"2026-05-03T13:46:18.448827Z","last_seen":"2026-05-03T13:46:18.448827Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":98,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/68/a5/58/68a558e3ab9827233b8f6de17f758f22.js","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:47.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /68/a5/58/68a558e3ab9827233b8f6de17f758f22.js HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:48 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 37614\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Platform,Device-Stock-UA,X-UCBrowser-Device-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-Device-User-Agent,X-OperaMini-Phone-UA\r\nx-envoy-upstream-service-time: 4\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9416bebc0150180c34c34479b04e9226\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103360,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f5f3b8b6277039fbb8df70f8e9454abf","sha1":"539aae34599e3dbd2a7cb3038ab3ada53a6ad4b1","sha256":"32bd23c1906e71e2cccfc380e71546cba539d5e939a67f7229fc54fe12e1e10d","sha512":"f666806ddae9c14c1283572de30ec23ecdda34cc8f10dde351295f690a259f6f055ffa4ea502e6611bfbcc8c83f87b2985bdedac8a94b8bd79ee8aa860ef9646","ssdeep":"1536:kHLBN82ttARd5zkYcWZ+u9DJvDWaBBl2qc0t7urHYeCz6Q3d3icPS6cQBG7o:cBQ8u91v7Hl1c0t7urHysOJ","tlshash":"79a3c68cbf50f55853f62432222f940af0e90c5641dcd198fa52b8ea7f7cf48e9769a4","first_seen":"2026-05-03T13:46:18.450072Z","last_seen":"2026-05-03T13:46:18.450072Z","times_seen":1,"resource_available":true,"data":null}},"time_used":789,"timings":{"blocked":292,"dns":1,"connect":96,"send":0,"wait":105,"receive":96,"ssl":196},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/sbar.json?key=0d2187f588b93badfed924aa0d084bde\u0026uuid=91aace92-c455-4792-9ee4-98f18ad69791%3A1%3A1","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:48.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:39:42 GMT","end":"Mon, 27 Jul 2026 00:39:41 GMT"},"fingerprint":{"sha1":"72:D3:68:BC:A4:4E:55:26:DB:11:49:E2:96:21:2A:F6:6D:D9:43:08","sha256":"32:C2:2C:23:81:37:C1:17:20:76:3E:3A:3C:7A:DB:DC:43:10:FE:F6:F2:BA:21:05:A6:7F:B0:88:91:D5:10:02"}}},"request":{"raw":"GET /sbar.json?key=0d2187f588b93badfed924aa0d084bde\u0026uuid=91aace92-c455-4792-9ee4-98f18ad69791%3A1%3A1 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cataz.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:49 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 3511\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: X-OperaMini-Phone-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Mobile,Device-Stock-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Model,X-Device-User-Agent\r\naccess-control-allow-origin: https://cataz.my\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; expires=Sun, 10 May 2026 13:45:49 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Mon, 04 May 2026 13:45:49 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Mon, 04 May 2026 13:45:49 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Mon, 04 May 2026 13:45:49 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Mon, 04 May 2026 13:45:49 GMT; path=/; secure; SameSite=None\nu_pl26971195=1; expires=Mon, 04 May 2026 13:45:49 GMT; path=/; secure; SameSite=None\nslec0d2187f588b93badfed924aa0d084bde=[4323731]; expires=Sun, 03 May 2026 13:45:54 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 220\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2c4ba1ae7066a35cec918f5515de55c9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":5597,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"397f35f9cc7ef9790fd61063f78eec62","sha1":"c70a0067a5981242084e36b2eec280c458f6370a","sha256":"163919300584f56f4438c422b0a5958c0e233381268cd2e6d3f15f2f173c4ab9","sha512":"5479a97c8dd757632740b4f3838aa07b9609702628383f71069900d1c700b628a0bb62ae1822ef7a890f17473c482277c898c5a388ac11ca6b8a1fec2958aa5d","ssdeep":"96:9z+csa+kFMb4XmM0csa+kFMb4XmM9JgO440l8RigcE2zax9tayY9p0njRzLY5:9zbn+qMb4xn+qMb4t440ywzaxzayY9Gs","tlshash":"54b16cefa50630ab2f179c790e09ad345d47986b421382dcd9f1a3db5aae5564f0013d","first_seen":"2026-05-03T13:46:18.451105Z","last_seen":"2026-05-03T13:46:18.451105Z","times_seen":1,"resource_available":false,"data":null}},"time_used":995,"timings":{"blocked":340,"dns":57,"connect":92,"send":0,"wait":315,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/watch.479859318450.js?key=e374e32a8cd336033ad180d1424bb687\u0026kw=%5B%22cataz%22%2C%22sbs%22%2C%22watch%22%2C%22latest%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22online%22%2C%22free%22%2C%222024%22%2C%221080p%22%2C%22net%22%5D\u0026refer=https%3A%2F%2Fcataz.my%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=91aace92-c455-4792-9ee4-98f18ad69791%3A1%3A1","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:47.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /watch.479859318450.js?key=e374e32a8cd336033ad180d1424bb687\u0026kw=%5B%22cataz%22%2C%22sbs%22%2C%22watch%22%2C%22latest%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22online%22%2C%22free%22%2C%222024%22%2C%221080p%22%2C%22net%22%5D\u0026refer=https%3A%2F%2Fcataz.my%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=91aace92-c455-4792-9ee4-98f18ad69791%3A1%3A1 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cataz.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:47 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Device-Stock-UA,X-Device-User-Agent,User-Agent,Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://cataz.my\r\naccess-control-allow-credentials: true\r\nlocation: https://realizationnewestfangs.com/watch.479859318450.js?key=e374e32a8cd336033ad180d1424bb687\u0026kw=%5B%22cataz%22%2C%22sbs%22%2C%22watch%22%2C%22latest%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22online%22%2C%22free%22%2C%222024%22%2C%221080p%22%2C%22net%22%5D\u0026refer=https%3A%2F%2Fcataz.my%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=91aace92-c455-4792-9ee4-98f18ad69791%3A1%3A1\u0026rmtc=t\u0026shv=2\u0026sht=bdCnRcz7_Nrc19Sk_QWrJR0d5oq-1BT5KF-lowIJL5U\u0026fstu=019dee16-8acd-7efb-8335-7421208b388b\u0026st1=81ae11c05e81a6d67e5bd474e5c5dd39\u0026ps1=1777815947\r\nset-cookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; expires=Sun, 10 May 2026 13:45:47 GMT; path=/; secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.zIJG41O-yyChYotLJ4aVQHmImIk2-G_8aHM7shBIIks; expires=Sun, 03 May 2026 13:46:47 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8daaf3beefd0c2a2c366496205030f96\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4359,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":true,"data":null}},"time_used":663,"timings":{"blocked":282,"dns":1,"connect":92,"send":0,"wait":96,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-content/uploads/2024/08/Cataz-Favicon-50x50.png","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:48.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataz.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 02:08:50 GMT","end":"Fri, 19 Jun 2026 02:08:49 GMT"},"fingerprint":{"sha1":"B9:A9:8A:10:1F:C3:5E:12:DC:0D:D2:6E:0F:77:CE:AE:86:67:7B:C4","sha256":"D9:D6:9B:21:39:6B:BE:A9:42:6F:15:5A:C6:1A:95:73:3F:29:76:4E:2D:3F:16:A3:71:EF:E6:CC:54:22:7D:2D"}}},"request":{"raw":"GET /wp-content/uploads/2024/08/Cataz-Favicon-50x50.png HTTP/1.1\r\nHost: cataz.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nCookie: hu8935j4i9fq3hpuj9q39=true; s9ifs0idfjlwfie32dekl=0; dom3ic8zudi28v8lr6fgphwffqoz0j6c=91aace92-c455-4792-9ee4-98f18ad69791%3A1%3A1; pp_main_bd04966fff9d34711df560739f10f294=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 10 May 2026 13:45:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Apr 2025 14:55:16 GMT\r\netag: \"68d-67ed4fd4-10eb6468abb596e3;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1677\r\ndate: Sun, 03 May 2026 13:45:48 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":1677,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"03ffbdab7398aa92e994647ef6ce9f4a","sha1":"2815afa578b68f48d2c6cc38f0bdcedecc4c7c31","sha256":"83b64cf7e6a683cc9946544ab61129c762189988ff105e73ea858300476e67e0","sha512":"fa8dbbd06251666258177d1564f674da4126af01cf6f385493c2dd3fbee9f278a53892f1878387921debde4c4ea50d933fca79e6e8743b9d4fb8b9dc7ba656c8","ssdeep":"","tlshash":"1531f8ed1e543ab437a3b13d86c340fdb7c60a44d240c3a98b928a532facd5652332c2","first_seen":"2026-05-03T13:46:18.456915Z","last_seen":"2026-05-03T13:46:18.456915Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cataz.my","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/qNdhWirfm6hgJyn8MNZbTXa6NRE.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/qNdhWirfm6hgJyn8MNZbTXa6NRE.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43906\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 27 Apr 2026 17:27:58 GMT\r\nx-bo-version: 1.0.68\r\nx-bo-server: LA-296\r\nx-downloadsize: 73108\r\nx-bo-origindownloadtime: 150\r\nx-bo-processingtime: 10\r\nx-bo-compressionratio: 39.94%\r\ncdn-proxyver: 1.51\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 874\r\ncdn-cachedat: 04/27/2026 17:37:56\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: fda4fa917665be9d36474ee688ef06f2\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":43906,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5ce041a5c2ea4453f011371fe7ba45d9","sha1":"102bcf71f5340b18ba45928d20eef18a4c0cabb2","sha256":"9c79a78ff4d4a259065f5fd49413e712045fc857727c26342179d3395d9c63d0","sha512":"d6e22bfda3316f152479b39ce726d156135bc562cee3fecd8d2fc5dfa50dde96e40a0f4092a593fe27d3788a61191b2e5cca33ca3d52c1ccb1067fff8f7c0328","ssdeep":"768:CzTagIujH9GINP+qXyaDff5Q9/hN0CWtH3vdw+KKGO2chE2LIkxNR:CF7jHYCGqC8fWf0CWtXv+1KG9chEUNR","tlshash":"411302c3b604f615b55bbea62321e8cf36602dbadb511688d7e62f6d5c4c08338b4246","first_seen":"2026-05-03T13:46:18.457834Z","last_seen":"2026-05-03T13:46:18.457834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":98,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/sRvxRFx4INJNqgmpMbijQTWwUWX.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/sRvxRFx4INJNqgmpMbijQTWwUWX.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28834\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Tue, 27 May 2025 12:13:18 GMT\r\nperma-cache: MISS\r\nx-bo-server: LA-290\r\nx-downloadsize: 42653\r\nx-bo-origindownloadtime: 247\r\nx-bo-compressionratio: 32.4%\r\nx-bo-processingtime: 11\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.28\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/27/2025 12:13:19\r\ncdn-edgestorageid: 755\r\ncdn-requestid: 47bcfff48641041a21760d8b815917e9\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":28834,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bd99323b408320cec8e0d996b76f28bc","sha1":"64943ce57fea8940af9b23443d02388d981acade","sha256":"72a098fb370fb7af78213dc1a06bb24068f79826f802e3c739b500a7dbfc21ee","sha512":"ca1f4e30cdba2724d26413ee089b7e96ee3ad1f40a3766568dc1d3ae5c2a7316a3c7e0a21428522d9292f80de0d3fb1b77e880923e1c0c95fcbdfd72a7c71e3d","ssdeep":"768:SjDRg3vUPJAttlmfZPJdXdfRl5pgBB1DnJG+0d:ISMPWtXKPjdppiXDJGFd","tlshash":"16d2e18a7ced8e160ce25b202115b2f82c6214debc55998d813772873ea8630c7e55b6","first_seen":"2026-05-03T13:46:18.458779Z","last_seen":"2026-07-25T18:30:39.153659Z","times_seen":2,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":99,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.1299410051134.js?key=e374e32a8cd336033ad180d1424bb687\u0026kw=%5B%22cataz%22%2C%22sbs%22%2C%22watch%22%2C%22latest%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22online%22%2C%22free%22%2C%222024%22%2C%221080p%22%2C%22net%22%5D\u0026refer=https%3A%2F%2Fcataz.my%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=91aace92-c455-4792-9ee4-98f18ad69791%3A1%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:47.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 21:50:47 GMT","end":"Thu, 23 Jul 2026 21:50:46 GMT"},"fingerprint":{"sha1":"23:74:93:25:BB:94:6A:F0:09:05:7F:57:73:50:14:CD:19:AA:AF:20","sha256":"13:12:D4:15:47:A9:32:60:B9:69:04:44:B0:1C:A6:FF:80:89:A8:57:85:61:DB:5D:BC:87:06:24:86:84:51:44"}}},"request":{"raw":"GET /watch.1299410051134.js?key=e374e32a8cd336033ad180d1424bb687\u0026kw=%5B%22cataz%22%2C%22sbs%22%2C%22watch%22%2C%22latest%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22online%22%2C%22free%22%2C%222024%22%2C%221080p%22%2C%22net%22%5D\u0026refer=https%3A%2F%2Fcataz.my%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=91aace92-c455-4792-9ee4-98f18ad69791%3A1%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cataz.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:48 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Model,Sec-CH-UA-Mobile\r\naccess-control-allow-origin: https://cataz.my\r\naccess-control-allow-credentials: true\r\nlocation: https://kettledroopingcontinuation.com/watch.1299410051134.js?key=e374e32a8cd336033ad180d1424bb687\u0026kw=%5B%22cataz%22%2C%22sbs%22%2C%22watch%22%2C%22latest%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22online%22%2C%22free%22%2C%222024%22%2C%221080p%22%2C%22net%22%5D\u0026refer=https%3A%2F%2Fcataz.my%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=91aace92-c455-4792-9ee4-98f18ad69791%3A1%3A1\u0026rmtc=t\u0026shv=2\u0026sht=-k217JM71hlhY8_GHk5s1Roi8fbCoxTIMjdknayQgwg\u0026fstu=019dee16-8bbf-7daf-abe5-267bdf708790\u0026st1=39bc45b35302393bceb13422bdd5c8bd\u0026ps1=1777815948\r\nset-cookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; expires=Sun, 10 May 2026 13:45:48 GMT; path=/; secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.zIJG41O-yyChYotLJ4aVQHmImIk2-G_8aHM7shBIIks; expires=Sun, 03 May 2026 13:46:48 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a74e4f433d3527f9edcd5468ae0054ea\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4351,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":358,"dns":57,"connect":97,"send":0,"wait":101,"receive":0,"ssl":201},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/css/style.css","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:50.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/css/style.css HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cataz.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:50 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa84fe-d1b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cTRWVjohQTjoZzGflFgoUC3IETB6G3aXHztx7JYBCiMtwAT3bqlIIbuF5NmaInlJqsTkEce4ilXrO4fQlEKlElvdNl%2FqvcYpdrN9aekmNe2ll2PtUJDcDJdIqWtH5ah3r%2Fwao6qwIBo%3D\"}]}\r\ncf-ray: 9f5fb5583e9bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3355,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"039a6734d79ed9aa51cf81c52479c5fe","sha1":"9cf29c4ea1a3880681d50c7228374f8073b7778b","sha256":"a15bad73fc8907795285b78a4a1a1bf5e7f68b4d39988b9bb165444819cf9eb1","sha512":"879f067d02f582c2ff8f9c0308cbb44b24964136c4d8074f1a1b200169b520bb49fdd2b290772dfbc3ca432fba2ce9d5b1a398eb14746613cc942dd7567fa1d9","ssdeep":"","tlshash":"3a61ba966b670a04b51ad0ab3f667b4723084007995fed757fc8620ccfc92a8d6d378e","first_seen":"2024-02-12T03:25:01Z","last_seen":"2026-08-15T10:14:25.127099Z","times_seen":3465,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":43,"dns":7,"connect":3,"send":0,"wait":457,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-content/uploads/2026/05/Langit-Sa-Dulo-Ng-Gabi-09876wyhje.jpg","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataz.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 02:08:50 GMT","end":"Fri, 19 Jun 2026 02:08:49 GMT"},"fingerprint":{"sha1":"B9:A9:8A:10:1F:C3:5E:12:DC:0D:D2:6E:0F:77:CE:AE:86:67:7B:C4","sha256":"D9:D6:9B:21:39:6B:BE:A9:42:6F:15:5A:C6:1A:95:73:3F:29:76:4E:2D:3F:16:A3:71:EF:E6:CC:54:22:7D:2D"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/Langit-Sa-Dulo-Ng-Gabi-09876wyhje.jpg HTTP/1.1\r\nHost: cataz.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 10 May 2026 13:45:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 01 May 2026 06:29:38 GMT\r\netag: \"e116-69f44852-7a0c40a0d2cee607;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 57622\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57622,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 445x700, components 3","md5":"76c3be9283be1db4da0e471aa23093f2","sha1":"c88ebc4d1ea06fb5e188d5fe01198b72a03a2329","sha256":"54e3a6ca502f0fa638efb5cc1674ff2fc8296a5a9a2be166cc7cf69054614b9c","sha512":"f016a0526eea67cf73c239703cd73238179388d9c47e57e8012aaf89ccbf6cc1e9c43f87b89d9f09b8a748946438f9b75d0c9169ddd0384e3864d7c4395a1a98","ssdeep":"768:EH1bZpiCAHwyjiDe+AB/3nBf+czE+rjkcxoWrPeydkHWdMh0ffPXeWIdJCPFCKXu:aBi14S+mnFvhnkk2yYWq03PbvPu","tlshash":"f543022846a7ef639054d461c73f6a31685c235bf90cde11068af97aa68dce9dbf400b","first_seen":"2026-05-03T13:46:18.463833Z","last_seen":"2026-05-03T13:46:18.463833Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cataz.my","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=91aace92-c455-4792-9ee4-98f18ad69791\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=0d2187f588b93badfed924aa0d084bde\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=13","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:48.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 22:15:44 GMT","end":"Sun, 26 Jul 2026 22:15:43 GMT"},"fingerprint":{"sha1":"A4:CC:8E:38:1E:86:20:D5:CF:AC:A0:E9:32:E9:DF:AA:71:7A:98:E5","sha256":"B2:02:B9:E5:21:88:DB:AF:AE:5F:6C:FB:16:F4:3A:D8:44:9D:C2:FF:BE:D7:7B:A1:08:43:78:33:05:96:96:7F"}}},"request":{"raw":"GET /pxf.gif?uuid=91aace92-c455-4792-9ee4-98f18ad69791\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=0d2187f588b93badfed924aa0d084bde\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=13 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:49 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: cf30e6379187dad98bac11265c7e9af9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":true,"data":null}},"time_used":675,"timings":{"blocked":287,"dns":1,"connect":96,"send":0,"wait":97,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:49.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Apr 2026 00:48:28 GMT","end":"Fri, 03 Jul 2026 01:44:30 GMT"},"fingerprint":{"sha1":"21:8F:F6:2A:0C:60:8F:CF:6C:90:BD:69:DB:F8:82:BF:D5:02:9E:2A","sha256":"20:0D:6D:8F:30:A5:C6:F8:45:FA:9B:D0:D8:76:12:30:CC:08:8F:44:47:0D:A2:CA:80:14:E3:AA:E1:AF:EA:5F"}}},"request":{"raw":"GET /sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cataz.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:50 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Sep 2021 07:43:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AY%2BNG5urkJ6nXK7E6kUPJylbjT5g03v9IbHT1KWYBHUtItxP1ubIjphBiPtN712tusXI9TfRARwuziQbDxiT%2F%2B6vCoMdlg%2FgG88GSkRNxJ1tEAucpw0OiF5ExNn%2FDllvWW8%3D\"}]}\r\nage: 0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9f5fb554db45120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":1325,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"f6990569c7ffeac1f4a3f6d9eee5da44","sha1":"e7d5e37acf89a8faee252c36fc2c9d6615501d76","sha256":"cc2a9756c81bd570fff8b32e48a413687c33f8abe9c934e743a0769178b4f690","sha512":"be3ebced9d65b29fef8caab46e95f54f1ca645ea5942331c84c964ec033fb7c78506d14eda131948b7f664f1635deaa8d82a63169f9214f72035b087ea104bda","ssdeep":"","tlshash":"a52105692df9c97311e750947b352f1bed92ea87c80a6e0173bc9d684f9ad84cd23407","first_seen":"2023-06-26T22:59:31Z","last_seen":"2026-08-15T10:14:25.116469Z","times_seen":3718,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:50.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"E9:E5:B7:DA:0A:AE:59:02:EA:10:61:71:9B:52:3A:08:42:A0:67:A5","sha256":"F6:1D:CE:31:AA:9C:7B:58:1D:1D:14:96:99:B6:58:CC:FB:AE:D5:3C:F8:FB:40:E3:45:2D:4A:54:11:B4:E2:F3"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 03 May 2026 13:45:50 GMT\r\ndate: Sun, 03 May 2026 13:45:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1936a90eef3ebd4c6b40eb59d72e164d","sha1":"4c698f8dc97e2e6186d46215e209aca1b1194a5d","sha256":"412d98c2f4410a048131a7d9362fb38456ce2ff67cd4731ea411708a7996a021","sha512":"07ad2431175e5566ae435738d94d4da3e96e4856a1fe1d5917c52474cab28808cd940fec0e8f75eb2f3d573e6fe8497fc12636ef4738d1b67e9144725192b580","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/O:pDS99YURRuWDyjooYhREHPWP2ZZYQRVs","tlshash":"48721091041704009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:01.752187Z","last_seen":"2026-08-16T14:53:33.712552Z","times_seen":10701,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/A0uS9rHR56FeBtpjVki16M5xxSW.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/A0uS9rHR56FeBtpjVki16M5xxSW.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37120\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67fb6201-9100\"\r\nlast-modified: Sun, 13 Apr 2025 07:04:33 GMT\r\ncdn-storageserver: NY-833\r\ncdn-requestpullcode: 200\r\ncdn-fileserver: 857\r\nperma-cache: HIT\r\ncdn-proxyver: 1.47\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1080\r\ncdn-cachedat: 02/28/2026 13:44:48\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: bbfc6400f1bbdb2eacd23cf28dd7f733\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":37120,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"85901a12d484de4b76dfe8b1190a35be","sha1":"1fa7203a7fc5a7707bf72c601b3f21226de9a35e","sha256":"d1ba25db99624911e6253f46388efef7cab084b2d0610b8e1a24ebfcd30d3552","sha512":"662c93f6927ad179d2172fc0ea1e5d68a1d0211563708caaa1808fa557a7ee1215dcf07eea91c8baf4c9fd5514ab84bdbf071f415af4b0edeaa2f8da86cf5186","ssdeep":"768:NiuhaVix+bfyLrt3SKX+BtZferaOBqnaSMECEP6OMyT7R:NPhqiEjyLr+tNeWO4+2yOMyTt","tlshash":"8af2f1cbe8833efbd514ada5846bfb8367a6113e419b25101ee5d1836e76be50e4b300","first_seen":"2026-05-03T13:46:18.466941Z","last_seen":"2026-05-03T13:46:18.466941Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":98,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/sbar.json?key=0d2187f588b93badfed924aa0d084bde\u0026uuid=91aace92-c455-4792-9ee4-98f18ad69791%3A1%3A1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:48.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /sbar.json?key=0d2187f588b93badfed924aa0d084bde\u0026uuid=91aace92-c455-4792-9ee4-98f18ad69791%3A1%3A1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cataz.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:49 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 3979\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Mobile,User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,Device-Stock-UA,X-Device-User-Agent,X-OperaMini-Phone-UA\r\naccess-control-allow-origin: https://cataz.my\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; expires=Sun, 10 May 2026 13:45:49 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Mon, 04 May 2026 13:45:49 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Mon, 04 May 2026 13:45:49 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Mon, 04 May 2026 13:45:49 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Mon, 04 May 2026 13:45:49 GMT; path=/; secure; SameSite=None\nu_pl26971195=1; expires=Mon, 04 May 2026 13:45:49 GMT; path=/; secure; SameSite=None\nslec0d2187f588b93badfed924aa0d084bde=[4323733]; expires=Sun, 03 May 2026 13:45:54 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 224\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e1f9e9b6639937337d22fc65be7f09b7\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5620,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"fa678bd59e8b59f290f010c1bfff1d93","sha1":"14f14a3d29cba6cd3a374ada69cfaaf06449d664","sha256":"f2a5c08824afa5742ca0cfd42550ed8c9b8bdb9005f396a8cfab2e33670b0489","sha512":"07d816a96c80f68e1bba7e528de1fce22a2141ec66ce18019180a8199485bfbfe60f05c5c3e45c03bcb36e5b4b6dc63d03e9d2756cc902f448f01f4b835f0725","ssdeep":"96:9zuXVh6yycpFebhVh6BqdXeJIaMcIpSOAsRCIZoXE1HayY3aRiJL35:9zulM3bLrXeJScIPAsRCX05ayYFBp","tlshash":"0ec16cbfe2e924e36f2b49d34783aff56ca2ee07c8d678d48c30c76d4936004464a050","first_seen":"2026-05-03T13:46:18.468037Z","last_seen":"2026-05-03T13:46:18.468037Z","times_seen":1,"resource_available":false,"data":null}},"time_used":996,"timings":{"blocked":333,"dns":45,"connect":95,"send":0,"wait":327,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/ren.gif?sid=H4sIAAAAAAAC_1RSvW8cxRuetd39fhLiQ3SgLVyAxJ1n93bvdnERiAgIBDYhQSmoZnZmneHmdjY7u3eXo8AhQAVSIho-mvVzdtwgIP8BOiNRWCCx3UnEDX8CUhAduvNJgUea90PPFM_7vO-nB9UZaaNi87ffMhOlNdsK29R97prKhBlZd-eq69E23XavqawbbLvjRSiGL3qdoE2fd1-TSd9s-dSj1KOe-6oqZGrGW0sWKv829toxbQd-2wsDjIv_9rZyYJkDMTwjT0CJ5rE_0vegkhmywQ-vSNsvTf7CpUGlWWkKDMXxu1k_M6MMg0dlWjhIs-PVbxjbEPLlGkx2vJoAZni4mABcNWTt6Qfg2fFKJvjw6Fwp15AZuPgfRsMZpJ5BsRkScxtK_EaARGBnF9ng3o4pRuzmOcsWbEM2Hv4JNWrIxoOnkA2-u6jV2L1idFUqk1mM0xpqPIPamyGvTlBO1qBGJ0jKj6DEr2Tr4ZvIBoe7VhsoMd-MPcYSGfutJAjDVtCL_VYsZdCKo9SLmOjGvdhbWqTSGZh1UC2eclClDqrcwUDM3YBGQeKxTjeNRdKjAQsCITmNI59SFic9VMktKHEHSbGPvNhHX91tiLP-O6xYhy0b4lz-EENRHwltfVvfE9pW3Ftlf5U79dSUewfsyJR7MiNgxR0Uoj5U-Q17G0m5Pp2kVkzNIjBe1lPGRT1VoiQobsw3qRcLKb1uK0ql1-oJ1m0x2ZWtJJSc9WgQpjw8TG1Z1Qf5GXl84bXzzWfb6Mu5S4XvRb00jCIedzgTqRSxHzBGBY0CLiSsqqHs2tKhiWrIS9H3yFVDnnV_BmcnsPoEiXLAqmfARjXY9RqT7H6flQMzVPK6aHM1aecawtTIyw2UN50DfUaenL5z9eKPy72__PcXkMnphflXC3yNpKiRFzXeVz8R7Olb93fzUg3UhC0O4UrJSrkOphrifPALEtWQ_79xaXmTm69_giTfh81PL5x0loA1BDx3oBWBlqdkBTBew_6r54_qA_sx9goHXDtTrgvnkOtC3z2XadXcDX3e6UZRV6ZdkXZEx--IOKQyDljcDeIgRGkb9dflz_8JAAD__4rm4qkRBAAA","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:49.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:39:42 GMT","end":"Mon, 27 Jul 2026 00:39:41 GMT"},"fingerprint":{"sha1":"72:D3:68:BC:A4:4E:55:26:DB:11:49:E2:96:21:2A:F6:6D:D9:43:08","sha256":"32:C2:2C:23:81:37:C1:17:20:76:3E:3A:3C:7A:DB:DC:43:10:FE:F6:F2:BA:21:05:A6:7F:B0:88:91:D5:10:02"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSvW8cxRuetd39fhLiQ3SgLVyAxJ1n93bvdnERiAgIBDYhQSmoZnZmneHmdjY7u3eXo8AhQAVSIho-mvVzdtwgIP8BOiNRWCCx3UnEDX8CUhAduvNJgUea90PPFM_7vO-nB9UZaaNi87ffMhOlNdsK29R97prKhBlZd-eq69E23XavqawbbLvjRSiGL3qdoE2fd1-TSd9s-dSj1KOe-6oqZGrGW0sWKv829toxbQd-2wsDjIv_9rZyYJkDMTwjT0CJ5rE_0vegkhmywQ-vSNsvTf7CpUGlWWkKDMXxu1k_M6MMg0dlWjhIs-PVbxjbEPLlGkx2vJoAZni4mABcNWTt6Qfg2fFKJvjw6Fwp15AZuPgfRsMZpJ5BsRkScxtK_EaARGBnF9ng3o4pRuzmOcsWbEM2Hv4JNWrIxoOnkA2-u6jV2L1idFUqk1mM0xpqPIPamyGvTlBO1qBGJ0jKj6DEr2Tr4ZvIBoe7VhsoMd-MPcYSGfutJAjDVtCL_VYsZdCKo9SLmOjGvdhbWqTSGZh1UC2eclClDqrcwUDM3YBGQeKxTjeNRdKjAQsCITmNI59SFic9VMktKHEHSbGPvNhHX91tiLP-O6xYhy0b4lz-EENRHwltfVvfE9pW3Ftlf5U79dSUewfsyJR7MiNgxR0Uoj5U-Q17G0m5Pp2kVkzNIjBe1lPGRT1VoiQobsw3qRcLKb1uK0ql1-oJ1m0x2ZWtJJSc9WgQpjw8TG1Z1Qf5GXl84bXzzWfb6Mu5S4XvRb00jCIedzgTqRSxHzBGBY0CLiSsqqHs2tKhiWrIS9H3yFVDnnV_BmcnsPoEiXLAqmfARjXY9RqT7H6flQMzVPK6aHM1aecawtTIyw2UN50DfUaenL5z9eKPy72__PcXkMnphflXC3yNpKiRFzXeVz8R7Olb93fzUg3UhC0O4UrJSrkOphrifPALEtWQ_79xaXmTm69_giTfh81PL5x0loA1BDx3oBWBlqdkBTBew_6r54_qA_sx9goHXDtTrgvnkOtC3z2XadXcDX3e6UZRV6ZdkXZEx--IOKQyDljcDeIgRGkb9dflz_8JAAD__4rm4qkRBAAA HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nCookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26971195=1; slec0d2187f588b93badfed924aa0d084bde=[4323731]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:49 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: X-OperaMini-Phone-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Mobile,Device-Stock-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Model,X-Device-User-Agent\r\nx-envoy-upstream-service-time: 1\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d3b3fdd1a802943d57707197250380a3\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/8vGAAlgJL4BXQVYmwfyMt5nBfjC.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/8vGAAlgJL4BXQVYmwfyMt5nBfjC.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11924\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67ef1d8a-2e94\"\r\nlast-modified: Thu, 03 Apr 2025 23:45:14 GMT\r\ncdn-storageserver: NY-753\r\ncdn-requestpullcode: 200\r\ncdn-fileserver: 354\r\nperma-cache: HIT\r\ncdn-proxyver: 1.47\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1049\r\ncdn-cachedat: 03/13/2026 11:57:22\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: c8e5b043676525d25fecf4605d7fc9a6\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11924,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c59e2164defece3be8a447abcec8b3a5","sha1":"2e5171148398e7b3cfe7bde3634df2000e79190e","sha256":"8520df14f82af8049b2e7eefeeabb14e8e1d2ddfdc0a7657ea57d514fb293dee","sha512":"1fe3ca954837ef25d2c980dbf1fa8a54e4d8fbc9ca5f0e831db8b6eef342b898d5487568cb6ef35b086cb06da04543c0b260772c19e3926e568c7b976c0aa883","ssdeep":"192:uQ70B6QA32jXeSqSmCexMPmXrIouJU+KMKNCqWEkxsvJPhUIF6ggxxt48D1k1V7J:wziCsMPm7zV+yZ5ksJPhzFI7t/D1YP","tlshash":"de32cfd8c48c20cb05880f4e00835fdd8df3fbcd0868d6a154a75de69a9d27a30bc593","first_seen":"2026-05-03T13:46:18.46905Z","last_seen":"2026-05-03T13:46:18.46905Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":98,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/euZyZb6iGreujYKrGyZHRddhUYh.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/euZyZb6iGreujYKrGyZHRddhUYh.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26668\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67f9ddfd-682c\"\r\nlast-modified: Sat, 12 Apr 2025 03:29:01 GMT\r\ncdn-storageserver: NY-833\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 837\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/01/2025 18:50:57\r\ncdn-edgestorageid: 1333\r\ncdn-requestid: 3c9fe4d2d2d42e824db3ecab89a989af\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":26668,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7db89ef2453f98287d82a6d47d8e8a11","sha1":"18cd5706ab27226227d22c489e713aa5a4f54dc9","sha256":"5172c071ff045ba1d5f7d5260ffd04f7e37c0381bd53d604f6898e37698a5940","sha512":"258061226f8a932266a0edcad050df4493badbc28805fdfab36f848598f9e2a23f6fa20290a94ab33583eebed9d40e8511830f423862302f0259e2de57283544","ssdeep":"768:YeoLv1tZRd7pp/1XRW4IkDJV3CHWCoRxTIXhgV4Mt:YeGd7p9d0iJV8OTUhMt","tlshash":"54c2e1e9d55b720f722ef9c8bd6e10bad825795f78a113103e8b906d32e6491871c11d","first_seen":"2026-05-03T13:46:18.470222Z","last_seen":"2026-05-03T13:46:18.470222Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":98,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1768\u0026rd=1768\u0026fd=804\u0026bv=2026.4.2\u0026tmpl=70","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:47.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:41:18 GMT","end":"Sun, 26 Jul 2026 23:41:17 GMT"},"fingerprint":{"sha1":"A3:A7:19:A7:E1:1E:FA:B7:D5:D2:AB:89:E2:E5:2D:BA:31:4C:DC:31","sha256":"9B:B1:9D:73:D4:D6:68:DF:63:E8:A6:F5:27:EB:47:26:AA:6F:52:E3:A6:56:1C:FF:EE:AC:3E:F6:06:CE:09:CA"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1768\u0026rd=1768\u0026fd=804\u0026bv=2026.4.2\u0026tmpl=70 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:47 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, User-Agent, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Platform\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":true,"data":null}},"time_used":764,"timings":{"blocked":331,"dns":45,"connect":93,"send":0,"wait":99,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.1299410051134.js?key=e374e32a8cd336033ad180d1424bb687\u0026kw=%5B%22cataz%22%2C%22sbs%22%2C%22watch%22%2C%22latest%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22online%22%2C%22free%22%2C%222024%22%2C%221080p%22%2C%22net%22%5D\u0026refer=https%3A%2F%2Fcataz.my%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=91aace92-c455-4792-9ee4-98f18ad69791%3A1%3A1\u0026rmtc=t\u0026shv=2\u0026sht=-k217JM71hlhY8_GHk5s1Roi8fbCoxTIMjdknayQgwg\u0026fstu=019dee16-8bbf-7daf-abe5-267bdf708790\u0026st1=39bc45b35302393bceb13422bdd5c8bd\u0026ps1=1777815948","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:48.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 21:50:47 GMT","end":"Thu, 23 Jul 2026 21:50:46 GMT"},"fingerprint":{"sha1":"23:74:93:25:BB:94:6A:F0:09:05:7F:57:73:50:14:CD:19:AA:AF:20","sha256":"13:12:D4:15:47:A9:32:60:B9:69:04:44:B0:1C:A6:FF:80:89:A8:57:85:61:DB:5D:BC:87:06:24:86:84:51:44"}}},"request":{"raw":"GET /watch.1299410051134.js?key=e374e32a8cd336033ad180d1424bb687\u0026kw=%5B%22cataz%22%2C%22sbs%22%2C%22watch%22%2C%22latest%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22online%22%2C%22free%22%2C%222024%22%2C%221080p%22%2C%22net%22%5D\u0026refer=https%3A%2F%2Fcataz.my%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=91aace92-c455-4792-9ee4-98f18ad69791%3A1%3A1\u0026rmtc=t\u0026shv=2\u0026sht=-k217JM71hlhY8_GHk5s1Roi8fbCoxTIMjdknayQgwg\u0026fstu=019dee16-8bbf-7daf-abe5-267bdf708790\u0026st1=39bc45b35302393bceb13422bdd5c8bd\u0026ps1=1777815948 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cataz.my\r\nReferer: https://cataz.my/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.zIJG41O-yyChYotLJ4aVQHmImIk2-G_8aHM7shBIIks\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:48 GMT\r\nContent-Type: text/html\r\nContent-Length: 2232\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,X-Device-User-Agent,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List\r\naccess-control-allow-origin: https://cataz.my\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=91aace92-c455-4792-9ee4-98f18ad69791:1:1; expires=Sun, 10 May 2026 13:45:48 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Mon, 04 May 2026 13:45:48 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Mon, 04 May 2026 13:45:48 GMT; path=/; secure; SameSite=None\npdhtkv23=true; expires=Mon, 04 May 2026 13:45:48 GMT; path=/; secure; SameSite=None\nuncs23=1; expires=Mon, 04 May 2026 13:45:48 GMT; path=/; secure; SameSite=None\nu_pl24385916=1; expires=Mon, 04 May 2026 13:45:48 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 6\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5e10013ecd467e62527a6a8ed3008aae\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4351,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3475)","md5":"73cd928eecd796efcb6f5cefb69ea4fd","sha1":"553d00ff8f073cd9eabb405bbcf23ccb6b42fdeb","sha256":"e539386c89ab252fa27733fd3ef0c35d4ae7a5b964cf6d3b4ed2f04d74f4a115","sha512":"eace0474fd948d3b9937ed3040489d98bfcdf53c673c71a6ae38ed40261e1ef425a22b7fab8ec48ef78998029ba93af60b81c462438eb235fab8ff1ed2e6547e","ssdeep":"96:Wh9+mG6/oz9d9GbopZhTe54E6dk/obopZhTe54Ei1ZDANcNCCfMEDaH:O9xG6gz4boDhTe54bdkQboDhTe54dVkv","tlshash":"0591f9ef2dd51c793a62145eaa69260e18a3c60f0400fe49f84cb2603f706f94e7ce68","first_seen":"2026-05-03T13:46:18.471143Z","last_seen":"2026-05-03T13:46:18.471143Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:48.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 01:34:17 GMT","end":"Mon, 27 Jul 2026 01:34:16 GMT"},"fingerprint":{"sha1":"95:86:03:59:0E:03:98:91:87:F0:07:36:44:10:95:8E:67:97:47:D8","sha256":"51:F3:91:79:18:08:9A:FD:A7:80:AD:AA:80:FB:C8:8B:AE:27:FD:79:25:B6:37:2F:1B:C5:60:67:25:A8:A7:02"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:48 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 817e03ef2d0e7d5fec13c631536b5fe4\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-16T13:31:33.505891Z","times_seen":26647,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/0d/21/87/0d2187f588b93badfed924aa0d084bde.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:47.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 21:50:47 GMT","end":"Thu, 23 Jul 2026 21:50:46 GMT"},"fingerprint":{"sha1":"23:74:93:25:BB:94:6A:F0:09:05:7F:57:73:50:14:CD:19:AA:AF:20","sha256":"13:12:D4:15:47:A9:32:60:B9:69:04:44:B0:1C:A6:FF:80:89:A8:57:85:61:DB:5D:BC:87:06:24:86:84:51:44"}}},"request":{"raw":"GET /0d/21/87/0d2187f588b93badfed924aa0d084bde.js HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:48 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34790\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,Device-Stock-UA,X-UCBrowser-Device-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,X-Device-User-Agent\r\nx-envoy-upstream-service-time: 3\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 70f3a4c491dd49ca2b14441e7abe3447\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92485,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ee706ba69b7bced4f3dba6e65c3b8249","sha1":"1c6d5ef812790547f97d444fb00b28ecc9d7211f","sha256":"153ceb21b1c83ab629c6563b72f21eb91799f0be51a4ffaed56f692b42765ed9","sha512":"64de73ff1883d97e7035b1ee4f26be05a7383296406aa547aff307d3e89f7a1cf2e424fb6ad835b2223073496c396ce0ba574c2e69687355cd6c962d2fb5017b","ssdeep":"1536:2l2eABAdWrl7QJWX8jlvdwZ1PTz5Ysk5qMUPKLOe:2dSAkrdQJoYlVwrBFkh7","tlshash":"c693c78c7f92f0f5039a24b3232f9c16f2ab1d5124fce454d903a8e5ae25319d57ad6c","first_seen":"2026-05-03T13:46:18.472308Z","last_seen":"2026-05-03T13:46:18.472308Z","times_seen":1,"resource_available":true,"data":null}},"time_used":870,"timings":{"blocked":328,"dns":54,"connect":97,"send":0,"wait":100,"receive":95,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-content/themes/Avada/js/simplebar.min.js","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataz.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 02:08:50 GMT","end":"Fri, 19 Jun 2026 02:08:49 GMT"},"fingerprint":{"sha1":"B9:A9:8A:10:1F:C3:5E:12:DC:0D:D2:6E:0F:77:CE:AE:86:67:7B:C4","sha256":"D9:D6:9B:21:39:6B:BE:A9:42:6F:15:5A:C6:1A:95:73:3F:29:76:4E:2D:3F:16:A3:71:EF:E6:CC:54:22:7D:2D"}}},"request":{"raw":"GET /wp-content/themes/Avada/js/simplebar.min.js HTTP/1.1\r\nHost: cataz.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 10 May 2026 13:45:46 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 02 Apr 2025 14:55:16 GMT\r\netag: \"e1f0-67ed4fd4-4fd317df60cfd98f;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17132\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":57840,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57807)","md5":"2b00606678903dd843bbb22bb0d05303","sha1":"0a3c74bc107192526a737274fcf0a52b8240fd94","sha256":"5ee81c8a7fdaea2a0c8342316074a622a9eee6a1ea211c14b6e09550e3be3ec8","sha512":"d543e2606fbe2daefa68fdd3de15443837759181966c0f6dc4b9d080a5da91cea842450c407c1839c057b967963a545e8acb8861ce1a4150bf95309f5676c250","ssdeep":"1536:OqP3bArH8Ci4oO0RFs6e8KllDr9Im0nhOQEz+2/5f+Nh8cQBibzd+QfhanKrHldP:OqPrArH5XoNs6yDvcz2/5fkh8cQBibZJ","tlshash":"4e43d9cdb292b07203e76266803f410af33a59a9710e4098f67dd9e97cb89495277f7c","first_seen":"2024-08-12T19:31:05Z","last_seen":"2026-05-03T13:46:18.473288Z","times_seen":6,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cataz.my","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/oWehDe6fFR4eUdUMDy4jz6XiinO.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/oWehDe6fFR4eUdUMDy4jz6XiinO.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32340\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Sat, 04 Apr 2026 21:17:42 GMT\r\nx-bo-version: 1.0.65\r\nx-bo-server: LA-295\r\nx-downloadsize: 62184\r\nx-bo-origindownloadtime: 137\r\nx-bo-processingtime: 8\r\nx-bo-compressionratio: 47.99%\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 864\r\ncdn-cachedat: 04/06/2026 19:39:42\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 8ea58812bbcdf806c64b52df5fb0dc59\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":32340,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2cefc0debb7ad26624b2c9aeddbd41b2","sha1":"a384315dd6e1de58d9cc452dfdaed6335ed5ce62","sha256":"eb774104a9bdc12ae9ac17db04ec3d0366474680be45b6bc4fd299f533df0725","sha512":"6be326377a96666fa196003a310e352ffe4778368161bb9ac518f08bc0a010cd71d377eafd112dc6a27a69e5633097dd87f440ab58e6b4a8d22ab0400411e7a1","ssdeep":"768:/HfPQUV9kHjXFyYc6nREoy7aZO4ON5/7vWOvGRuyD0:vxV6HjAUEj7aA1rQ0","tlshash":"9de2e19bd718238fac425931aaff391a75f70c5719a293992d863e05f00853dcadcbb4","first_seen":"2026-05-03T13:46:18.474382Z","last_seen":"2026-05-03T13:46:18.474382Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":97,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/6pzI1DIlxwAFffw9OZcG6cr031U.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/6pzI1DIlxwAFffw9OZcG6cr031U.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27918\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Sun, 22 Feb 2026 23:59:36 GMT\r\nx-bo-server: LA-293\r\nx-downloadsize: 71873\r\nx-bo-origindownloadtime: 137\r\nx-bo-compressionratio: 61.16%\r\nx-bo-processingtime: 10\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1076\r\ncdn-cachedat: 03/22/2026 17:52:34\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 37e97e5c981a389a094b3877bfc604be\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":27918,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b221df4f9ace9b24dc899f267886d5b6","sha1":"5f2cc4d5906dffe2eefc410fd8a881afb6eecd64","sha256":"a7536be9c0a430e04782798e24732e46ac5980125dcd26fe556de16c18f55365","sha512":"d4787dd38e70cfee6ddf3ba4a371d81c2c65b6cb534534f72cf2477330b899ebc497a3df68f86bce6e814057db63f9060e7c381f4a08824c8162049226e16567","ssdeep":"384:CMHZ/Q+k0o8glOCVGFhbMU93osPLqLJWPlqCbqSz9Qb1zcz5SNHkBD0ZT4o20:D5o+foO4CSJW4hSz9QbRBaBD0GQ","tlshash":"43c2e102d7c4059ae6226beddeb786abea4739aed4c03751748f014c60f0d9709573cb","first_seen":"2026-05-03T13:46:18.475279Z","last_seen":"2026-06-06T23:25:49.298716Z","times_seen":4,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":97,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-content/uploads/2026/05/Wrong-Chat-Right-Love-0987thsja.jpg","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataz.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 02:08:50 GMT","end":"Fri, 19 Jun 2026 02:08:49 GMT"},"fingerprint":{"sha1":"B9:A9:8A:10:1F:C3:5E:12:DC:0D:D2:6E:0F:77:CE:AE:86:67:7B:C4","sha256":"D9:D6:9B:21:39:6B:BE:A9:42:6F:15:5A:C6:1A:95:73:3F:29:76:4E:2D:3F:16:A3:71:EF:E6:CC:54:22:7D:2D"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/Wrong-Chat-Right-Love-0987thsja.jpg HTTP/1.1\r\nHost: cataz.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 10 May 2026 13:45:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 03 May 2026 08:36:57 GMT\r\netag: \"ba01-69f70929-7cb476ea63dc7a5b;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 47617\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":47617,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 445x700, components 3","md5":"87abc3180387a185c03f588057b936aa","sha1":"d99c5a05b4a9a83846c78242ac09f55789a7d29e","sha256":"e7e993c0915fdb8d48c27a49a97ff85107cc49df36ee296da956c82c04548685","sha512":"78fbf8293e285f6c44394e8d1b7f521fc8051a0a63c758539907aedc88d5cc1efb222f74d843f782691996ca58747d615ca5fd21cecc9b4f5edca56c1958e6d4","ssdeep":"768:2Ug5JNqZvjJd9jfSJ0xvyvl3z4eP292fwcUH40W2jgeQ6X07b2wQHyrNgUJmQmx+:2J5zOvjJdFfm0J4yG9YDW40/2wzcBG0c","tlshash":"1b23022d820fd3937c5baca61fd8df35ea1475680a18e47aa2bed62f1c201d15f120b8","first_seen":"2026-05-03T13:46:18.476311Z","last_seen":"2026-05-03T13:46:18.476311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cataz.my","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-content/uploads/2026/05/Doctor-Shin-2026-220x320-1.webp","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataz.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 02:08:50 GMT","end":"Fri, 19 Jun 2026 02:08:49 GMT"},"fingerprint":{"sha1":"B9:A9:8A:10:1F:C3:5E:12:DC:0D:D2:6E:0F:77:CE:AE:86:67:7B:C4","sha256":"D9:D6:9B:21:39:6B:BE:A9:42:6F:15:5A:C6:1A:95:73:3F:29:76:4E:2D:3F:16:A3:71:EF:E6:CC:54:22:7D:2D"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/Doctor-Shin-2026-220x320-1.webp HTTP/1.1\r\nHost: cataz.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 10 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 03 May 2026 08:13:43 GMT\r\netag: \"1e20-69f703b7-950cd671ac075465;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 7712\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7712,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x320, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9ad8b73f5e042ca0b09de242664aa384","sha1":"32e8852bf711d75b8e0f308c7e351f1eba388743","sha256":"77864668b010d1d6c60ab04dbcbd676be6bea572590e6a475b7eed2de4cd8be2","sha512":"49b05e6cf2d88526059d871fc74b057dc2665102ee25f9d2f5cd826a3590a3b027dc7ceef0fbc67b3b565d6370a87f33502c3a6387bc420c5a458a7955eb5401","ssdeep":"192:ZotZFqjtVlXtH0kV9rRoH7eQDF9jDPalztZoCIVKNGaktPxTD:aZFqr1TV9lsjF9jDSRoTKAaAV","tlshash":"39f19eeecf4c5ea33ed215fb54666bd7436a208dad258272e80932533f4c0edb94162d","first_seen":"2026-05-03T13:46:18.477277Z","last_seen":"2026-05-03T13:46:18.477277Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cataz.my","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/cKZu0Fdkj7dmwbfMpgDqVVCkLJQ.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/cKZu0Fdkj7dmwbfMpgDqVVCkLJQ.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30760\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67fce958-7828\"\r\nlast-modified: Mon, 14 Apr 2025 10:54:16 GMT\r\ncdn-storageserver: NY-703\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 914\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/01/2025 15:39:46\r\ncdn-edgestorageid: 1077\r\ncdn-requestid: 99e7edf87d6962032e7b64dbdeb81e6b\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":30760,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"88df980cdff7a35af55e308061b7809c","sha1":"15ab8ad2ee684aef8dbffae4377dc77fb8f65d47","sha256":"c2f7c44fb4444b016fe00c45ed70d25b27f6fa3722443adc38c256d949d1569b","sha512":"e8ddc340f9d18f673985056909afde35f654e9c9c62a60015df38a81eebd735e339df8eafe117058ae48e0f45900bde5a14442449518dd2885ce5a814b7956c2","ssdeep":"768:2sJxO6Zbx6XslncP/Zb6lWkmE5v7QVK2l5:2sJBt6XicPBb6lD7Rm","tlshash":"bed2f134049b4c37be3f7799e0daae8ac89b180d5b0894f59d90cfa03674fd7b29a151","first_seen":"2026-05-03T13:46:18.478102Z","last_seen":"2026-05-03T13:46:18.478102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":99,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-includes/js/wp-embed.min.js","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataz.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 02:08:50 GMT","end":"Fri, 19 Jun 2026 02:08:49 GMT"},"fingerprint":{"sha1":"B9:A9:8A:10:1F:C3:5E:12:DC:0D:D2:6E:0F:77:CE:AE:86:67:7B:C4","sha256":"D9:D6:9B:21:39:6B:BE:A9:42:6F:15:5A:C6:1A:95:73:3F:29:76:4E:2D:3F:16:A3:71:EF:E6:CC:54:22:7D:2D"}}},"request":{"raw":"GET /wp-includes/js/wp-embed.min.js HTTP/1.1\r\nHost: cataz.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 10 May 2026 13:45:46 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 02 Apr 2025 14:55:16 GMT\r\netag: \"4e3-67ed4fd4-2b80ca910b02fcfe;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 617\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1216)","md5":"2f9c93eca3f761e9a87c735cf3a24a39","sha1":"4b7cdf3690ba5126bacfba15dac67da45b3c8664","sha256":"51f2cdd4f7e97288a74d803275b0550ec9eb938210ad5ab7fb1409548acf7554","sha512":"c2a46755dc04fa4127df222e34066b047e42906eee70373b632a1f4a4e205fd7e5bf8646b9f4ffbe9fe9d0cd8a880f7f861c0a1bfd55cdfa4bff3537d8e2fb3e","ssdeep":"","tlshash":"ae2132ae3235dc7e817741d3bc8570c381b14eb96c5520e29c2d9886fae4ec7d66abc1","first_seen":"2023-11-08T07:22:35Z","last_seen":"2026-08-16T04:48:57.598764Z","times_seen":2668,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cataz.my","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-content/themes/Avada/js/frontend.js?ver=1.3","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataz.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 02:08:50 GMT","end":"Fri, 19 Jun 2026 02:08:49 GMT"},"fingerprint":{"sha1":"B9:A9:8A:10:1F:C3:5E:12:DC:0D:D2:6E:0F:77:CE:AE:86:67:7B:C4","sha256":"D9:D6:9B:21:39:6B:BE:A9:42:6F:15:5A:C6:1A:95:73:3F:29:76:4E:2D:3F:16:A3:71:EF:E6:CC:54:22:7D:2D"}}},"request":{"raw":"GET /wp-content/themes/Avada/js/frontend.js?ver=1.3 HTTP/1.1\r\nHost: cataz.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 10 May 2026 13:45:46 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 02 Apr 2025 14:55:16 GMT\r\netag: \"28ee-67ed4fd4-85e32abc3302224d;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2323\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10478,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (427), with CRLF line terminators","md5":"76354ee817d10921429b44d460262d6a","sha1":"276a4b087ef0610bc86376a37532de4da75d9bcd","sha256":"6bb6927f01cc0db79f55a3c8b0011229ca3f1094ecc5c3fa0b442b672a571950","sha512":"c9aa301d750aa1710cd725e6214faaa9f8b961c31191ab876e90899ad2fa1d5981715e279ea62fbfe599112034a6fdc1d39d225bc485a1a1fa9e804f68afc603","ssdeep":"96:BYJ7PUTzl+x1ZqM2xQI8mATopinxjews6uQ4SrakjjBhy3uPH+pKegacHuQoir6y:5+x1ZqM2x8Lt4Sm2hye/0KnoiGSiC6iL","tlshash":"532284a5b9a859f404337afbae3a8800fe7f12278201c754fd6c64a50fb0945bb51f8c","first_seen":"2024-06-15T17:51:27Z","last_seen":"2026-05-03T13:46:18.479729Z","times_seen":5,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cataz.my","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-content/themes/Avada/webfonts/fa-solid-900.woff2","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:47.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataz.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 02:08:50 GMT","end":"Fri, 19 Jun 2026 02:08:49 GMT"},"fingerprint":{"sha1":"B9:A9:8A:10:1F:C3:5E:12:DC:0D:D2:6E:0F:77:CE:AE:86:67:7B:C4","sha256":"D9:D6:9B:21:39:6B:BE:A9:42:6F:15:5A:C6:1A:95:73:3F:29:76:4E:2D:3F:16:A3:71:EF:E6:CC:54:22:7D:2D"}}},"request":{"raw":"GET /wp-content/themes/Avada/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cataz.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/wp-content/themes/Avada/css/app.min.css?ver=1.3\r\nCookie: hu8935j4i9fq3hpuj9q39=true; s9ifs0idfjlwfie32dekl=0; dom3ic8zudi28v8lr6fgphwffqoz0j6c=91aace92-c455-4792-9ee4-98f18ad69791%3A1%3A1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 10 May 2026 13:45:47 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 02 Apr 2025 14:55:16 GMT\r\netag: \"12258-67ed4fd4-71e4e6b43149e2bb;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 74328\r\ndate: Sun, 03 May 2026 13:45:47 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74328,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74328, version 329.-17695","md5":"64b3e814a66c2719b15abf8f7998bd73","sha1":"fa5c5d34c7c375aa3e101f0b8104b6cdbcacd6a6","sha256":"0fe6a4357505cb0d3ca8ba0671ad57df6b7410ca02cb8065eed58e2c0381e640","sha512":"55cfd5a0dd47ff9458243e62cc6cc92bc8c325910bb986a044c783c5c9ff4f9e39e00d58ae71d2fe7f653bdef47102b06ebde153ff78d0ffd505975d2f4cb543","ssdeep":"1536:zYwbikeCEBsqap2mAR1C9VDvMDRUzKafDJgpynKnpqCG1ojp0rmpprcz/7:zLbj3EBsqaRAoD0t8DipVoPqr87","tlshash":"e07312d3da1291cddf722944531735dc91e01ee8a14f9c6fcda8e9a9ac72f43860a263","first_seen":"2023-04-05T16:23:21Z","last_seen":"2026-08-16T09:53:31.717977Z","times_seen":4922,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cataz.my","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wg.olarodwood.com/rPBZgKZe0rgSiBH4D/111151","fqdn":"wg.olarodwood.com","domain":"olarodwood.com","tld":"com"},"ip":{"addr":"172.255.106.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wg.olarodwood.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 16:07:08 GMT","end":"Tue, 21 Jul 2026 16:07:07 GMT"},"fingerprint":{"sha1":"42:FB:F7:06:56:F2:EC:F1:E5:20:43:91:3C:47:7D:4E:19:EF:AB:C8","sha256":"B0:D5:7C:4D:BC:B6:A4:48:B0:2B:A6:05:28:84:AB:12:A1:12:EC:B2:66:FA:28:5F:E2:7E:02:BA:C8:C6:96:8D"}}},"request":{"raw":"GET /rPBZgKZe0rgSiBH4D/111151 HTTP/1.1\r\nHost: wg.olarodwood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://cataz.my\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Mon, 04-May-2026 13:45:46 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJxjYGBgEuEXZMosEOSxNNSzNNAzMdIzNDURZEwXZPLzF2RKzhNk88svKk%2BsFGQsEmQyMBZkKsoT5PYvzslXcM4vzSsBiicLsoD4goyZgnxOOZkVCsH5OaUlmfl5xYJMQMzpnJiUk6rvEuwjyFjAxijIVJLPxiTIVJwiwiDIWMYmIciUk8jj4PvlOfP67S%2BBnHweB9WqQMlz7PGCTAXFgiwGZuYWAHN0KNc%3D; expires=Mon, 04-May-2026 13:45:46 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-08-16T13:45:34.173638Z","times_seen":20551,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":107,"dns":100,"connect":17,"send":0,"wait":23,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wg.olarodwood.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wg.olarodwood.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-content/themes/Avada/css/app.min.css?ver=1.3","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataz.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 02:08:50 GMT","end":"Fri, 19 Jun 2026 02:08:49 GMT"},"fingerprint":{"sha1":"B9:A9:8A:10:1F:C3:5E:12:DC:0D:D2:6E:0F:77:CE:AE:86:67:7B:C4","sha256":"D9:D6:9B:21:39:6B:BE:A9:42:6F:15:5A:C6:1A:95:73:3F:29:76:4E:2D:3F:16:A3:71:EF:E6:CC:54:22:7D:2D"}}},"request":{"raw":"GET /wp-content/themes/Avada/css/app.min.css?ver=1.3 HTTP/1.1\r\nHost: cataz.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 10 May 2026 13:45:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Apr 2025 14:55:16 GMT\r\netag: \"85cf-67ed4fd4-af97883574eec306;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9264\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34255,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12524)","md5":"42019c610759125b5510295e34e5ed3b","sha1":"0578cfd7124ba49956cab85d9a70e956c3d27e5e","sha256":"736b489bdf28e3b0a0510d255d1e2ed360e09a5f6365ec9af7ea551ec35b813b","sha512":"c8b706a0aad5629af997ad6e9977e18b58e7b20857958668f6879de35aafca5c78c38794ed9b8e203817ce1048e9b0d41a212cf34d8957b1cd7dffc186840f70","ssdeep":"384:F6aCAKBmEixMKmlVCfDE/tStEFfWTouHYC6HYST/Bc0i:kP+Eo2D/tStEFfW8u4C64q6n","tlshash":"ecf20a79878615487163c16ebad1e74c1b246043ef0b5b9ef53afa18cfc639618b3788","first_seen":"2024-08-12T19:31:06Z","last_seen":"2026-05-03T13:46:18.482127Z","times_seen":3,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cataz.my","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/ybrX94xQm8lXYpZAPRmwD9iIbWP.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/ybrX94xQm8lXYpZAPRmwD9iIbWP.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17716\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Sun, 12 Oct 2025 12:01:30 GMT\r\nx-bo-server: LA-296\r\nx-downloadsize: 26529\r\nx-bo-origindownloadtime: 145\r\nx-bo-compressionratio: 33.22%\r\nx-bo-processingtime: 8\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 722\r\ncdn-cachedat: 04/06/2026 10:45:54\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 1c9f9885480d314db82efcbac577ce49\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":17716,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"799f2f8b7fe6623ee608215a3585dfdc","sha1":"32bb5cfb067afb8c9564a6039d60ffa46c327359","sha256":"0d10350c75b90b81eec8a9a0f35a19ebc4b393c72ac13006a2a10c05261f2cfd","sha512":"b2b16fb6a806ec165a9d5c094aa78c5ea99f8758f0c7c7d3a9a62305b70f227c2feaeab5b5251bc75e67b4ff37168e9b4c054e5e494fd01aec861eba56ceaec5","ssdeep":"384:8HamkAp9rsBZe1pAL4xUakq7uo9z0HAvca89O86Or7:VA38enAVakq6iz0gvca8OO3","tlshash":"9282d01d24b2c3f9cd892bfdfda25acd24e1389811514e42e822daec7616c3971ef231","first_seen":"2026-05-03T13:46:18.483042Z","last_seen":"2026-06-15T02:27:26.755896Z","times_seen":5,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":97,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/tbGS77Xkn1i5oWlvcgLRnG1K51t.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/tbGS77Xkn1i5oWlvcgLRnG1K51t.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37290\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Sun, 19 Apr 2026 09:09:02 GMT\r\nx-bo-version: 1.0.65\r\nx-bo-server: LA-292\r\nx-downloadsize: 67058\r\nx-bo-origindownloadtime: 239\r\nx-bo-processingtime: 19\r\nx-bo-compressionratio: 44.39%\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 756\r\ncdn-cachedat: 04/19/2026 17:01:08\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 302bd9b165d7d7a7a403f049bf162471\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":37290,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x517, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d5d72171b5ae0db468068bcdf5af3ebe","sha1":"27f20e35c5c411d0cbc78c79f6a50eb589999ffc","sha256":"76b90a4a74416539868e26cef45665d259e756cc9994d6f385de90c578bf3836","sha512":"f1448aa92807bba1f9eb0397bde0c2d235a794cde9dd9f6fd29ac08e4e9a94ab127907af5b13f6019d69bea06e1068b110c6516e81eca61035fcd416a072840f","ssdeep":"768:fIjr2I1+tzUeMJ28OloG1WqCtWQsyTAJwaV4VftTqnNG8gMKnfHCOFL1:wGIA5rCUWq5fyER4VfVxiOx1","tlshash":"63f201643a31649cd0bbbf814497bbcbd5d2b7634542f0b0c6c25206c071be5eb43a67","first_seen":"2026-05-03T13:46:18.48398Z","last_seen":"2026-05-03T13:46:18.48398Z","times_seen":1,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":98,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataz.my/wp-content/uploads/2026/05/Banal-Na-Doggie-0987yeurlt.jpg","fqdn":"cataz.my","domain":"cataz.my","tld":"my"},"ip":{"addr":"147.93.73.197","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataz.my","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 02:08:50 GMT","end":"Fri, 19 Jun 2026 02:08:49 GMT"},"fingerprint":{"sha1":"B9:A9:8A:10:1F:C3:5E:12:DC:0D:D2:6E:0F:77:CE:AE:86:67:7B:C4","sha256":"D9:D6:9B:21:39:6B:BE:A9:42:6F:15:5A:C6:1A:95:73:3F:29:76:4E:2D:3F:16:A3:71:EF:E6:CC:54:22:7D:2D"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/Banal-Na-Doggie-0987yeurlt.jpg HTTP/1.1\r\nHost: cataz.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 10 May 2026 13:45:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 03 May 2026 08:42:43 GMT\r\netag: \"f07c-69f70a83-868648c9f3789300;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 61564\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61564,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 445x700, components 3","md5":"bd8deb64fc7c6c32aede3b1f1093b39b","sha1":"582891f937a0addbb3370eced1c994acbdd3de72","sha256":"7c67bb3e296075978e4e8720efc67b762296be15ce6bbe1970000bd8fb8f9361","sha512":"588068278877b23821a9ec08f5c8c51fab3fe700181af89de7f36d8b5d147aa1857350a1b7c59b17b4e54ff8ec020d83ffd81fcf3341ea7f313956332dcade9f","ssdeep":"1536:nfz7BLjJlsN+NmLbrSX8Gn8Te4F23NxebbsjB/LOar:nr7BZlhmPu8Geesqxe/4L/r","tlshash":"b453029b37051454f0335ce6ed17ca5662ca95e9693c031dbc31c05a31b98eeb4eb93b","first_seen":"2026-05-03T13:46:18.484973Z","last_seen":"2026-05-03T13:46:18.484973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cataz.my","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/icJ41D7yMMmfYLiXX4RJTmgjNdx.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/icJ41D7yMMmfYLiXX4RJTmgjNdx.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34126\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Thu, 16 Apr 2026 10:03:20 GMT\r\nx-bo-version: 1.0.65\r\nx-bo-server: LA-289\r\nx-downloadsize: 64879\r\nx-bo-origindownloadtime: 569\r\nx-bo-processingtime: 11\r\nx-bo-compressionratio: 47.4%\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 755\r\ncdn-cachedat: 04/16/2026 10:48:43\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 86575215db0e8b7e2b4117e20c23421b\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":34126,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9074951dc5e68adbb74ace4c26953315","sha1":"eb2e025aa21e68c933c40bbbfee41f4dc29fd545","sha256":"dc282c93bc1dfd0d79e5b5f2a134f5d7ead2d3a55dfc7f756f3f1af01460af15","sha512":"78fcb0fc85bc820843cea8db2fad4d41899cff9c29e12d17280848fbdd4d7b18fde5e58c280c4cc44482faeb4e9607987d989fd580aafc3a7b91a5c0f1be5c1c","ssdeep":"768:ehYENzZaS5MCXH1spnKyEJy97Itmf/qHte4NPgZ9J0U:6AQxH1cn71IS/54NCyU","tlshash":"7fe2d10b30791aae9a75493437bece5296e028cb5c9fe271501b17642d7f8ffd2e2046","first_seen":"2026-05-03T13:46:18.485859Z","last_seen":"2026-05-03T13:46:18.485859Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":98,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.media-amazon.com/images/M/MV5BNDQ3ZmFkZjctNGUzMS00MjU4LWI2OWQtNjJkMTZiNDdhZDkxXkEyXkFqcGc@._V1_SX300.jpg","fqdn":"m.media-amazon.com","domain":"media-amazon.com","tld":"com"},"ip":{"addr":"23.36.77.129","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.media-amazon.com","organization":"Amazon.com Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 12 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"52:9F:14:7C:1C:DE:2E:2B:10:AD:C2:84:42:99:77:E4:25:83:64:FA","sha256":"4E:45:D6:E2:16:98:72:62:8C:A1:C0:32:13:5A:21:2F:8B:34:89:64:D9:3E:D0:C9:B8:80:A0:20:36:49:D4:3A"}}},"request":{"raw":"GET /images/M/MV5BNDQ3ZmFkZjctNGUzMS00MjU4LWI2OWQtNjJkMTZiNDdhZDkxXkEyXkFqcGc@._V1_SX300.jpg HTTP/1.1\r\nHost: m.media-amazon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 33352\r\nserver: Server\r\nx-amz-ir-id: 17148072-f3b9-4103-8b80-a1e1a367fc39\r\nlast-modified: Sat, 24 May 2025 18:49:25 GMT\r\nsurrogate-key: x-cache-260 /images/M/MV5BNDQ3ZmFkZjctNGUzMS00MjU4LWI2OWQtNjJkMTZiNDdhZDkxXkEyXkFqcGc@\r\nx-nginx-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=628939242\r\nexpires: Sat, 07 Apr 2046 23:06:28 GMT\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nakamai-request-bc: [a=23.36.77.125,b=301957331,c=g,n=NO__OSLO,o=20940],[c=c,n=SE_AB_STOCKHOLM,o=20940]\r\nserver-timing: provider;desc=\"ak\",cdn-cache-hit,cdn-hit-layer;desc=\"c\"\r\nx-cache: Hit from akamai\r\nstrict-transport-security: max-age=86400\r\nakamai-grn: 0.7d4d2417.1777815946.11ff80d3\r\ntiming-allow-origin: https://cataz.my/\r\nakamai-cache-status: Miss from child, Hit from parent\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33352,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x453, components 3","md5":"b87834e68772eb19415d5368e7fc00a3","sha1":"dcc1b19ecb5079339a3cc480f06bbfea71df70a5","sha256":"4220547c1a97c7c538fa5c35bce8801ed2de8f8aee1a80611b1b6de1131e1fba","sha512":"24a8147606136770511d83670e9f25cceb3d59e707f4a12c6135e8e6eb2a699d259533940f6619c7af9e1a1ebf87b3ea4fe5767c6daf3bd369da2587702168bf","ssdeep":"768:tct+wycKhxbyViDNiDtwoCqcqhtwxkTm9QVsZJKLUh+e2jsl:t40feikxLcAtwmEk4JKLUh+Rjsl","tlshash":"aae2e1a77b083edec697b57b36bc10751a9c0d78a08c8dcd627b9344c92de413d9878a","first_seen":"2026-05-03T13:46:18.486699Z","last_seen":"2026-05-03T13:46:18.486699Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":54,"dns":124,"connect":1,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/iUgygt3fscRoKWCV1d0C7FbM9TP.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"79.127.216.111","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:46.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 02:02:09 GMT","end":"Fri, 31 Jul 2026 02:02:08 GMT"},"fingerprint":{"sha1":"1C:D5:FD:95:20:FA:8A:B8:83:02:53:F2:94:CB:82:86:5D:0A:7B:99","sha256":"B9:13:FA:72:B8:DF:8D:09:EE:02:09:DF:A9:CB:C5:E5:5A:68:6F:D2:72:3A:90:1B:1E:21:37:F4:93:18:12:8B"}}},"request":{"raw":"GET /t/p/w342/iUgygt3fscRoKWCV1d0C7FbM9TP.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:45:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14174\r\nserver: BunnyCDN-DE1-752\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67f7a5d2-375e\"\r\nlast-modified: Thu, 10 Apr 2025 11:04:50 GMT\r\ncdn-storageserver: NY-833\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 857\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/01/2025 15:38:11\r\ncdn-edgestorageid: 1078\r\ncdn-requestid: ae48c1e2f86e2c8d01ef6677c809fc6f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":14174,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"53a3a3ae5bc14a62a9ef16cdec1dd6b8","sha1":"458a6e8adc0446e67bfc56af0394e3f48531cf31","sha256":"876bc55ace0e378e51815894ad837758824a4f15f6788b714efed7727790d5f7","sha512":"740a0eab981ed748dc7d42ba2129be901d6703d32284de9b2a2bf7fe0092cb413a1f3e8b441125f3ab6a08974048af9860b8db8664af94fd82621519b2453cd3","ssdeep":"384:BmY3RiEgfHX2rVYz6i45/BRRQSCnK3xDb6P62:BmYhgPXZbU13C4xD32","tlshash":"c852c0314996c37d5e6270e122fdadb5270a279001de9206bc0a5c807b7d8dcff21569","first_seen":"2026-05-03T13:46:18.487783Z","last_seen":"2026-05-03T13:46:18.487783Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":98,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sensibleexterminatorprivate.com/e374e32a8cd336033ad180d1424bb687/invoke.js","fqdn":"sensibleexterminatorprivate.com","domain":"sensibleexterminatorprivate.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:47.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sensibleexterminatorprivate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:40:40 GMT","end":"Tue, 07 Jul 2026 23:40:39 GMT"},"fingerprint":{"sha1":"4C:DE:F3:9F:F1:1D:00:32:A4:14:07:0D:1E:1F:BB:61:B4:81:3A:26","sha256":"14:23:63:9A:6C:B4:FE:B2:DB:AB:CF:63:11:0C:1E:1D:3B:B8:F3:F6:8A:2E:C9:4F:B9:A1:27:4C:94:FA:04:5F"}}},"request":{"raw":"GET /e374e32a8cd336033ad180d1424bb687/invoke.js HTTP/1.1\r\nHost: sensibleexterminatorprivate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:47 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 20268\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,Device-Stock-UA,X-Device-User-Agent,X-OperaMini-Phone-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 6\r\nHost: sensibleexterminatorprivate.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 1c012f2524dc13cb70738bdc8ec6c1b9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51185,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51185), with no line terminators","md5":"435c686c3c07d1de2ac2f974e474f35b","sha1":"008157fa54d2e120f78273c1c04d0bf9d1189bd3","sha256":"7036e1d5fa1f544094dbfd25efd5b1b8d021f5d897860df47ced03924e786992","sha512":"633ce459b8d5b766801882e4efbe74bc583157f54c8882047b5a85b47659542267b4317c9b46dc3c1079c864eae44f642d43147299b1cf448285ce346def92ee","ssdeep":"768:U17hxeE6mHp9GzuNWlpBCHpDBRKO8doFtXj9H6sgT:gxeE6mHp9zA7BCHpDBcV+fz9H6sS","tlshash":"7a3317887fb1b07503b67473622f9046f25c0d0956ecd8dcd087a8a87ea87e9d1b7b25","first_seen":"2026-05-03T13:46:18.48868Z","last_seen":"2026-05-03T13:46:18.48868Z","times_seen":1,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/68/a5/58/68a558e3ab9827233b8f6de17f758f22.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cataz.my/","date":"2026-05-03T13:45:47.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 21:50:47 GMT","end":"Thu, 23 Jul 2026 21:50:46 GMT"},"fingerprint":{"sha1":"23:74:93:25:BB:94:6A:F0:09:05:7F:57:73:50:14:CD:19:AA:AF:20","sha256":"13:12:D4:15:47:A9:32:60:B9:69:04:44:B0:1C:A6:FF:80:89:A8:57:85:61:DB:5D:BC:87:06:24:86:84:51:44"}}},"request":{"raw":"GET /68/a5/58/68a558e3ab9827233b8f6de17f758f22.js HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cataz.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 13:45:48 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 37610\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,Device-Stock-UA,X-Device-User-Agent,X-OperaMini-Phone-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 4\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: ab04e2ee61eab3ba91188840827867a2\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":103360,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a1560f5b6e534e873d334653761db8e3","sha1":"761145b055888f541d4918c5372f9217ccd0bbca","sha256":"eb2e7a262026789e318400d8521894c04ab812fb10dfc3600fe4ab9fb732bc13","sha512":"e5a35c7d2a07d1dde28e530253d6f4b19ba37604b4712ea03b017c1e29ebb3340980ec62faa67a170c6bd7d06d495eba9e7d2145f0bdd89317a92f95daa9d38a","ssdeep":"1536:kHLBN82ttARd5zkYcWZ+u9DJvDWaBBl2qc0t7urHYeCz6Q3d3icPS6JQBG7o:cBQ8u91v7Hl1c0t7urHysVJ","tlshash":"9ca3c68cbf50f55853f62432222f940af0e90c5641dcd198fa52b8ea7f7cf48e9769a4","first_seen":"2026-05-03T13:46:18.489607Z","last_seen":"2026-05-03T13:46:18.489607Z","times_seen":1,"resource_available":true,"data":null}},"time_used":882,"timings":{"blocked":332,"dns":55,"connect":97,"send":0,"wait":103,"receive":96,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}