{"report_id":"bc24aa1f-ec74-479c-8e57-31a9049ad9b0","version":6,"status":"done","tags":[],"date":"2025-12-10T09:04:09Z","url":{"schema":"http","addr":"www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"title":"(1) New Message!","dom":{"size":67550,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1a53bee0837fc56278c1e0e10bca0d15","sha1":"5b3cb6ecd18c11b383c9a30f916a4775b67f0301","sha256":"d1acaaf92cffbb23f049a40acaef91e2fa0b2bdf891162dea8f79de5266b3d2d","sha512":"790605d973132ae6de7ff316aeccc01a970b29595644adaa8a5eb53702117925f04405fa994ba548f180da1d8de8ad32a2cc27e45610ce7e812c8de5ee9d923e","ssdeep":"1536:gpRpQitiTbObQHuHHFlFtFPFsWXE3TCsCHM0+8n9:gpRpQitiTbObQHuHHFlFtFPFsWCCHM0F","tlshash":"d563f16a2dd11150c6164628a3fe6f28271c48c36c5ffcfab7d1148a8f55abc53ea21f","dom_hash":"domhash37fa84df85cae22f54658f4955cb225f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-14T09:04:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":24}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hopefulvertical.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hopefulvertical.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hopefulvertical.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hopefulvertical.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-07T22:17:02.440237Z","alert_count":0,"request_count":1,"received_data":17441,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2025-12-08T06:27:05.192108Z","alert_count":0,"request_count":1,"received_data":76015,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"atencionalcliente.movistar.cl","ip":{"addr":"159.60.134.7","port":443,"asn":35280,"as":"F5 Networks SARL","country":"United States","country_code":"US"},"domain_registered":"2005-10-14","domain_rank":1050354,"first_seen":"2017-07-03T21:26:12Z","last_seen":"2023-11-10T18:22:56Z","alert_count":0,"request_count":1,"received_data":220123,"sent_data":514,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"creative-sb1.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":22211,"first_seen":"2025-08-08T09:32:32.509707Z","last_seen":"2025-12-09T05:14:37.205883Z","alert_count":21,"request_count":7,"received_data":249523,"sent_data":3209,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ladocumentacionaldia.com","ip":{"addr":"50.31.176.9","port":443,"asn":23352,"as":"SERVERCENTRAL","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":166922,"sent_data":522,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.godandcountry.blog","ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-21","domain_rank":0,"first_seen":"2025-12-10T09:04:11.205725Z","last_seen":"2025-12-10T09:04:11.205725Z","alert_count":0,"request_count":19,"received_data":643021,"sent_data":10329,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-12-03T15:19:41.85936Z","alert_count":6,"request_count":2,"received_data":171912,"sent_data":840,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"i.blogs.es","ip":{"addr":"3.167.2.32","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":701472,"first_seen":"2015-02-27T10:23:09Z","last_seen":"2025-11-29T07:37:03.830296Z","alert_count":0,"request_count":1,"received_data":206152,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"hopefulvertical.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-07-01","domain_rank":0,"first_seen":"2024-07-02T21:48:26Z","last_seen":"2025-11-10T06:09:51.519904Z","alert_count":4,"request_count":1,"received_data":47555,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"18.195.78.6","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2025-12-09T19:41:14.303979Z","alert_count":0,"request_count":1,"received_data":431,"sent_data":460,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.adslzone.net","ip":{"addr":"79.127.237.161","port":443,"asn":60068,"as":"Datacamp Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-09-18","domain_rank":121536,"first_seen":"2012-05-24T16:37:32Z","last_seen":"2025-12-09T12:32:32.506026Z","alert_count":0,"request_count":4,"received_data":145704,"sent_data":1910,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"www.bbva.pe","ip":{"addr":"96.6.16.130","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"unknown","domain_rank":129534,"first_seen":"2015-01-07T21:20:16Z","last_seen":"2025-11-22T18:50:25.887664Z","alert_count":0,"request_count":1,"received_data":176883,"sent_data":533,"comment":"","tags":null,"fingerprints":null},{"fqdn":"skinnycrawlinglax.com","ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":38609,"first_seen":"2025-07-09T22:28:05.771371Z","last_seen":"2025-12-09T07:30:44.39776Z","alert_count":20,"request_count":4,"received_data":2080,"sent_data":2273,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-12-10T06:40:45.682178Z","alert_count":6,"request_count":2,"received_data":1060,"sent_data":1546,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"s3-eu-west-1.amazonaws.com","ip":{"addr":"52.92.17.184","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2005-08-18","domain_rank":1196508,"first_seen":"2017-03-24T17:39:01Z","last_seen":"2025-12-09T07:55:27.639809Z","alert_count":0,"request_count":1,"received_data":571619,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"www.japan2uk.com","ip":{"addr":"23.227.38.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"domain_registered":"2020-10-02","domain_rank":1285918,"first_seen":"2024-10-22T03:08:17.384993Z","last_seen":"2024-10-22T03:08:17.384993Z","alert_count":0,"request_count":1,"received_data":119848,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Shopify","description":"Shopify is a subscription-based software that allows anyone to set up an online store and sell their products. Shopify store owners can also sell in physical locations using Shopify POS, a point-of-sale app and accompanying hardware.","website":"https://shopify.com","common_platform_enumeration":"","icon":"Shopify.svg","categories":["Ecommerce","CMS"]}]},{"fqdn":"comunidad.movistar.es","ip":{"addr":"3.167.2.61","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":297893,"first_seen":"2012-08-29T12:37:59Z","last_seen":"2022-10-07T09:34:26Z","alert_count":0,"request_count":2,"received_data":2525,"sent_data":992,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.ytimg.com","ip":{"addr":"142.250.74.150","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2025-12-07T23:21:23.948202Z","alert_count":0,"request_count":2,"received_data":241406,"sent_data":920,"comment":"","tags":null,"fingerprints":null},{"fqdn":"imagenes.iberoeconomia.es","ip":{"addr":"104.21.81.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-12-10T09:04:11.202511Z","last_seen":"2025-12-10T09:04:11.202512Z","alert_count":0,"request_count":1,"received_data":326300,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-07T22:13:56.807982Z","alert_count":0,"request_count":2,"received_data":81924,"sent_data":1114,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i1.wp.com","ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":44421,"first_seen":"2012-09-27T05:17:34Z","last_seen":"2025-12-09T08:04:14.7404Z","alert_count":0,"request_count":1,"received_data":10444,"sent_data":540,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"images.pexels.com","ip":{"addr":"104.18.66.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-05-15","domain_rank":246953,"first_seen":"2016-11-15T16:49:09Z","last_seen":"2025-12-03T12:23:45.675269Z","alert_count":0,"request_count":1,"received_data":331392,"sent_data":519,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"negocioefectivo.com","ip":{"addr":"213.158.84.71","port":443,"asn":0,"as":"","country":"Italy","country_code":"IT"},"domain_registered":"2016-10-18","domain_rank":0,"first_seen":"2025-12-10T09:04:11.226982Z","last_seen":"2025-12-10T09:04:11.226982Z","alert_count":0,"request_count":2,"received_data":332,"sent_data":1000,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ts2.mm.bing.net","ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1997-09-03","domain_rank":107082,"first_seen":"2012-06-27T19:39:32Z","last_seen":"2025-12-04T22:24:59.585045Z","alert_count":0,"request_count":2,"received_data":42074,"sent_data":1012,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"turtlecreeklane.com","ip":{"addr":"104.196.31.58","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2016-07-30","domain_rank":2199764,"first_seen":"2025-12-10T09:04:11.209539Z","last_seen":"2025-12-10T09:04:11.209539Z","alert_count":0,"request_count":1,"received_data":555713,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bandaancha.eu","ip":{"addr":"172.67.164.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":373354,"first_seen":"2014-04-20T00:41:11Z","last_seen":"2025-11-02T04:31:18.673126Z","alert_count":0,"request_count":1,"received_data":115969,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2025-12-03T15:50:53.739602Z","alert_count":3,"request_count":1,"received_data":377,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"wayfarerorthodox.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-08-08T11:06:50.216151Z","last_seen":"2025-12-09T05:27:12.076919Z","alert_count":33,"request_count":11,"received_data":227752,"sent_data":17704,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.show-creative1.com","ip":{"addr":"104.21.15.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":392451,"first_seen":"2024-08-27T12:23:01Z","last_seen":"2025-12-07T12:22:55.152969Z","alert_count":0,"request_count":1,"received_data":2282,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wayfarerorthodox.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","size":6454,"data":"","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"95038291a7e6266be840de7655543050","sha1":"a3cc0dfed7afc3f0fac95189396148f232f809a1","sha256":"f148c513a3976a83a5bb7ff938d2b698daf0b80315b688ccc46fffa7c2d5f5dd","sha512":"819a0127514655c00c66b677b6130a389db8ef9754b9b2c5ee64e5dbcd2511e97f0a00bde2d96fcf90c72a411723169d7fc70e337dd1c1383863868bf2166030","ssdeep":"","tlshash":"36c08c582a008820a123340dfe1d03814dd14f1aa320b803600c4090ac8a12b8593829","size":145,"data":"","first_seen":"2024-06-08T22:37:52Z","last_seen":"2025-12-10T09:04:28.056668Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"75313d7b5aee05048718b8d4b1bc3a00","sha1":"646f6accaf4c593373d493f7e8267eee3b152e2a","sha256":"8d191018f75a620f339dbf8f532c70ccaa4ed941e56bc4bb6f16e88cfcf4678e","sha512":"a3544c29d75dc12efa3d56eed8687631d60eff328fc6d6a52e85f6f674a522d0b2eb46ae2d1830df63c55120ebf337de84278b412b62976c42783248c2658450","ssdeep":"","tlshash":"cf41e9342b5f2ab94df325320717aa963c76605ccac572c6bc2c0ac05b60968331ae5a","size":2006,"data":"","first_seen":"2025-12-10T09:04:28.05941Z","last_seen":"2025-12-10T09:04:28.05941Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"5eee638cd590393a2877f355224bc95e","sha1":"10bb59781d7772f26daa40a4e3f31131c3b259d5","sha256":"e4776bae9691a79ebdf48e52d67c4ca1a733430bc656e184db4ad171d21eb964","sha512":"247c53f1df6ace3ebeffa77151c9e42062be81d5228e198805fe588aed5b8c90c71192eca78199e27d66030cf80d9a66822846a14bf121ebbda709c4d489c530","ssdeep":"","tlshash":"2f31d7b81f5f5efe5bb004310b1798a77d33212ce5c771d09a3448c9a6d0e646704db9","size":1528,"data":"","first_seen":"2025-12-10T09:04:28.060301Z","last_seen":"2025-12-10T09:04:28.060301Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-content/themes/random-news/assets/js/navigation.min.js?ver=1.0.3","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"34111f809922172188dd1d5fe79bf8e9","sha1":"4850fa99bda5a1de24ff33ed9c5d444b8aa2467c","sha256":"e41a7f04a7ee5039f882bc018d3f8123784cb1e6039be786e139a8df36d55621","sha512":"630c2174efa3ade1e686d9615e7d33ce9cac2efaf92eb3071075b251444cae1fadf9e34eba1b38c1df5cf24b417772b2c3580b3e8052794af0bd22ffe2a06220","ssdeep":"","tlshash":"4821e27f1a803abb1ace32cb73e754813b732096a84548256593dc470e28df105f5bec","size":1233,"data":"","first_seen":"2023-03-10T13:51:14Z","last_seen":"2026-06-10T11:24:24.491942Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3d04519933373850be16a6a37922888","sha1":"99b5086a73e2e7a2656edf5eef94cbebecc75a53","sha256":"b921ea3d7a58ba3f204bd76dd3cb00a3af8308976811596e6d907041e34495f4","sha512":"faa2f4f1c477dea94fe27dd04ff5f91311aa81785893fdafd26ba33ec2032b4af32645f8e49820105349911e31a52451e9db0bec021456dadf54540835523cc4","ssdeep":"","tlshash":"1bc02be58000f3444063cc102cbcc1018f10dd102a5aa01735e40471415090ac4d377c","size":140,"data":"","first_seen":"2024-06-08T22:37:52Z","last_seen":"2025-12-10T09:04:28.061073Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"b69ee1913918a71cb69c974d93752a81","sha1":"96f03b300621b9045bf5f886f0d9bf81b95c441c","sha256":"28d3d567a3fcb6bff175b0f2a1beb1b3bb32209d434be37aab62e0cde09a2f57","sha512":"4f232bafe88541d70c20ebbbba106fa555e80f07fe10e3e8ee1fbce86077e46b98e11bf08d08cc03e5cde631b0595575e28f948e46d1a4dae47bad998f20429d","ssdeep":"","tlshash":"22b012ff3b78295f7dcc411188199f5c924128341c77c17877a7a4c4e46a82cd1429bc","size":115,"data":"","first_seen":"2025-12-10T09:04:28.061556Z","last_seen":"2025-12-10T09:04:28.061556Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c27441425f7fd4977a67b5460571464e","sha1":"4279af31f568f0ae9217997d37fcd07a972acfda","sha256":"186d5f3e8249c563da020078f0525ae69cfea535aea71b6f3aea6e0ab16835aa","sha512":"57a30273c98ff00a37153e08e846ea674679cde3bc62499aff07be9a1cf2cea316c518c05e4049f5aa2625ca9e2300e1d0d1a4e6f20cfcae922fe67d680badac","ssdeep":"96:dOozoTY9KU79dAC2Fgcb9FKU79dAC2FyU41mDOCaCfMEDaH:dbzkkACKZ2kACKpA+oCkCaH","tlshash":"36a11a742fdb99bc59b2103a1a37984a3c32600ed6c5f582bc1cc6c19f50fa42b59ead","size":4797,"data":"","first_seen":"2025-12-10T09:04:28.062421Z","last_seen":"2025-12-10T09:04:28.062421Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6246ed531e5b8a4cb9810df09b36f615","sha1":"f7387bfe7047dfa8c25d866073fc1f99e35c023d","sha256":"59dd4251e5f54e596b9dbb4b01892b15f811c2e6a8ba145a1262c01f3f789e68","sha512":"7ddc9f581ac5b75a02ad1caecdce31de3661516d9661cb013c4901d78ea2695a1c427c358ac2aee7fdc9009ee3c5198f804d99097f154d5412654f4b4b74b69b","ssdeep":"","tlshash":"49e02b2d98e706384cf67a441079da7934fc78a4aaa3d067525cc86dcd39fc54c15aec","size":424,"data":"","first_seen":"2025-10-13T00:16:02.556543Z","last_seen":"2025-12-10T09:04:28.063301Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-content/themes/random-news/assets/js/endless-river.min.js?ver=1.8.0","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b81c1f5f93a64a27735dbcccb6a7fc63","sha1":"e23ef344044ee2ae31ee616ba9ab17c9a0d8e854","sha256":"df4c28cc9cbaea711348a4efeb70f3bed5d72535e43f41b2a4ab11ac6de17941","sha512":"a32cfda0b921baa3f3ebef3822e54b643c650e6f99ea6cabd78840356606f38d696748867196317b28ef03b6e90a297323383ddb528c1a75f1adce7d7e9a96ec","ssdeep":"","tlshash":"9b41402a71a235f7a5f7962d232bd00e753e8a08d736821ee6aba0443dedc442157b5c","size":2316,"data":"","first_seen":"2023-03-10T13:51:14Z","last_seen":"2026-06-06T11:30:29.438853Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-content/themes/random-news/assets/js/custom.min.js?ver=1.0.3","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e743a702d1b09fcdab99895a38bec4e","sha1":"02952f0a4c35c377b6085e4229f803e98fd3066c","sha256":"c7739ef2dd5325e2d7d8692ec1585aa31b4dde734ae3be54212ec52aa3508843","sha512":"89e77c87e30329a21a61d9477c7db3892ee220daf5e4a189ebf821745078375f6cc80494b282eb64fa11ca8b520a128cb5f237cc4fbc858abbb8eb91b72934b2","ssdeep":"48:kkOxpWzu5bN5bWu5bN5bEZu5bN5bym75bN5bEnKmr05bN5bEtVm95bN5bEYmS5bT:kUzBVfmpmrTVmZm1r+AMstKanvhmRr","tlshash":"07d1a611b42661974ab733b6a047e200a24f2d3ddac962c19dc788e917cc80e9735bf7","size":6177,"data":"","first_seen":"2023-08-18T02:07:25Z","last_seen":"2026-05-13T13:06:03.749273Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"14776791fe224be869ab66b1ef8adbda","sha1":"2b4b2cc9d91d4c5f6e06bd19a54a7eebc9c6550a","sha256":"18fc980d6c8f093fd4ac7d83263603dff1a5ca7f5487540ea1ebca826c8453a3","sha512":"f3867121c8b57f5b7242953cce5eb52c1dfb8a8b3be3ae06739068f8323eff6264540e251bbdf793705553210f7688583492d28b583b8c6595af0567e7ff01eb","ssdeep":"","tlshash":"75c02bee13bc3007b57b00000868bb10c010af240d7c84b4771226d15091734d18321a","size":137,"data":"","first_seen":"2025-12-10T09:04:28.064468Z","last_seen":"2025-12-10T09:04:28.064468Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-06-12T01:25:08.82438Z","times_seen":18643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/utility/robot/3/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84384,"data":"","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-06-11T22:31:53.886888Z","times_seen":12101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"42f29b6712588c8fbf908d27acb79e68","sha1":"3badb9be5cf073f3c411d58a9df2b659d10007a1","sha256":"75e263b69cb4a5eeda3173cf0ededf602d40f7046b7d8f56f0f9cf70c4b20f16","sha512":"06470ff6ecd73bcbe4fb7ef8625e45ff17c0c5fb1d0be48d3e9e7e0fa85a63fee5e9150923c1cbbad4d02041d954f334898272893ea5e03376117b101200a63c","ssdeep":"192:cVJMLiEWiFiacrcYmen1VuOTlmGFF3bH/fA68IDeIToJ:cVyLiEWiFiHn1VuexjrHnAym","tlshash":"3f22530409b9d531c45ca12e207e32a6f7240993ad7abbd4bbc901055fdd95fb97823f","size":10330,"data":"","first_seen":"2025-12-10T09:04:28.065309Z","last_seen":"2025-12-10T09:04:28.065309Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-12T01:48:44.914402Z","times_seen":830921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-content/themes/random-news/assets/js/slick.min.js?ver=1.8.0","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"66743b6d71a22c592ecd79da70cd26eb","sha1":"04c6168035124c2421a53c52b789437645bae9db","sha256":"a1a49c85ae2db19ca7ad2bd54a706a632f8c9534c609acee3388f116df3bc53d","sha512":"7131214de0bb8023a0595294d4ae518a26cebcd884cd6c46c4c7302b9abcd62cfc8e50bd1d135e432f68e1b04558f2c916705fbe2752e103539429c44b1b3c35","ssdeep":"768:N7VPetHFVsb8S8AGltPBH76Kr4hB9Aojq4nQB2AF4uoa+hV6d5dP0I17G:PgV7TPBHHa","tlshash":"f513620ae210176299d711e12117c50db3fbf73db522c0ac78e98bdb609d9089ad77fa","size":43897,"data":"","first_seen":"2023-03-09T02:33:25Z","last_seen":"2026-06-10T11:24:24.50227Z","times_seen":209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/cf/85/de/cf85dec27b33de4ca3d391cd894db44c.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"461a83e139987dacc656e68b89e17c1c","sha1":"6c8f81ab9de40cae457a2d4f78745e487800f728","sha256":"5098912f339f9e97cc9f8fcea006310b27f2d97b0ca23fead4dcfa0256b13e5d","sha512":"1f4563e8a4a64ad3dc9b0b9184b613c70c401b6e64a4c825d20c162ca697278318cce0ec4382f0e2677fc184843b5632c5d45c10683f1b0f36bdeb80115b304f","ssdeep":"1536:h3Zs5j4xaqmOxyMTZ0ob3meMv6IqyiB+9+eD:h3Acx//xDTofv6fOd","tlshash":"c883c88d7f99f1ac03527072722fa21ef0291d126098d0a4e253f5fdaf78729e976b14","size":81914,"data":"","first_seen":"2025-12-10T09:04:28.032811Z","last_seen":"2025-12-10T09:04:28.032811Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/7a/5a/47/7a5a4701e07357d170df9cd72338e38f.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e971ae159e44566e81fb275c823224b","sha1":"d3e207490b2b5a60e01e33766766e2f17e88b156","sha256":"b3d0dc98a71128afa6d9b2f969defcbb3873c1e2a12199195d222642d032fe0a","sha512":"92ea65e3accbf50a785862ea9d6992993fbdaf91a264cbaec6bc8da970e2b6450e009a99ba7592008813601055d27d8161bdd8672b5daa3f86cc9b91c9de4de7","ssdeep":"1536:Nj7x8hriaNSZAZ4QjBUlqOdGSh6C9ZVrRRjy/vYJbtJ+3B95De0ovV:byBGFwgWUP","tlshash":"6fb3e98c3f61f05d02a66076113f6b1bf11a1d45188cc9e8f617f4ee2b6c21be93b996","size":111622,"data":"","first_seen":"2025-12-10T09:04:28.009576Z","last_seen":"2025-12-10T09:04:28.009576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-06-12T01:25:08.82438Z","times_seen":18643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-12T01:48:44.91381Z","times_seen":901805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hopefulvertical.com/57a194238a5ef119b4d89c3ed35de09a/invoke.js","fqdn":"hopefulvertical.com","domain":"hopefulvertical.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"68679790d750e7e0991480444713708c","sha1":"938099791cb03a1450875542d5d4853626c46fdc","sha256":"03b4e67b7763028a32969f36d7bb7ad9d6c5e12d696e50e3f70a3e28038e7e34","sha512":"a0d2761bd714ae21d6a24ee190073bb5241c808aa90d3081e64338bad03f83f35d4bb363d30dcfe3a521b57f048060ea54e28df7ee5d3a3d044779c6fca7f307","ssdeep":"768:CssLt+urzIyrxj4oolktYllJz4c5sfH6lmhj8ehArp76k8yXy:Ckurn7JfhAl385","tlshash":"aa23d9887f90f75457966073723f800bb0156d60668cd8acd1a7dce87eacb29f5327a8","size":46710,"data":"","first_seen":"2025-12-10T09:04:28.031857Z","last_seen":"2025-12-10T09:04:28.031857Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:50.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"86:F4:DF:07:D6:8D:EF:68:44:7A:73:C8:39:14:1A:2F:98:5E:A2:40","sha256":"A0:B7:4F:94:25:40:33:52:BC:F7:0A:E1:AD:30:BD:19:C3:E9:BB:25:0B:05:26:7C:F8:BB:F0:59:3B:E7:F2:8D"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 10 Dec 2025 09:03:50 GMT\r\ndate: Wed, 10 Dec 2025 09:03:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1f04e9e49d52374a409de4887e47180d","sha1":"8fee2f920567a574448d1aa6565c95951b68f9b5","sha256":"10cf0680b9dc5b310d265479bcebc5b380474bf2e8da9361cf8be458d183994e","sha512":"5fde8f721343e9c6254229e791ed64d6b47f28fad7690f7c83fa8c29e3112d0974f65ae0c63f09acd3e026dcb56c4de3fe0ffe37c464eb326b0495aa6c03b31c","ssdeep":"384:pKf5KgKPKrKyUK/qY4+K4KYKpKfMK1KWK6KyhK/qY4XKNKtK4KfdKkKDK3KyQK/9:pCJmwBUiRDfMTcfFBhiEymdmtC0BQiVb","tlshash":"df7210a1041750009b834ce223cebf35fe1f52117152d0b5abfdab6b9dcbc66526939d","first_seen":"2025-11-19T00:20:32.486705Z","last_seen":"2026-05-28T13:25:58.724835Z","times_seen":6027,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":155,"dns":0,"connect":15,"send":0,"wait":33,"receive":0,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bandaancha.eu/s/1018/xe/bt3171biuaamsbw.jpg","fqdn":"bandaancha.eu","domain":"bandaancha.eu","tld":"eu"},"ip":{"addr":"172.67.164.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bandaancha.eu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 15:41:01 GMT","end":"Sun, 18 Jan 2026 16:39:44 GMT"},"fingerprint":{"sha1":"F5:7F:EE:76:6A:61:2F:43:54:3A:20:7E:7D:4F:DD:6E:30:70:51:5A","sha256":"B1:14:99:29:F8:BA:0E:55:D4:9A:97:AB:43:91:CC:97:A2:36:6B:6D:8F:B6:D6:C0:59:4B:35:FF:12:E8:04:42"}}},"request":{"raw":"GET /s/1018/xe/bt3171biuaamsbw.jpg HTTP/1.1\r\nHost: bandaancha.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 09:03:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 115148\r\nlast-modified: Fri, 26 Mar 2021 18:00:57 GMT\r\nvary: Accept-Encoding\r\netag: \"605e2159-1c1cc\"\r\nexpires: Thu, 10 Dec 2026 08:33:09 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xcYRGrte6ECVxSjSjjzNdaFjdm6%2BOlHgMtg%2B1ibFuqaA3MFv35QPj3rAhYeh7GiXxpdr2McmLRSTO9HGE0G6K%2F8K%2F5yRz9u%2Blk6n%2B4M%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9abb922e1ed9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115148,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1202x677, components 3","md5":"ac6762f85668ecc58d166048d9bba39f","sha1":"16c66c75796656a58d3bc09f8aa2e4df2f239a05","sha256":"8136e50868256d66c9d49392c35fb4779f67524a94651ce4987eeb9a24ad8d50","sha512":"911c2d1bfba5c71e59a6918ddf5f6d890268820a3d2c6e5a5ab3d7e9f2d5f2dfe7de5e8ee364d154f534b0838421c75413c4ee41afab5f7aab1143c02c63265f","ssdeep":"3072:UyRNCTjMqZC1Y6MiPh453j2wT8c3siYit8Majjby9RZn:UQujfQi6fJ2j20ha3boRx","tlshash":"51b31276a75457c0619198c3bae313bd83baeb44670dd8022e74ceb97c7fc894ab6141","first_seen":"2025-12-10T09:04:28.002079Z","last_seen":"2025-12-10T09:04:28.002079Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":42,"dns":70,"connect":1,"send":0,"wait":77,"receive":4,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"negocioefectivo.com/wp-content/uploads/2021/05/movi_doblegb_18.5.21-05-1024x1024.jpg","fqdn":"negocioefectivo.com","domain":"negocioefectivo.com","tld":"com"},"ip":{"addr":"213.158.84.71","port":443,"asn":0,"as":"","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"negocioefectivo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 06:02:20 GMT","end":"Tue, 10 Mar 2026 06:02:19 GMT"},"fingerprint":{"sha1":"46:9D:3A:AF:0A:B5:97:E4:11:26:19:F7:4C:1C:A3:61:3D:B7:ED:44","sha256":"AE:E9:03:58:19:67:76:41:09:7B:5B:D9:4A:F2:5B:F8:97:68:C8:EC:C5:EF:C5:96:40:D2:DA:84:78:61:C7:9C"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/movi_doblegb_18.5.21-05-1024x1024.jpg HTTP/1.1\r\nHost: negocioefectivo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 10 Dec 2025 09:03:47 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":157,"dns":102,"connect":23,"send":0,"wait":31,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"comunidad.movistar.es/t5/image/serverpage/image-id/107817iFDF9371CD5CC7706?v=1.0","fqdn":"comunidad.movistar.es","domain":"movistar.es","tld":"es"},"ip":{"addr":"3.167.2.61","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure06.lithium.com","organization":"Khoros, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 28 Mar 2025 00:00:00 GMT","end":"Wed, 22 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:84:40:0F:FD:5B:5B:3E:27:EF:04:05:E1:1E:9B:D4:EA:16:A1:A6","sha256":"3A:F3:D1:38:7E:FB:70:FE:35:B6:44:4B:C0:F2:74:47:7C:83:52:6F:C6:5E:FB:A5:7B:BF:EF:04:1B:B0:E6:0D"}}},"request":{"raw":"GET /t5/image/serverpage/image-id/107817iFDF9371CD5CC7706?v=1.0 HTTP/1.1\r\nHost: comunidad.movistar.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 10 Dec 2025 09:03:47 GMT\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nvary: accept-encoding\r\nserver: Apache\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nx-content-type-options: nosniff, nosniff\r\ncontent-security-policy: connect-src https: wss: blob: https://comunidad.movistar.es;default-src https: https://comunidad.movistar.es;font-src 'self' data:;frame-ancestors 'self';frame-src https: data: https://comunidad.movistar.es;img-src https: data: blob: https://*.movistar.es;media-src 'self' data: blob: https://comunidad.movistar.es;script-src https: blob: 'unsafe-inline'  'unsafe-eval' 'self'  https://comunidad.movistar.es;style-src https: blob: 'self' 'unsafe-inline'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\netag: W/\"12g6gnzr6dz4qs\"\r\nx-cache: Error from cloudfront\r\nvia: 1.1 331956c71b3e587b085083fed0bc8c3e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: EpvoaRa_WRqeN3h_9xfS21QnLDZwu5ewd2552fYNuo8FhVfCQ8QUnw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":62,"dns":88,"connect":4,"send":0,"wait":193,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladocumentacionaldia.com/wp-content/uploads/2021/06/Cambiar-contrase%C3%B1a-modem-movistar-6-2048x1222.jpg","fqdn":"ladocumentacionaldia.com","domain":"ladocumentacionaldia.com","tld":"com"},"ip":{"addr":"50.31.176.9","port":443,"asn":23352,"as":"SERVERCENTRAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ladocumentacionaldia.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 10:16:57 GMT","end":"Mon, 02 Feb 2026 10:16:56 GMT"},"fingerprint":{"sha1":"02:46:A9:59:F9:1F:6B:0F:6E:9F:F7:8E:4A:81:76:45:DC:85:44:0E","sha256":"49:62:D7:D3:FA:A2:0B:00:DE:53:D3:6B:84:F7:07:81:0C:5B:94:B9:38:DB:76:09:1D:24:45:40:DE:3A:A5:96"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/Cambiar-contrase%C3%B1a-modem-movistar-6-2048x1222.jpg HTTP/1.1\r\nHost: ladocumentacionaldia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 17 Dec 2025 09:03:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 Aug 2021 01:19:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 166473\r\ndate: Wed, 10 Dec 2025 09:03:46 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":166473,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, baseline, precision 8, 2048x1222, components 3","md5":"f614af322b65a520e1f5cb5a9e196b90","sha1":"b2ce77a447359d0b9769e20f6772ff81b34b989e","sha256":"4782360a30e431145c8591bc39b79dee81a576888b52f30b7b5883e46aff61b6","sha512":"7ae01ddd18d39c323506fdfdb0ee5a0649124e4a9fad645396450b89a23bfa0287cad43ed4fde861c7b2bee17387c574d1042095a2ad4c43c2a43e8a50f6a65d","ssdeep":"3072:MjVcb0YfYzaBU9PJNmGMEYnaIwgGvEPhApchmi5V2zFp083R7Q2yfg+LLPekh:MjVcb0YAaqhv11YAg+mApcIFpbB7dogy","tlshash":"6df323552d93a75feab143358b9304aeaf03b8b0d569084e46ffe59c78123cbd8e1253","first_seen":"2025-12-10T09:04:28.0043Z","last_seen":"2025-12-10T09:04:28.0043Z","times_seen":1,"resource_available":false,"data":null}},"time_used":851,"timings":{"blocked":-1,"dns":140,"connect":131,"send":0,"wait":109,"receive":329,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:47.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 01:14:37 GMT","end":"Wed, 28 Jan 2026 01:14:36 GMT"},"fingerprint":{"sha1":"5A:67:AA:88:D5:BE:C4:00:42:86:CC:4E:FC:E7:73:FE:CB:85:71:60","sha256":"F5:6C:A4:39:AC:04:F6:11:7E:DB:94:93:4C:93:FC:EC:A2:B4:4E:A4:FE:19:8E:22:C0:D8:D4:84:67:37:70:C0"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 10 Dec 2025 09:03:48 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f70450c2bb852b5e5067656b5c793ab9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":60,"dns":1,"connect":17,"send":0,"wait":17,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/24/5b/3c/245b3c40c6d7a28419b530e0f4c8160a/1708270169.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:48.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /cti/24/5b/3c/245b3c40c6d7a28419b530e0f4c8160a/1708270169.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 09:03:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 75664\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 18 Feb 2024 15:29:37 GMT\r\netag: \"65d22261-12790\"\r\nexpires: Fri, 12 Dec 2025 09:03:48 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75664,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.5 (Windows), datetime=2024:02:16 15:05:08], progressive, precision 8, 300x250, components 3","md5":"0ce3d5c31e61b2b14c5ede2cdd64045e","sha1":"4d260a0cc5f3a184568ffe8ca627441ce048a6c4","sha256":"e2955a0eca91674eb16ea126b21a1a04e19a2d7f7ddfdc80f95d2260a0ce6224","sha512":"ef29fc232a651c07916d60bdfdd7705a66711c4e34e1df7c8c33f0534168c43d59f38ea5d2fe5cb69457bbee26349c63ace14fb13cac938953e40937381d96af","ssdeep":"1536:YzK0sNjHMzK0sNjHFA1ymQNLJM76xPb1trgS4w39IxhqgvYwI/wt:YzSMzSC+JFP7rgS4w39ImgTI/wt","tlshash":"6973f100e755dd2bfdd5fa3ac594cb0a931324b4e7b351a838dcac893fa43a648dd641","first_seen":"2024-02-20T23:09:16Z","last_seen":"2026-05-19T09:21:25.498051Z","times_seen":992,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":89,"dns":47,"connect":19,"send":0,"wait":21,"receive":49,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Finterstitial%2Futility%2Frobot%2F3%2Fcss%2Fstyle.css\u0026l=6387\u0026fd=524","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:50.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:33:26 GMT","end":"Sat, 24 Jan 2026 22:33:25 GMT"},"fingerprint":{"sha1":"74:B9:DE:52:5E:A4:22:C1:3F:4E:90:E5:53:C1:13:27:E5:47:BB:D2","sha256":"0D:C6:A2:6A:15:63:9B:67:CF:55:A8:E1:E3:EC:AF:D3:57:2E:38:F3:44:79:B9:FC:61:8A:CD:64:82:05:64:6F"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Finterstitial%2Futility%2Frobot%2F3%2Fcss%2Fstyle.css\u0026l=6387\u0026fd=524 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 10 Dec 2025 09:03:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/impr.gif?sid=H4sIAAAAAAAC_1RTsY8bxReeda76_YqIEEEDkhUhEQTn2_Wu7TUpQi4hKEpIQnLoCgqYnZn1DV7vLDO7Xp8bIk6g0DkSBSCK9WffnQgnBCUFIvIhUZyEFFNdkVMk_gEkUGpkn6WIV7z35vum-L43bz4bZkfERUYPb76t-jKK6EqtYpfPrsuYq9yUr6-VHbtinyuvy7junSv3Zkl3X3dcr2K_Un5LsLZaqdqObTu2U74stQhVb2XOQiZ7TafStCteteLUPPT0f88mK8FQC7x7RE5B8unJP8P3INkEceeHS8K0U5W89mYni2iqNLp89924Has8RudpG2oLYby7uA1lpoR8WYKKdxcOoLrjmQMEckpKzz1CEO8uZCLobh8rDSKIGAH_P_LuBCKaQNIJmNqC5A8JwDiu30Dc2bmudE43j1k6Y6dk6cnfkPmULD06jbjz_Woke-XbKspSqWKDXlhA9iaQrQmSbB9p34LM98HSTyD572TlyTXEnfENEylIfvhSvelS7od0uV517WWvHtLlZuCzZebYPqVejfthYz4iGU5ATQmZsZBJC1loIUssdPhh2bN9jznUrYdNzhq2Rz2Pi8Bu-lXbpk3WQMZm2gdIkwFYNADTn-4kfCNtd8epzsQ4i5kZOrvHUG2Obc-w2tDZy95Poqrrun6t5gwdJPoO2vLew9op6OwBzEYBw0sw6ZRY73yMLi-QC4LcEOSUIJcEeUqQd4ttHpmqKXZ4ZLLAWdTqorrFSKWtId1WaUvEBFQPoHkxlslHZgssPTHqh4aP1CzRIC1GNODFMDkiz8wexfpi5wza4rDMQr_GBas2AtflwmPU5W7TYdxvejzwPAYjC0hTAjUW-nJKzl08iUROyYnnX0ZA92GifTD5Amj2ImhegG4U6Mf3KRehNBWlW-CqQJIuId20htEReXZ0a231wXwzPrh0BoIdvOE-vvB54-pvYLpAogt8KH8laEV3R7dUTsa3VG7IjzeSVHZkn8625nZKU7F0_6rYzJXmVy6ZwbcX2IyYtXtrwqTXaMxl3DLku1XJudCXlWaC_HzFrIvgZmY2VjMdZ8m1mxcvX-kkWhgjVTwBlVPyv29eBZNTcvrs-fmPqP3zGCy5A5McnP_pq1l8DaMIgsRCJAkicUAWARoUMOKpn0Ac_PLXMTc0d9HSFmi6hbhToKsLdKMCNBrAZCdGaaIPzv_hzgNBZI2CSFvjINLRveM5GXlYDl1RZbbtN-qO64fCcT3OwprvNXmd2q4rkJqpbDayfwMAAP__tr0HgLQEAAA=","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:51.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 01:12:52 GMT","end":"Wed, 28 Jan 2026 01:12:51 GMT"},"fingerprint":{"sha1":"67:43:25:0A:D1:7D:95:9F:2D:A3:3F:97:74:7C:0A:AE:D2:D3:98:61","sha256":"09:09:97:4E:79:6D:B5:F4:D7:B7:F6:8F:BE:97:4E:B6:04:9C:25:29:FE:4A:0E:A2:BE:82:F0:6E:CF:8C:74:F0"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RTsY8bxReeda76_YqIEEEDkhUhEQTn2_Wu7TUpQi4hKEpIQnLoCgqYnZn1DV7vLDO7Xp8bIk6g0DkSBSCK9WffnQgnBCUFIvIhUZyEFFNdkVMk_gEkUGpkn6WIV7z35vum-L43bz4bZkfERUYPb76t-jKK6EqtYpfPrsuYq9yUr6-VHbtinyuvy7junSv3Zkl3X3dcr2K_Un5LsLZaqdqObTu2U74stQhVb2XOQiZ7TafStCteteLUPPT0f88mK8FQC7x7RE5B8unJP8P3INkEceeHS8K0U5W89mYni2iqNLp89924Has8RudpG2oLYby7uA1lpoR8WYKKdxcOoLrjmQMEckpKzz1CEO8uZCLobh8rDSKIGAH_P_LuBCKaQNIJmNqC5A8JwDiu30Dc2bmudE43j1k6Y6dk6cnfkPmULD06jbjz_Woke-XbKspSqWKDXlhA9iaQrQmSbB9p34LM98HSTyD572TlyTXEnfENEylIfvhSvelS7od0uV517WWvHtLlZuCzZebYPqVejfthYz4iGU5ATQmZsZBJC1loIUssdPhh2bN9jznUrYdNzhq2Rz2Pi8Bu-lXbpk3WQMZm2gdIkwFYNADTn-4kfCNtd8epzsQ4i5kZOrvHUG2Obc-w2tDZy95Poqrrun6t5gwdJPoO2vLew9op6OwBzEYBw0sw6ZRY73yMLi-QC4LcEOSUIJcEeUqQd4ttHpmqKXZ4ZLLAWdTqorrFSKWtId1WaUvEBFQPoHkxlslHZgssPTHqh4aP1CzRIC1GNODFMDkiz8wexfpi5wza4rDMQr_GBas2AtflwmPU5W7TYdxvejzwPAYjC0hTAjUW-nJKzl08iUROyYnnX0ZA92GifTD5Amj2ImhegG4U6Mf3KRehNBWlW-CqQJIuId20htEReXZ0a231wXwzPrh0BoIdvOE-vvB54-pvYLpAogt8KH8laEV3R7dUTsa3VG7IjzeSVHZkn8625nZKU7F0_6rYzJXmVy6ZwbcX2IyYtXtrwqTXaMxl3DLku1XJudCXlWaC_HzFrIvgZmY2VjMdZ8m1mxcvX-kkWhgjVTwBlVPyv29eBZNTcvrs-fmPqP3zGCy5A5McnP_pq1l8DaMIgsRCJAkicUAWARoUMOKpn0Ac_PLXMTc0d9HSFmi6hbhToKsLdKMCNBrAZCdGaaIPzv_hzgNBZI2CSFvjINLRveM5GXlYDl1RZbbtN-qO64fCcT3OwprvNXmd2q4rkJqpbDayfwMAAP__tr0HgLQEAAA= HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.vafP6Ov5l2KWTs_l7Ca-A0BW0FrQ9UOFxXPmIqUyBdk; uid_id2=693ad8fa-6230-46fa-9b8c-c108aa45d8f7:2:1; pdhtkv=true; uncs=2; pdhtkv5=true; uncs5=1; u_pl23338551=1; pdhtkv29=true; uncs29=1; u_pl26519074=1; sleccf85dec27b33de4ca3d391cd894db44c=[6308898]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 10 Dec 2025 09:03:51 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+5bf80f7cdafb0ea772c728024a46a9a8=6308898; expires=Thu, 11 Dec 2025 09:03:51 GMT; path=/; secure; SameSite=None\niprc_l:6308898=1; expires=Thu, 11 Dec 2025 09:03:51 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 3\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d95016f89bf4f15a20551009cb9d8008\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"godandcountry.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 18:04:18 GMT","end":"Sun, 15 Feb 2026 19:01:38 GMT"},"fingerprint":{"sha1":"39:34:A2:44:5E:09:D7:5B:B3:10:95:A0:BD:C7:72:E7:9E:2B:77:F1","sha256":"A3:D6:A1:84:56:C5:93:B1:A3:AF:BE:AA:EF:4A:02:4C:B6:E0:5C:15:1A:F2:F9:49:75:F2:73:AD:01:83:2E:86"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: www.godandcountry.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 09:03:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 08 Sep 2024 15:07:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"66ddbdb7-15601\"\r\nexpires: Wed, 10 Dec 2025 21:03:46 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PhXj%2FlQOJlEjrEjpwU6jXulcWIDm7tZlMfycjPECDHRPGKGQEsL3%2BF2wjM0Djh0rlT71YcjnSXLBNdd3U6rdwd7nk6FfKJsaRu5io4kOfYD%2FOLhc\"}]}\r\ncf-ray: 9abb922d7c1c712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-12T01:48:44.91381Z","times_seen":901805,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagenes.iberoeconomia.es/wp-content/uploads/2021/04/07124616/commcenter-movistar.jpg","fqdn":"imagenes.iberoeconomia.es","domain":"iberoeconomia.es","tld":"es"},"ip":{"addr":"104.21.81.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iberoeconomia.es","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Dec 2025 12:43:12 GMT","end":"Sat, 07 Mar 2026 13:40:34 GMT"},"fingerprint":{"sha1":"AF:1A:63:C6:7E:39:CE:DA:68:53:1E:59:CD:2C:8A:6C:25:71:8D:F2","sha256":"4C:D8:D3:BD:DA:D1:7C:6B:1B:5C:93:AD:63:FF:C2:C5:92:41:E5:6E:04:20:3E:42:BD:86:9C:62:48:6A:5E:23"}}},"request":{"raw":"GET /wp-content/uploads/2021/04/07124616/commcenter-movistar.jpg HTTP/1.1\r\nHost: imagenes.iberoeconomia.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 09:03:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 325362\r\nx-amz-id-2: b7rWcb2WpoCf5j2gBaM/yl9r9KcKUesmYlGbLGTXPZnTmCCS8sntxGCRVV04kXlBs+8wQLhMBUCsB+gGCnZS8EEvt9svplxc8U9uYo40QpA=\r\nx-amz-request-id: 33VNYWHRAXHA91XE\r\nlast-modified: Thu, 27 May 2021 18:37:09 GMT\r\netag: \"7be4066061ae1fa48ed0cb37fa3f7962\"\r\nx-amz-storage-class: STANDARD_IA\r\ncache-control: max-age=31536000\r\nexpires: Fri, 27 May 2022 18:37:07 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T9S8wBaDP00ZpJPl%2B7Fgt2RRxI8%2BIBJdulr5rzfIsQkZBpZVvC%2FvmAKhFmcKXcerKe63iBwA4Mk5fRyY5MBvOUiXCZPv3IZk9j%2B7YV30jx6cn3LVOC3KNkg%3D\"}]}\r\ncf-ray: 9abb922dfae7dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":325362,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1500x640, components 3","md5":"7be4066061ae1fa48ed0cb37fa3f7962","sha1":"45f08f541ea551d5c2ac13b03a7e82906ed4f119","sha256":"f3321c7a0ce9a1330f149f12105135f40d66081cb1bb3a4ec5534a56216b23d1","sha512":"59c114f76a8a0c08a13ef6610630ad60a220bf7eed2c1cbe55ce06c17fea2034a07b30b7a72ab8cd515307ced8ced6683b9ff9f7ddce65310f13ac4233bf8851","ssdeep":"6144:0yh96OwHyyNkCB3UHszkzd75BXs+j99A96t86yHqkjN2R5Xc3RQv:3FyNkkUMz63XX9A4raZjN+5UU","tlshash":"2164224d8951de89d5f131388062e7932a791c8951f7f2267a5f78cba3bc3a7ec0e850","first_seen":"2025-12-10T09:04:28.006748Z","last_seen":"2025-12-10T09:04:28.006748Z","times_seen":1,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":34,"connect":3,"send":0,"wait":234,"receive":114,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adslzone.net/app/uploads-adslzone.net/2017/09/movistar-tv.jpg","fqdn":"www.adslzone.net","domain":"adslzone.net","tld":"net"},"ip":{"addr":"79.127.237.161","port":443,"asn":60068,"as":"Datacamp Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:47.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adslzone.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 08:06:06 GMT","end":"Sat, 10 Jan 2026 08:06:05 GMT"},"fingerprint":{"sha1":"15:8A:D6:8F:17:3C:EB:6D:75:85:91:3F:27:E1:B9:23:B6:31:0B:9A","sha256":"6A:4F:BF:6A:AF:3F:7A:EB:34:12:20:C8:52:71:33:E6:EF:C8:D6:9F:43:7C:6D:D0:41:C3:38:87:BF:DE:8B:0A"}}},"request":{"raw":"GET /app/uploads-adslzone.net/2017/09/movistar-tv.jpg HTTP/1.1\r\nHost: www.adslzone.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.godandcountry.blog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 09:00:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27252\r\ncache-control: max-age=2592000s, s-max-age=2592000s, max-age=2592000, s-maxage=2592000\r\nimg-service: gaz\r\nazage: 0\r\nx-cache: MISS\r\nage: 203\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ntp-cache: hit\r\nvary: ,acceptsWebP\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ad25cea3b3b374c45ddcaa20cdee9bdf","sha1":"659a3dd4e8fa71ded81965d321fc0eaa2e42017e","sha256":"4a81eb402844c7094f143cd7ab6d581ebc221423f79e0617d0bd3e1bd010245b","sha512":"f4bd597eb24a8b35b55c3097703f82283e826446962b73a345100b16db0393739114695e28d225203fef80c8442ff99ddab07cf786250b0733ecc3c6a9f54c4e","ssdeep":"768:mm7i5o6OBQvmFo/NqO01/j8w/V9wJMmXdJG1:mm7Mo3M0ggOs8wd9w+2JC","tlshash":"f6c2e18bbc8c6a107729c6f3a645454a291775eb975002334cc159812f61b35df3faeb","first_seen":"2025-12-10T09:04:28.007959Z","last_seen":"2025-12-10T09:04:28.007959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/7a/5a/47/7a5a4701e07357d170df9cd72338e38f.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:47.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 01:12:52 GMT","end":"Wed, 28 Jan 2026 01:12:51 GMT"},"fingerprint":{"sha1":"67:43:25:0A:D1:7D:95:9F:2D:A3:3F:97:74:7C:0A:AE:D2:D3:98:61","sha256":"09:09:97:4E:79:6D:B5:F4:D7:B7:F6:8F:BE:97:4E:B6:04:9C:25:29:FE:4A:0E:A2:BE:82:F0:6E:CF:8C:74:F0"}}},"request":{"raw":"GET /7a/5a/47/7a5a4701e07357d170df9cd72338e38f.js HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 10 Dec 2025 09:03:47 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 40047\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 6\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d4c09c83b4d7fa30decdddb975cbf201\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111622,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5e971ae159e44566e81fb275c823224b","sha1":"d3e207490b2b5a60e01e33766766e2f17e88b156","sha256":"b3d0dc98a71128afa6d9b2f969defcbb3873c1e2a12199195d222642d032fe0a","sha512":"92ea65e3accbf50a785862ea9d6992993fbdaf91a264cbaec6bc8da970e2b6450e009a99ba7592008813601055d27d8161bdd8672b5daa3f86cc9b91c9de4de7","ssdeep":"1536:Nj7x8hriaNSZAZ4QjBUlqOdGSh6C9ZVrRRjy/vYJbtJ+3B95De0ovV:byBGFwgWUP","tlshash":"6fb3e98c3f61f05d02a66076113f6b1bf11a1d45188cc9e8f617f4ee2b6c21be93b996","first_seen":"2025-12-10T09:04:28.009576Z","last_seen":"2025-12-10T09:04:28.009576Z","times_seen":1,"resource_available":true,"data":null}},"time_used":779,"timings":{"blocked":290,"dns":1,"connect":95,"send":0,"wait":99,"receive":92,"ssl":192},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-content/fonts/a3a547fa29134596f37a293e8c53b032.css","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"godandcountry.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 18:04:18 GMT","end":"Sun, 15 Feb 2026 19:01:38 GMT"},"fingerprint":{"sha1":"39:34:A2:44:5E:09:D7:5B:B3:10:95:A0:BD:C7:72:E7:9E:2B:77:F1","sha256":"A3:D6:A1:84:56:C5:93:B1:A3:AF:BE:AA:EF:4A:02:4C:B6:E0:5C:15:1A:F2:F9:49:75:F2:73:AD:01:83:2E:86"}}},"request":{"raw":"GET /wp-content/fonts/a3a547fa29134596f37a293e8c53b032.css HTTP/1.1\r\nHost: www.godandcountry.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 09:03:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vLORodDAG%2FeiHR7dvfkw9QH9FdbCWQdc5K6%2F%2FbMge2mhHLcPSkMmYquvu9edY6TK%2Fkw7G9sXTIgS7tK64QYVjrob2oEEu%2Bf82ufsMrqMcBjZcfpD\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nlocation: https://www.godandcountry.blog\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9abb922d6c16712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adslzone.net/app/uploads/2017/09/movistar-tv.jpg","fqdn":"www.adslzone.net","domain":"adslzone.net","tld":"net"},"ip":{"addr":"79.127.237.161","port":443,"asn":60068,"as":"Datacamp Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adslzone.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 08:06:06 GMT","end":"Sat, 10 Jan 2026 08:06:05 GMT"},"fingerprint":{"sha1":"15:8A:D6:8F:17:3C:EB:6D:75:85:91:3F:27:E1:B9:23:B6:31:0B:9A","sha256":"6A:4F:BF:6A:AF:3F:7A:EB:34:12:20:C8:52:71:33:E6:EF:C8:D6:9F:43:7C:6D:D0:41:C3:38:87:BF:DE:8B:0A"}}},"request":{"raw":"GET /app/uploads/2017/09/movistar-tv.jpg HTTP/1.1\r\nHost: www.adslzone.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 10 Dec 2025 09:03:47 GMT\r\nserver: Varnish\r\nx-varnish: 760260302\r\ntp-cache: hit\r\nclient-id: 14\r\nreason: TCDN-RPE-751:760260302\r\nlocation: https://www.adslzone.net/app/uploads-adslzone.net/2017/09/movistar-tv.jpg\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":27252,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":535,"timings":{"blocked":201,"dns":97,"connect":31,"send":0,"wait":92,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-content/themes/random-news/assets/css/endless-river.min.css?ver=1.8.0","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"godandcountry.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 18:04:18 GMT","end":"Sun, 15 Feb 2026 19:01:38 GMT"},"fingerprint":{"sha1":"39:34:A2:44:5E:09:D7:5B:B3:10:95:A0:BD:C7:72:E7:9E:2B:77:F1","sha256":"A3:D6:A1:84:56:C5:93:B1:A3:AF:BE:AA:EF:4A:02:4C:B6:E0:5C:15:1A:F2:F9:49:75:F2:73:AD:01:83:2E:86"}}},"request":{"raw":"GET /wp-content/themes/random-news/assets/css/endless-river.min.css?ver=1.8.0 HTTP/1.1\r\nHost: www.godandcountry.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 09:03:46 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Thu, 19 Sep 2024 22:56:57 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 10 Dec 2025 21:03:46 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"66ecac39-21a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZegBTeVIxzXimqVFPyxdlrEY1keXqaXWvN2XHXwWJgq6D4UUEqXsDOCyHrGaVLAAnZ7TQMPoqP0wLlz51i4gJKmIY%2BI8VOYlm7l2UyF0tbwEYwOw\"}]}\r\ncf-ray: 9abb922d6c19712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":538,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (538), with no line terminators","md5":"4be5ba78eb3548693d01d6f7f689813b","sha1":"6dabfd94c01afb9620d971e551f4b0e98850285e","sha256":"af8e228d0e1f26bdccc4cc9f575c7c028e752775568623eb3a48c974dcd46a20","sha512":"11590c4a69939651a17f8e6fcdafd663ca6d735b71b9632b3468e6378bce0e339babf7dc638a6349492665f30d7692439e616a3cd2c12f4263ee630554a589c9","ssdeep":"","tlshash":"f8f08b204ba16226f8b7e704bff2d6cd6b1ac437b29118bad720b234d25e4882473d48","first_seen":"2023-04-06T19:00:23Z","last_seen":"2026-06-06T11:30:29.433867Z","times_seen":167,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:47.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:40:35 GMT","end":"Tue, 27 Jan 2026 23:40:34 GMT"},"fingerprint":{"sha1":"AA:22:33:AC:0A:FC:0D:31:C5:9F:92:99:20:7A:02:E4:46:E3:08:8C","sha256":"72:5A:79:00:74:D1:90:EF:9A:D3:3F:01:E6:E5:14:1D:41:4F:F2:28:D3:FD:4C:AA:70:DE:D8:BE:C2:15:3F:EE"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 10 Dec 2025 09:03:48 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8e0241affe444e203b98cf58d9c0c239\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-06-12T01:25:08.82438Z","times_seen":18643,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":72,"dns":2,"connect":17,"send":0,"wait":19,"receive":18,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-content/themes/random-news/assets/css/slick.min.css?ver=1.8.0","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"godandcountry.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 18:04:18 GMT","end":"Sun, 15 Feb 2026 19:01:38 GMT"},"fingerprint":{"sha1":"39:34:A2:44:5E:09:D7:5B:B3:10:95:A0:BD:C7:72:E7:9E:2B:77:F1","sha256":"A3:D6:A1:84:56:C5:93:B1:A3:AF:BE:AA:EF:4A:02:4C:B6:E0:5C:15:1A:F2:F9:49:75:F2:73:AD:01:83:2E:86"}}},"request":{"raw":"GET /wp-content/themes/random-news/assets/css/slick.min.css?ver=1.8.0 HTTP/1.1\r\nHost: www.godandcountry.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 09:03:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Sep 2024 22:56:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"66ecac37-4e9\"\r\nexpires: Wed, 10 Dec 2025 21:03:46 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bR%2FL9Fo%2FHt0YrLgVEx%2FmfGkqX6qDrP8n09DOhD7GENuVKqXwtZPsJkx2FtDLTx8bYfVWieejHovSJpTmcfK%2Fnir%2BWDG0YrxzQYIseBQW0gJnkbbi\"}]}\r\ncf-ray: 9abb922d6c17712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1257,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1257), with no line terminators","md5":"9f3143fc1a72e4315ce2e5c0c4d13334","sha1":"21f3e2024bd853deb0100f135ea0d18bb8b68e42","sha256":"caf46c90f4c85259ea326f121c4ae6d20e113f9efeb9756dabe4f8b374d087d1","sha512":"b40e08c67e7e84e14bbe1e51de264e759726018310c888b88c4580e822d9978c4b33bf3b68fc287a40c82a3a2666825cb928bc20395dd0e1eb56407a4f8043c5","ssdeep":"","tlshash":"6a21a8680192115b4027d7125ed3da9938dbf2132c3607d9f7808309ce8fbae2de59e7","first_seen":"2023-04-06T19:00:23Z","last_seen":"2026-06-11T20:56:13.96365Z","times_seen":1663,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-content/themes/random-news/style.css?ver=1.0.3","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"godandcountry.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 18:04:18 GMT","end":"Sun, 15 Feb 2026 19:01:38 GMT"},"fingerprint":{"sha1":"39:34:A2:44:5E:09:D7:5B:B3:10:95:A0:BD:C7:72:E7:9E:2B:77:F1","sha256":"A3:D6:A1:84:56:C5:93:B1:A3:AF:BE:AA:EF:4A:02:4C:B6:E0:5C:15:1A:F2:F9:49:75:F2:73:AD:01:83:2E:86"}}},"request":{"raw":"GET /wp-content/themes/random-news/style.css?ver=1.0.3 HTTP/1.1\r\nHost: www.godandcountry.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 09:03:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Sep 2024 22:56:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"66ecac25-24686\"\r\nexpires: Wed, 10 Dec 2025 21:03:46 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TcVsEXZGnVzJgmtQe0RPflSD%2BHiSHSlbfpXX47CBXeAiZhmtZRsHCznjypgGCC%2F7LbryAxVUx0OLeEGOB9uDTGVNbZYiJaTj9dSLwlV72Gj9rvV0\"}]}\r\ncf-ray: 9abb922d7c1b712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149126,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1117), with CRLF line terminators","md5":"5faf3f514e1a5548b09e9117c92b2df8","sha1":"8c78c6c8a8a8ccd3a6842bcb97c8aa2559ffa3a2","sha256":"938b2cc545be5174d11ca14edf876a0c5e2515b4b51b653ad4ab8bef93263afb","sha512":"3fdd086e5972ccf6b1a316de28e7d832f8b5c3b552d9a5bec1d11c3d21c059c9ba30f7e11fdf36336847d5f75e91566267eb86be5a21b57f8d575d7f6ba4f6ab","ssdeep":"1536:IaHwsPQaqlYld2CV5r555QrN+sYCNFYdUtECjf/8DLdkc3WAStHP9:IYf2+LuFYdUtEVq","tlshash":"0ee3545c7e16268d3323f33f77b81611ce6080b6ea1b09dd78e5620943ce7e5267e689","first_seen":"2024-08-29T17:57:05.17115Z","last_seen":"2026-05-02T14:53:41.663207Z","times_seen":6,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/watch.1284028319827.js?key=57a194238a5ef119b4d89c3ed35de09a\u0026kw=%5B%22movistar%22%2C%22%C2%AB%22%2C%22distribuidor%22%2C%22autorizado%22%2C%22rgso%22%5D\u0026refer=https%3A%2F%2Fwww.godandcountry.blog%2Fes%2Fcomo-cambiar-paquete-movistar-tv.html\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=693ad8fa-6230-46fa-9b8c-c108aa45d8f7%3A2%3A1\u0026shu=38a9bc492af3762496c9ee400a5b3c224ac3ca1905fd7027300e7ca5bab357c3db933ec53f6461e5812ca9733c8cb200429e6dcd3e705ec1f10f1b1e236f6d82f07f509d12716155f176a04d068089ee5a2f3025a528186c956b63\u0026pst=1765357487\u0026rmtc=t","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:48.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 01:12:52 GMT","end":"Wed, 28 Jan 2026 01:12:51 GMT"},"fingerprint":{"sha1":"67:43:25:0A:D1:7D:95:9F:2D:A3:3F:97:74:7C:0A:AE:D2:D3:98:61","sha256":"09:09:97:4E:79:6D:B5:F4:D7:B7:F6:8F:BE:97:4E:B6:04:9C:25:29:FE:4A:0E:A2:BE:82:F0:6E:CF:8C:74:F0"}}},"request":{"raw":"GET /watch.1284028319827.js?key=57a194238a5ef119b4d89c3ed35de09a\u0026kw=%5B%22movistar%22%2C%22%C2%AB%22%2C%22distribuidor%22%2C%22autorizado%22%2C%22rgso%22%5D\u0026refer=https%3A%2F%2Fwww.godandcountry.blog%2Fes%2Fcomo-cambiar-paquete-movistar-tv.html\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=693ad8fa-6230-46fa-9b8c-c108aa45d8f7%3A2%3A1\u0026shu=38a9bc492af3762496c9ee400a5b3c224ac3ca1905fd7027300e7ca5bab357c3db933ec53f6461e5812ca9733c8cb200429e6dcd3e705ec1f10f1b1e236f6d82f07f509d12716155f176a04d068089ee5a2f3025a528186c956b63\u0026pst=1765357487\u0026rmtc=t HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.godandcountry.blog\r\nReferer: https://www.godandcountry.blog/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.vafP6Ov5l2KWTs_l7Ca-A0BW0FrQ9UOFxXPmIqUyBdk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 10 Dec 2025 09:03:48 GMT\r\nContent-Type: text/html\r\nContent-Length: 2231\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://www.godandcountry.blog\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=693ad8fa-6230-46fa-9b8c-c108aa45d8f7:2:1; expires=Wed, 17 Dec 2025 09:03:48 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Thu, 11 Dec 2025 09:03:48 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Thu, 11 Dec 2025 09:03:48 GMT; path=/; secure; SameSite=None\npdhtkv5=true; expires=Thu, 11 Dec 2025 09:03:48 GMT; path=/; secure; SameSite=None\nuncs5=1; expires=Thu, 11 Dec 2025 09:03:48 GMT; path=/; secure; SameSite=None\nu_pl23338551=1; expires=Thu, 11 Dec 2025 09:03:48 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 19\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c122017b9afc53e8dc77e0538ce1350e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4830,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (2410), with CRLF, LF line terminators","md5":"55114e1cacf7ebae091c753574f779a2","sha1":"e95fbe1332e475f840ea8af2e766c5d8d1b429e0","sha256":"7b0d8196417acee3607f3b03f2a92d6fbecdbf50270741334c2a39147e550d6e","sha512":"21c2f1c7804a3b1ddab5c51bf23684774bd681feaff7c6e88d6b8b67733a0c45d28476f6ab2792d90b88d28e6f5a60ff0195dea1fb316db65b43a8114619594c","ssdeep":"96:qOozoTY9KU79dAC2Fgcb9FKU79dAC2FyU41wDOCaCfMEDaH:qbzkkACKZ2kACKpA4oCkCaH","tlshash":"8aa11b742fdb99bc5972103a1a37984a3c32600ed6c5f582bc1cc6c19f50f642b59eed","first_seen":"2025-12-10T09:04:28.014419Z","last_seen":"2025-12-10T09:04:28.014419Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=693ad8fa-6230-46fa-9b8c-c108aa45d8f7\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=cf85dec27b33de4ca3d391cd894db44c\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=9","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:48.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 22:02:45 GMT","end":"Tue, 27 Jan 2026 22:02:44 GMT"},"fingerprint":{"sha1":"F7:0F:08:42:86:24:7C:1B:49:6E:E0:01:4D:B6:85:C3:51:09:E9:4B","sha256":"57:4B:E8:D9:F8:CD:FB:C3:56:16:42:88:21:1B:6A:B3:83:F2:4E:B5:2C:AC:2C:6B:0E:46:6B:15:51:D1:3D:17"}}},"request":{"raw":"GET /pxf.gif?uuid=693ad8fa-6230-46fa-9b8c-c108aa45d8f7\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=cf85dec27b33de4ca3d391cd894db44c\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=9 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 10 Dec 2025 09:03:48 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 0\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 50da0f67393f808df7a468233f845356\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":659,"timings":{"blocked":279,"dns":1,"connect":92,"send":0,"wait":94,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Finterstitial%2Futility%2Frobot%2F3%2Fcss%2Fmagic.css\u0026l=45054\u0026fd=524","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:50.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:33:26 GMT","end":"Sat, 24 Jan 2026 22:33:25 GMT"},"fingerprint":{"sha1":"74:B9:DE:52:5E:A4:22:C1:3F:4E:90:E5:53:C1:13:27:E5:47:BB:D2","sha256":"0D:C6:A2:6A:15:63:9B:67:CF:55:A8:E1:E3:EC:AF:D3:57:2E:38:F3:44:79:B9:FC:61:8A:CD:64:82:05:64:6F"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Finterstitial%2Futility%2Frobot%2F3%2Fcss%2Fmagic.css\u0026l=45054\u0026fd=524 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 10 Dec 2025 09:03:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-content/themes/random-news/assets/css/blocks.min.css?ver=6.6.2","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"godandcountry.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 18:04:18 GMT","end":"Sun, 15 Feb 2026 19:01:38 GMT"},"fingerprint":{"sha1":"39:34:A2:44:5E:09:D7:5B:B3:10:95:A0:BD:C7:72:E7:9E:2B:77:F1","sha256":"A3:D6:A1:84:56:C5:93:B1:A3:AF:BE:AA:EF:4A:02:4C:B6:E0:5C:15:1A:F2:F9:49:75:F2:73:AD:01:83:2E:86"}}},"request":{"raw":"GET /wp-content/themes/random-news/assets/css/blocks.min.css?ver=6.6.2 HTTP/1.1\r\nHost: www.godandcountry.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 09:03:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Sep 2024 22:56:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"66ecac39-31f0\"\r\nexpires: Wed, 10 Dec 2025 21:03:46 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pDbj7ldttejXGHcv3PWyvuqWObKwK5QOZ5XuY15wg8jxgy52sN%2BMIN2puj6lfAwhuhR15IwMxtqKqiNObZWg8CZhF5HPDs5J94Qotj2%2BSEXXnoDJ\"}]}\r\ncf-ray: 9abb922d6c1a712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12784,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12784), with no line terminators","md5":"81b7bdccc8a60f1e60048928b2231d4c","sha1":"c8dff9686b433b3ee74dd5c7143b38cd24e4ce7b","sha256":"dbaf719b79ad5dc5eeb08a4b32bdf1efc8645a980bfabb9120007fc00fe890bc","sha512":"4574038f304afc2222b42afe95d34976897da6834685b3d1c7358c6b2965b6eeb5d6cdbd1b4b54d592f527b07e83b7f89cff47fe311535283e51e7c67ec87f73","ssdeep":"96:h8TOYC84FDmS8p+h66a5zUqTdZRgZ0zj6Oxdrx3zNhdph182+42TNM5KnT5TEL2p:h8TQ8TTdZiy7frNNzm2X2N/SL2Ph","tlshash":"644210b107f19df49bffe3004d70724228498a50ead2a2e9e5e2cb5861cdbd58ad431f","first_seen":"2023-04-06T19:00:23Z","last_seen":"2026-06-10T11:24:24.526085Z","times_seen":286,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atencionalcliente.movistar.cl/wp-content/uploads/2020/02/Conecta-tu-decodificador-a-Internet-3.png","fqdn":"atencionalcliente.movistar.cl","domain":"movistar.cl","tld":"cl"},"ip":{"addr":"159.60.134.7","port":443,"asn":35280,"as":"F5 Networks SARL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.movistar.cl","organization":"Telefonica Chile S.A."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 12 Dec 2024 00:00:00 GMT","end":"Mon, 12 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:D1:2B:55:48:F8:91:9D:5C:A4:CF:77:F3:58:80:8A:5E:11:90:14","sha256":"FC:11:EC:C1:B4:B5:43:E2:08:0B:A6:27:31:FD:49:E7:25:00:18:DC:38:9D:98:06:13:73:54:15:32:7D:C6:A1"}}},"request":{"raw":"GET /wp-content/uploads/2020/02/Conecta-tu-decodificador-a-Internet-3.png HTTP/1.1\r\nHost: atencionalcliente.movistar.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 09:03:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 219330\r\nset-cookie: appgw-affinity-9657ecb445f4b29155ea1f359c077fceCORS=255c3a822505f968006540f79c51c543; Path=/; SameSite=None; Secure\nappgw-affinity-9657ecb445f4b29155ea1f359c077fce=255c3a822505f968006540f79c51c543; Path=/\nTS01dc4fc6=015ee7d5b9dbe77a9574263bb4590fd567862e4a9c5e9d2dd15dd426100e3deba017530b9a37cef48087966ff36fc4fe2ac81e4586; Path=/; Secure; HttpOnly; SameSite=Strict;\r\nlast-modified: Wed, 25 Jun 2025 14:31:17 GMT\r\netag: \"685c0835-358c2\"\r\nx-varnish: 19121745 15953046\r\nage: 202\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nvia: Varnish\r\nx-envoy-upstream-service-time: 412\r\nstrict-transport-security: max-age=31536000\r\nx-volterra-location: sto6-sto\r\nserver: volt-adc\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":219330,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1500 x 800, 8-bit/color RGBA, non-interlaced","md5":"d8efd0d03fc7eb38151ae736016c9d3c","sha1":"77a617ac8049d002a33b06cf1d0676099cd4425a","sha256":"6e7bbce4318e439e50764b72f97b37a7964d85e69e9e00e130ea838c3ee1839d","sha512":"41ab2ff0689f6fe0dd1341bc26445391e065278109c03f7fd8d7ce314cec11e14b19f6078f8c453f135230a75912809fc6f332a9e04a5d765be8e784301e1163","ssdeep":"6144:YsssssssssssKnDzNpHOvnhZ+vpkA24+ZGfLtflMk8EOsyVzcZ:aDzTG7+vpkA24+Ufck8JsyVgZ","tlshash":"a8241244879f2494dda804f342d60627b7b87403db339a1f4112ba5819ab7fa72a3e5f","first_seen":"2025-12-10T09:04:28.016272Z","last_seen":"2025-12-10T09:04:28.016272Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1239,"timings":{"blocked":-1,"dns":100,"connect":7,"send":0,"wait":458,"receive":309,"ssl":365},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/utility/robot/3/img/close.svg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:50.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/interstitial/utility/robot/3/img/close.svg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 09:03:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 12 Dec 2024 14:36:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QmFtpeS7GPxVmolG9S5NsmUbtYMmfl4jlBJIkM4GViZ6K5cnRZzTLu7aZfZOhZitAjLRsjoto1ZbGtjgcyFHDYtYBYibIW9t7Y2kAloL\"}]}\r\nage: 4086460\r\ncf-cache-status: HIT\r\netag: W/\"675af4e6-4ff\"\r\ncontent-encoding: br\r\ncf-ray: 9abb92440e4056b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"369850b9873659adf0951d845f57dba1","sha1":"a64257186daa33b6b318943a457b6cf8d80b26b6","sha256":"9630c142a8c074cc1809ebf4109538cf29cc0baeb6c27726191f1cf5376e2e21","sha512":"6441b40e85c86e21362c7061a6b9610f52a5c801b274b246711546ad45c68c3e7f2f242f1621b90967eaeebf52709545d06283c2015d6b9ad7f6f7d37fb14a88","ssdeep":"","tlshash":"6821d8dc958f223ef324ff6189b316606ba423f6bb18c5bcb199a8157e1cb910c48e14","first_seen":"2023-04-07T22:39:47Z","last_seen":"2026-06-11T14:37:25.209697Z","times_seen":9495,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/utility/robot/3/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:50.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/interstitial/utility/robot/3/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.godandcountry.blog\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 09:03:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 10:55:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=raBK2Zj1aL9n2lBUOf8x8Fb5M19eLbUoaM5lWAC3BG%2BFnRvacrSCXiMNbT3ldUOmOTH7nGB65OFeG5CO2Jj896K6jp8ziCcCCauEKkZo\"}]}\r\ncf-cache-status: MISS\r\netag: W/\"68b9703b-2762\"\r\ncontent-encoding: br\r\ncf-ray: 9abb92450f2a56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10082,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"efffc36bcbcc0aaea3978474151a0122","sha1":"f9b9c23faef40025dcfe3f1dfdb158ce2855b83b","sha256":"4da2338ad196c676f6a310b1b91f8e4c3e513fa07cb3b7022ca9ecc4868db398","sha512":"52afe7b12764a6297e3cb430eca352a3d778802b79e3cbeb4a2c22b0e070496abd9bfb78823573aa1e4a0bff1f52f79dd9ab92a55341324c175c3ce811d01aeb","ssdeep":"192:iFJuLiEWiFiacrcYmen1VuOTlmGFF3bH/fA68IDeIToS:iFMLiEWiFiHn1VuexjrHnAyF","tlshash":"2222420409b9d921c45ca02f203e2666f7240a539d7abfd4bbc941045fdd96f79b823f","first_seen":"2025-09-21T13:47:45.283292Z","last_seen":"2026-06-02T13:53:14.565021Z","times_seen":1658,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":481,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:51.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.godandcountry.blog\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 09 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 09 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 49275\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-12T01:48:40.978534Z","times_seen":878348,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":144,"dns":1,"connect":20,"send":0,"wait":8,"receive":4,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/www.ofertasahora.com/wp-content/uploads/2020/04/Paquete-30-dias-movistar-15o-minutos-a-otras-redes.jpg?w=600\u0026ssl=1","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /www.ofertasahora.com/wp-content/uploads/2020/04/Paquete-30-dias-movistar-15o-minutos-a-otras-redes.jpg?w=600\u0026ssl=1 HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 10 Dec 2025 09:03:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9742\r\nlast-modified: Wed, 10 Dec 2025 09:00:24 GMT\r\nexpires: Fri, 10 Dec 2027 21:00:24 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://www.ofertasahora.com/wp-content/uploads/2020/04/Paquete-30-dias-movistar-15o-minutos-a-otras-redes.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"fd4e51fb7152d36b\"\r\nx-bytes-saved: 20342\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 31\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9742,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"609f88de507e4c86170f91eddcd01314","sha1":"fd4871ac0719c1bb25fd34911b02f1f2ee4c3cb8","sha256":"cd347b80b9ccd624c24de030c631460f25a8131fed580d9eb911b9212022083f","sha512":"1473b9d3c4c05408b8acef025cc8c41f305c60b4203878d2cbf89843e43af30881c69783a82b86bfaa7591a963c54b70a0b5b249bf542650a4d690e950733451","ssdeep":"192:YcEsX6l4ui4KnloltHm/OqCWn+w7gZeprzU9ba8r6z9TFhQSeUOYkfXl:msKmvSzCOxC7g08mz9PQSeUhE","tlshash":"f4128dd504eac41ad5b8d0f2c4630ae53ab94ffd7e5fa35b00688e7ae68b51394e2047","first_seen":"2025-12-10T09:04:28.019556Z","last_seen":"2025-12-10T09:04:28.019556Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":13,"connect":7,"send":0,"wait":8,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.blogs.es/0d7697/canales-incluidos-en-movistar-familiar-en-julio-de-2017/1024_2000.png","fqdn":"i.blogs.es","domain":"blogs.es","tld":"es"},"ip":{"addr":"3.167.2.32","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogs.es","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:6C:31:AF:B0:8E:95:42:35:12:BB:5D:F5:B1:98:7D:6C:AA:47:03","sha256":"41:80:AE:78:2A:7F:A7:4E:2F:99:45:15:26:1D:E8:65:EE:39:06:9F:6E:68:C9:6D:13:A3:20:86:45:DF:40:0E"}}},"request":{"raw":"GET /0d7697/canales-incluidos-en-movistar-familiar-en-julio-de-2017/1024_2000.png HTTP/1.1\r\nHost: i.blogs.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 205662\r\ndate: Wed, 10 Dec 2025 09:00:24 GMT\r\nlast-modified: Tue, 11 Jul 2017 07:20:13 GMT\r\netag: \"d4b3a5b105b491b4b3a810cbe7458365\"\r\ncache-control: max-age=32000000\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 331956c71b3e587b085083fed0bc8c3e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: FPpCAdF9bb8P0rqwDylx7qRDl2uCJX3N1HBnuvCn8jKw06yECJt0oQ==\r\nage: 204\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":205662,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 997 x 665, 8-bit/color RGBA, interlaced","md5":"d4b3a5b105b491b4b3a810cbe7458365","sha1":"a1386020bda5e9825f0e337c149163270410f650","sha256":"bc05aae3ce006d42d70e84a96ab547149b385e30d1f700c21e20932849f9b59f","sha512":"4da0fb3a96fa5c742fbc504cb5c1b2e4076a1a5d23d1a208201d6a5eea10a34856674af58b06ce2dcc8692c54c4306fe88d8fd9497f345a9e189442eb33e8a38","ssdeep":"6144:GaCJ5xtc4SMAuT0ZXok+pU02hkWWyakpjaE5FS:IJi4SMAe0ZXok+inhkFy1IE5Q","tlshash":"941412480255a357e8590b02573e6ff0de4b48877cd5c54e986bce2f091c3b66aacf2d","first_seen":"2025-12-10T09:04:28.020746Z","last_seen":"2025-12-10T09:04:28.020746Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":119,"connect":5,"send":0,"wait":27,"receive":26,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.pexels.com/photos/3778779/pexels-photo-3778779.jpeg?auto=compress\u0026cs=tinysrgb\u0026dpr=3\u0026h=750\u0026w=1260","fqdn":"images.pexels.com","domain":"pexels.com","tld":"com"},"ip":{"addr":"104.18.66.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.pexels.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 16:02:37 GMT","end":"Sat, 10 Jan 2026 16:02:36 GMT"},"fingerprint":{"sha1":"CC:22:C6:4B:3E:B4:B5:BF:3D:F3:C5:3B:0B:81:A4:3C:E3:DD:75:02","sha256":"5F:98:DD:3F:99:A4:86:11:16:6E:BD:1F:BF:FC:81:EC:F2:7F:CB:26:5E:8A:83:22:0E:40:6E:CD:FA:F1:4C:4A"}}},"request":{"raw":"GET /photos/3778779/pexels-photo-3778779.jpeg?auto=compress\u0026cs=tinysrgb\u0026dpr=3\u0026h=750\u0026w=1260 HTTP/1.1\r\nHost: images.pexels.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 09:03:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 330245\r\ncf-ray: 9abb922ea884b4ee-OSL\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origSize=334361, status=webp_bigger\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Mon, 01 Dec 2025 05:50:50 GMT\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-imgix-id: 7c27e1155384a6a80ea795cc04f2447ea8cbce4b\r\nx-served-by: cache-fra-eddf8230109-FRA\r\ncf-cache-status: HIT\r\nexpires: Thu, 10 Dec 2026 09:03:47 GMT\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=DGSTzUV17E7X5QORnDkcBk2nViIKj8Na4VIfogO40JE-1765357427-1.0.1.1-Uyax4PohWut94VFnLii3gWiJPmebbYEfBh.V12qpWeGlArjIbscM4AsIRUiHpcM1sN7vh6tfq8jdXAKrXjYOlgifj3N5YnTLpbnsoIMkkN4; path=/; expires=Wed, 10-Dec-25 09:33:47 GMT; domain=.pexels.com; HttpOnly; Secure; SameSite=None\n_cfuvid=trApDLmHuiBIU446H2ZzAF.clIXwaBA5xpee7IR_4cM-1765357427071-0.0.1.1-604800000; path=/; domain=.pexels.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":330245,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1500x2250, components 3","md5":"37e0bc82a64979727f623eed00c1d101","sha1":"ef9cb8b98558dea0d5013a39849ed20e9fde85a5","sha256":"40d38ff1c03bad6cd33751c0718be6c6a3404dff367442f14431bf677b478bcf","sha512":"d18becce5519b5bd963a9395e32105f5ecc3d2d448153ac53fa6b5fa7b83cd96957a4cf4fff170e896526c9c3b9918f66fe8aa3cc565434550e0d7d18dd02e96","ssdeep":"6144:/mQnSnrDkMbcI+VoC0bPT+EcDEFu4SG9k5Ty0p+cY2qfsMIwUgCI:cnJiVoC02ZEu439k5ThplyzpCI","tlshash":"6d6423b0691e690eed628f360fea76d303cb4940255c33095934087ed35e7cdb6e69ae","first_seen":"2025-12-10T09:04:28.022201Z","last_seen":"2025-12-10T09:04:28.022201Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":94,"connect":1,"send":0,"wait":92,"receive":11,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-eu-west-1.amazonaws.com/rankia/images/valoraciones/0020/3460/movistar-plus-.png?1436255144","fqdn":"s3-eu-west-1.amazonaws.com","domain":"s3-eu-west-1.amazonaws.com","tld":""},"ip":{"addr":"52.92.17.184","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-eu-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 07 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:6F:C1:FB:1F:1E:AD:F5:AB:FC:A0:9C:B4:0E:C6:91:D9:B2:CD:D4","sha256":"E5:79:9A:D8:27:48:04:B2:15:F7:4D:13:7B:45:41:A1:87:CC:8A:D4:88:D0:BB:3C:CE:18:FA:64:4C:6C:57:E2"}}},"request":{"raw":"GET /rankia/images/valoraciones/0020/3460/movistar-plus-.png?1436255144 HTTP/1.1\r\nHost: s3-eu-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: eQ2AD97cHdyWrHMQFbOGdXKUXG25e3YxD04a6OH72LaP3/IFBAaTnnoxCcuDAMISy3W0MLZYD78=\r\nx-amz-request-id: 33VHKX92287TYKRH\r\nDate: Wed, 10 Dec 2025 09:03:48 GMT\r\nLast-Modified: Tue, 07 Jul 2015 07:45:52 GMT\r\nETag: \"99b4f2353deddeba359c114b256b0acd\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 571260\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":571260,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1524 x 767, 8-bit/color RGBA, non-interlaced","md5":"99b4f2353deddeba359c114b256b0acd","sha1":"e59f6e329c524b5da31646e16ee1bdfe896c4d6b","sha256":"67e6d142231ff167c608c811dacb6008f3230d87595dc263b9b04c321a0dfeb1","sha512":"c5738b9122635c2356a6e588d43384996faf99d5a83ca7922d91fa7dd4671b196b4be50266487ad692c3d09ad2fcc34bf755d9950a048f25038cd224dbca68aa","ssdeep":"12288:r/Q/mFsshUIa6murpGUVYH0Xp3pSrgk6HLGp2rjFe:MsdUr65sUVrp3ugVE2HFe","tlshash":"36c4231059b281bbc679e924a68149e63f381d11e29c540c5af3dfe2ca1fa7c1e5cef1","first_seen":"2025-12-10T09:04:28.02316Z","last_seen":"2025-12-10T09:04:28.02316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":11,"connect":41,"send":0,"wait":56,"receive":153,"ssl":317},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-content/uploads/2024/08/pngegg-300x300.png","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:48.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"godandcountry.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 18:04:18 GMT","end":"Sun, 15 Feb 2026 19:01:38 GMT"},"fingerprint":{"sha1":"39:34:A2:44:5E:09:D7:5B:B3:10:95:A0:BD:C7:72:E7:9E:2B:77:F1","sha256":"A3:D6:A1:84:56:C5:93:B1:A3:AF:BE:AA:EF:4A:02:4C:B6:E0:5C:15:1A:F2:F9:49:75:F2:73:AD:01:83:2E:86"}}},"request":{"raw":"GET /wp-content/uploads/2024/08/pngegg-300x300.png HTTP/1.1\r\nHost: www.godandcountry.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=693ad8fa-6230-46fa-9b8c-c108aa45d8f7%3A2%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 09:03:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 6263\r\nlast-modified: Sun, 08 Sep 2024 15:20:21 GMT\r\npriority: u=6,i=?0\r\netag: \"66ddc0b5-1877\"\r\nexpires: Fri, 09 Jan 2026 09:03:48 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQCuWJuP4jvs0wMt9ukF6x0s0LB0pI5JMWzNAdKff%2Fp7%2F7Pd05DqNYWdNhnNkKzsnx70e%2BcmpGRulzgz0rqqO%2BdO%2BQzxPZIxbd1%2FKiaAfLZE6w9%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9abb9236cc4f712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6263,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"32aded8ae8b169bbf6e18d4bcedc0541","sha1":"54f0f9d2ec2c21f2a2208de59fb3412b6c17bc38","sha256":"5dfa7fc48c002b397b9949181b35a4a5ee8face6bfd3e88cf356e8b160876d85","sha512":"1906b7f32523ba47b7bee0bf424082f96175644c36a36afe5d6432c45d8d466a7f3f78ac04f89448eacb864a7b5335380f123876df6c5aa4e4e4ea9667d32b8b","ssdeep":"192:mS5NEilf/cOBdXp0GxSDE38rniEr4lbLno:n5NEiRcOPXGQMS8rTULno","tlshash":"7bd1afb7334efa86a46a290a7477b9576c118b6a843b4ccce096fc4b8d5c5238f11f50","first_seen":"2025-04-03T20:29:45.339374Z","last_seen":"2025-12-10T09:04:28.024235Z","times_seen":11,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/utility/robot/3/css/magic.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:50.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/interstitial/utility/robot/3/css/magic.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.godandcountry.blog\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 09:03:50 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 10:55:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b9703c-affe\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JxgbEdKnFFdET%2FjwMQs47F3wQuJJJ3fxL6B%2BwES8PTEXf7XG03yJ9VPSytXu3GicdyyCz38k8ml%2Bn31UzP2z6tvMO9rrFzAfpTQxnD2z\"}]}\r\ncf-ray: 9abb92437dc956b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45054,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"bcd1967f8c2604f55f57197de0ae895e","sha1":"c31a10c3ecde74b50450a0a1ad21aa474ff05e7d","sha256":"787eac5d9417257a04de7b18ef21f5ec887de3aee642ceba9a7d56a8209eea2a","sha512":"b37f1a61bbe740bc29308e664227701366ac978d4fbed081f13c47200edd74a792ab980559a236cff39ae27d3fda3ffffef3f1ac2dc420612b616496b44e9df8","ssdeep":"384:lQLl1pRp0itimTKDbObwHuHXFlF7FPFSWRyYyRZZZaZjZPfbfUO3OipypE:GpRp0itiFbObwHuHXFlF7FPFSWX","tlshash":"b913276b2dd2114086564365a3fe6b2c261c85c31c6becfab3a218ce8f1567c53db61f","first_seen":"2025-06-11T18:18:27.729381Z","last_seen":"2026-06-11T02:25:26.920621Z","times_seen":5705,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":37,"dns":18,"connect":1,"send":0,"wait":475,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:51.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.godandcountry.blog\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 09 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 09 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 49275\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-12T01:48:40.978534Z","times_seen":878348,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":69,"dns":3,"connect":7,"send":0,"wait":8,"receive":9,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-content/global-styles-inline-css.css","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"godandcountry.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 18:04:18 GMT","end":"Sun, 15 Feb 2026 19:01:38 GMT"},"fingerprint":{"sha1":"39:34:A2:44:5E:09:D7:5B:B3:10:95:A0:BD:C7:72:E7:9E:2B:77:F1","sha256":"A3:D6:A1:84:56:C5:93:B1:A3:AF:BE:AA:EF:4A:02:4C:B6:E0:5C:15:1A:F2:F9:49:75:F2:73:AD:01:83:2E:86"}}},"request":{"raw":"GET /wp-content/global-styles-inline-css.css HTTP/1.1\r\nHost: www.godandcountry.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 09:03:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 08 Sep 2024 15:35:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"66ddc43d-23be\"\r\nexpires: Wed, 10 Dec 2025 21:03:46 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D04ALvekqq%2BGTmZN0XkH%2B%2BdBErNX15aJLem7%2FBJcDlr3i3uqH0ynITIATNCzo%2BvNfsX7GWW51kwAlZVYznPtlIDzV1K7uFS%2FhXqfF2e2%2FiHF9V9o\"}]}\r\ncf-ray: 9abb922d6c15712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9150,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8856)","md5":"d47a0c21f5be3676ecec605775fdc822","sha1":"8efa6c92f027c19bce1480ceee134ca665689037","sha256":"993d918928414f2708984e23f4bd2104f47618bead1b54556fc1e69d76a865da","sha512":"6f2ea8d1e492dd86b8874394dbd55539b514f0cabc77c19b0f39a381a9f55fc4b58c4ccc011d06fee0a1852ab277247dba21739a5ec54f65abec35be0ecc4089","ssdeep":"96:drqYppRQ6dqZsTaApvB21BNsl741CfEGHRQNQ/qYikP+g3sX:drqWRXdqZsTaA+1BNslQCfEGHRmy4kW/","tlshash":"21128f71e0a541a6bf4edbbcc1d1b339b9a8e7049902a77730f431989a589f700fb52d","first_seen":"2025-05-28T17:40:41.67666Z","last_seen":"2026-06-11T13:58:22.478198Z","times_seen":35,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/OenyPiwY784/maxresdefault.jpg","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.250.74.150","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:42 GMT","end":"Mon, 19 Jan 2026 08:33:41 GMT"},"fingerprint":{"sha1":"A5:AF:4B:FA:75:93:1D:71:E3:13:0F:54:62:E3:C1:CD:54:FA:BB:3C","sha256":"BD:B3:95:9F:5C:41:DD:AB:ED:97:A5:A6:69:97:2C:11:29:D4:2C:22:07:36:93:DD:C7:20:46:DD:57:97:1A:E5"}}},"request":{"raw":"GET /vi/OenyPiwY784/maxresdefault.jpg HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72824\r\ndate: Wed, 10 Dec 2025 09:03:47 GMT\r\nexpires: Wed, 10 Dec 2025 11:03:47 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1561129480\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72824,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"858abdba84840452f21bde4d5cb3511e","sha1":"41c2d9bc3eb00cd8fd24ee425f5e268f2b1b13b1","sha256":"97bcb0b79ac05983c30c30c870ae39e6174ceabfbc9420b6ceef854ae84e028f","sha512":"dddce7366f6b05f4a85c01aaac5d4b021c3a3997db7e6f85ba78d19a6f7044d3392b9813d19c9625325df8019e4f1bf351d11e8c68c1ddc5d4e3113582d44c3e","ssdeep":"1536:+RS9VE7pyeYE25ZM8vvI7P/eIlByzDXAskPWo90yu:ZVEJyG8HIak3skvw","tlshash":"136301576621d753d97d507412d9126e8921ffffa76c08eeca0823e90f0a22d2b5a9f0","first_seen":"2025-12-10T09:04:28.027411Z","last_seen":"2025-12-10T09:04:28.027411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":146,"dns":1,"connect":8,"send":0,"wait":30,"receive":17,"ssl":176},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adslzone.net/app/uploads-adslzone.net/2020/05/deco-movistar.jpg","fqdn":"www.adslzone.net","domain":"adslzone.net","tld":"net"},"ip":{"addr":"79.127.237.161","port":443,"asn":60068,"as":"Datacamp Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adslzone.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 08:06:06 GMT","end":"Sat, 10 Jan 2026 08:06:05 GMT"},"fingerprint":{"sha1":"15:8A:D6:8F:17:3C:EB:6D:75:85:91:3F:27:E1:B9:23:B6:31:0B:9A","sha256":"6A:4F:BF:6A:AF:3F:7A:EB:34:12:20:C8:52:71:33:E6:EF:C8:D6:9F:43:7C:6D:D0:41:C3:38:87:BF:DE:8B:0A"}}},"request":{"raw":"GET /app/uploads-adslzone.net/2020/05/deco-movistar.jpg HTTP/1.1\r\nHost: www.adslzone.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 04 Dec 2025 23:19:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 50980\r\ncache-control: max-age=2592000s, s-max-age=2592000s, max-age=2592000, s-maxage=2592000\r\nimg-service: gaz\r\nazage: 466841\r\nx-cache: HIT\r\nage: 203\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ntp-cache: hit\r\nvary: ,acceptsWebP\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50980,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"628a77b97b5f0f403e6d33b4d171d74f","sha1":"2a6f12a633d3be260eb5ea35a796241f6cc32543","sha256":"f487c75628bdcdf55e9bb6361c66b48a0972d1d2369ddc1535663cc9e7d22f76","sha512":"30e2e9b782628eb5a4b65b859ae2b8962162fdeab9bc52f892a3852e5dde6888ff9a04c046e017905cd317936c1b737d3b32a9c919f68055b334c6cd2c1aa7bf","ssdeep":"1536:skaAYLesPTMbmfJPWjRSfys+F4MMliLNZx2q7Ugf:sZLbSmfJPWjRSqs+FJa+NrzUM","tlshash":"f23302c9b97e64a5bf37cb3628f126a4de3497ce4c29c586ed8442909ce932b140f420","first_seen":"2025-12-10T09:04:28.028566Z","last_seen":"2025-12-10T09:04:28.028566Z","times_seen":1,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":83,"connect":30,"send":0,"wait":34,"receive":62,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:47.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:40:35 GMT","end":"Tue, 27 Jan 2026 23:40:34 GMT"},"fingerprint":{"sha1":"AA:22:33:AC:0A:FC:0D:31:C5:9F:92:99:20:7A:02:E4:46:E3:08:8C","sha256":"72:5A:79:00:74:D1:90:EF:9A:D3:3F:01:E6:E5:14:1D:41:4F:F2:28:D3:FD:4C:AA:70:DE:D8:BE:C2:15:3F:EE"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 10 Dec 2025 09:03:48 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9a4f455ad67b8e352ca0006e8ee06323\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-06-12T01:25:08.82438Z","times_seen":18643,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":63,"dns":0,"connect":21,"send":0,"wait":20,"receive":18,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=693ad8fa-6230-46fa-9b8c-c108aa45d8f7\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=7a5a4701e07357d170df9cd72338e38f\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=9","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:48.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 22:02:45 GMT","end":"Tue, 27 Jan 2026 22:02:44 GMT"},"fingerprint":{"sha1":"F7:0F:08:42:86:24:7C:1B:49:6E:E0:01:4D:B6:85:C3:51:09:E9:4B","sha256":"57:4B:E8:D9:F8:CD:FB:C3:56:16:42:88:21:1B:6A:B3:83:F2:4E:B5:2C:AC:2C:6B:0E:46:6B:15:51:D1:3D:17"}}},"request":{"raw":"GET /pxf.gif?uuid=693ad8fa-6230-46fa-9b8c-c108aa45d8f7\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=7a5a4701e07357d170df9cd72338e38f\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=9 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 10 Dec 2025 09:03:48 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6bba0d56040799cda4269525ccfdd0dd\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":664,"timings":{"blocked":282,"dns":1,"connect":92,"send":0,"wait":96,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/sbar.json?key=cf85dec27b33de4ca3d391cd894db44c\u0026uuid=693ad8fa-6230-46fa-9b8c-c108aa45d8f7%3A2%3A1","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:49.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 01:12:52 GMT","end":"Wed, 28 Jan 2026 01:12:51 GMT"},"fingerprint":{"sha1":"67:43:25:0A:D1:7D:95:9F:2D:A3:3F:97:74:7C:0A:AE:D2:D3:98:61","sha256":"09:09:97:4E:79:6D:B5:F4:D7:B7:F6:8F:BE:97:4E:B6:04:9C:25:29:FE:4A:0E:A2:BE:82:F0:6E:CF:8C:74:F0"}}},"request":{"raw":"GET /sbar.json?key=cf85dec27b33de4ca3d391cd894db44c\u0026uuid=693ad8fa-6230-46fa-9b8c-c108aa45d8f7%3A2%3A1 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.godandcountry.blog\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.vafP6Ov5l2KWTs_l7Ca-A0BW0FrQ9UOFxXPmIqUyBdk; uid_id2=693ad8fa-6230-46fa-9b8c-c108aa45d8f7:2:1; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl23338551=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 10 Dec 2025 09:03:49 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 3739\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://www.godandcountry.blog\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=693ad8fa-6230-46fa-9b8c-c108aa45d8f7:2:1; expires=Wed, 17 Dec 2025 09:03:49 GMT; path=/; secure; SameSite=None\nuncs=2; expires=Thu, 11 Dec 2025 09:03:49 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Thu, 11 Dec 2025 09:03:49 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Thu, 11 Dec 2025 09:03:49 GMT; path=/; secure; SameSite=None\nu_pl26519074=1; expires=Thu, 11 Dec 2025 09:03:49 GMT; path=/; secure; SameSite=None\nsleccf85dec27b33de4ca3d391cd894db44c=[6308898]; expires=Wed, 10 Dec 2025 09:03:54 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 119\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 81b5b8ee49663689068b8af4c60f3fc3\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6058,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"2d2b1235b2f2cd3e6e77f1c5dcb773b8","sha1":"0bc9fdf94767a7bd01e044b602708ed9a0d27e91","sha256":"80ee1200f31d9e8d4ce810ba06a65edf9ece1d0a5010ab14153b9fc553883852","sha512":"9d2c180862bb737272663849f30ee3fae223d68ebfb5c408f0ce41e58d6d00ca9ae2db6730151b4c9b35c4cba026a1b3d8a03163620061ba4e4346c887564b60","ssdeep":"96:9ueKwLAd+fd6HoL24oKwLAd+fd6HoL24OKSuLMMd0SW0edfmpQ/NgX9NYYrk/MzA:9j/U+fECo/U+fECOwLMalW0osi3","tlshash":"7bc16df607ac38209699f8b605400ebd4d68ed4bd8f859d851c6c2df1bed787e634a04","first_seen":"2025-12-10T09:04:28.029548Z","last_seen":"2025-12-10T09:04:28.029548Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-10T09:03:46.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"godandcountry.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 18:04:18 GMT","end":"Sun, 15 Feb 2026 19:01:38 GMT"},"fingerprint":{"sha1":"39:34:A2:44:5E:09:D7:5B:B3:10:95:A0:BD:C7:72:E7:9E:2B:77:F1","sha256":"A3:D6:A1:84:56:C5:93:B1:A3:AF:BE:AA:EF:4A:02:4C:B6:E0:5C:15:1A:F2:F9:49:75:F2:73:AD:01:83:2E:86"}}},"request":{"raw":"GET /es/como-cambiar-paquete-movistar-tv.html HTTP/1.1\r\nHost: www.godandcountry.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 09:03:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jTYmjI3bDl4t7tl8JDMBJLCTQhnAIDPnMYKVW5QrccdkVzol0WehpxqgkG0L3VRURQpRS7kNVkVjYe39D1JO8Y376w3sw8Rbd%2FrdqYOsBv5o%2BcL5\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9abb922b9fc75694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":28847,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10235)","md5":"670762b4d72ebaacc43f149283bdfd83","sha1":"a9dac6fb5777f76098e6422c3bc7c3658ee71091","sha256":"51ef7768781ef8385d9a3de3e9f1acd183542c2aeb7c44040e72973903b32f18","sha512":"f1652effb5623b32cd69857c823c905810c78cc41d2e09d8257875c3f061d5b02ab5d3634991f724119044d8cabe15b88014cc628c9d69ad45cb8df92bf512a7","ssdeep":"768:9hEE42pQOUoOpBILouoBooEoj0snanag4K:9hEE42pQOUoOLeouoBooEQ0snanag4K","tlshash":"23d24b3252ec087f21e6038a2048bb28e197d935d937c9e1f1b7e769b6c0ed5f803659","first_seen":"2025-12-10T09:04:28.030672Z","last_seen":"2025-12-10T09:04:28.030672Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":49,"dns":32,"connect":1,"send":0,"wait":138,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hopefulvertical.com/57a194238a5ef119b4d89c3ed35de09a/invoke.js","fqdn":"hopefulvertical.com","domain":"hopefulvertical.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hopefulvertical.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Oct 2025 21:13:39 GMT","end":"Sun, 25 Jan 2026 21:13:38 GMT"},"fingerprint":{"sha1":"9D:33:EC:4C:EB:74:85:38:52:62:BB:A9:03:63:D3:04:BA:1C:F2:DD","sha256":"D2:5B:CD:B6:F4:AD:36:5F:E2:8E:96:A3:DE:B0:AF:CA:5C:14:6D:D4:87:C1:BF:CD:95:C4:AD:C2:34:07:49:F4"}}},"request":{"raw":"GET /57a194238a5ef119b4d89c3ed35de09a/invoke.js HTTP/1.1\r\nHost: hopefulvertical.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 10 Dec 2025 09:03:47 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 18417\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: hopefulvertical.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f86a12f6f25ed692e3a2e87ae5c2a9cb\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":46710,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46710), with no line terminators","md5":"68679790d750e7e0991480444713708c","sha1":"938099791cb03a1450875542d5d4853626c46fdc","sha256":"03b4e67b7763028a32969f36d7bb7ad9d6c5e12d696e50e3f70a3e28038e7e34","sha512":"a0d2761bd714ae21d6a24ee190073bb5241c808aa90d3081e64338bad03f83f35d4bb363d30dcfe3a521b57f048060ea54e28df7ee5d3a3d044779c6fca7f307","ssdeep":"768:CssLt+urzIyrxj4oolktYllJz4c5sfH6lmhj8ehArp76k8yXy:Ckurn7JfhAl385","tlshash":"aa23d9887f90f75457966073723f800bb0156d60668cd8acd1a7dce87eacb29f5327a8","first_seen":"2025-12-10T09:04:28.031857Z","last_seen":"2025-12-10T09:04:28.031857Z","times_seen":1,"resource_available":true,"data":null}},"time_used":853,"timings":{"blocked":300,"dns":49,"connect":93,"send":0,"wait":110,"receive":93,"ssl":201},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hopefulvertical.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hopefulvertical.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hopefulvertical.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hopefulvertical.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/cf/85/de/cf85dec27b33de4ca3d391cd894db44c.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:47.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 01:12:52 GMT","end":"Wed, 28 Jan 2026 01:12:51 GMT"},"fingerprint":{"sha1":"67:43:25:0A:D1:7D:95:9F:2D:A3:3F:97:74:7C:0A:AE:D2:D3:98:61","sha256":"09:09:97:4E:79:6D:B5:F4:D7:B7:F6:8F:BE:97:4E:B6:04:9C:25:29:FE:4A:0E:A2:BE:82:F0:6E:CF:8C:74:F0"}}},"request":{"raw":"GET /cf/85/de/cf85dec27b33de4ca3d391cd894db44c.js HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 10 Dec 2025 09:03:47 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 31494\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 4\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f049af8971e081fb1317df808c79cbcc\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81914,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"461a83e139987dacc656e68b89e17c1c","sha1":"6c8f81ab9de40cae457a2d4f78745e487800f728","sha256":"5098912f339f9e97cc9f8fcea006310b27f2d97b0ca23fead4dcfa0256b13e5d","sha512":"1f4563e8a4a64ad3dc9b0b9184b613c70c401b6e64a4c825d20c162ca697278318cce0ec4382f0e2677fc184843b5632c5d45c10683f1b0f36bdeb80115b304f","ssdeep":"1536:h3Zs5j4xaqmOxyMTZ0ob3meMv6IqyiB+9+eD:h3Acx//xDTofv6fOd","tlshash":"c883c88d7f99f1ac03527072722fa21ef0291d126098d0a4e253f5fdaf78729e976b14","first_seen":"2025-12-10T09:04:28.032811Z","last_seen":"2025-12-10T09:04:28.032811Z","times_seen":1,"resource_available":true,"data":null}},"time_used":780,"timings":{"blocked":288,"dns":0,"connect":96,"send":0,"wait":102,"receive":93,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"comunidad.movistar.es/t5/image/serverpage/image-id/107817iFDF9371CD5CC7706?v=1.0","fqdn":"comunidad.movistar.es","domain":"movistar.es","tld":"es"},"ip":{"addr":"3.167.2.61","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:47.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure06.lithium.com","organization":"Khoros, LLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 28 Mar 2025 00:00:00 GMT","end":"Wed, 22 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:84:40:0F:FD:5B:5B:3E:27:EF:04:05:E1:1E:9B:D4:EA:16:A1:A6","sha256":"3A:F3:D1:38:7E:FB:70:FE:35:B6:44:4B:C0:F2:74:47:7C:83:52:6F:C6:5E:FB:A5:7B:BF:EF:04:1B:B0:E6:0D"}}},"request":{"raw":"GET /t5/image/serverpage/image-id/107817iFDF9371CD5CC7706?v=1.0 HTTP/1.1\r\nHost: comunidad.movistar.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 10 Dec 2025 09:03:47 GMT\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nvary: accept-encoding\r\nserver: Apache\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nx-content-type-options: nosniff, nosniff\r\ncontent-security-policy: connect-src https: wss: blob: https://comunidad.movistar.es;default-src https: https://comunidad.movistar.es;font-src 'self' data:;frame-ancestors 'self';frame-src https: data: https://comunidad.movistar.es;img-src https: data: blob: https://*.movistar.es;media-src 'self' data: blob: https://comunidad.movistar.es;script-src https: blob: 'unsafe-inline'  'unsafe-eval' 'self'  https://comunidad.movistar.es;style-src https: blob: 'self' 'unsafe-inline'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\netag: W/\"f1c739hjiu4qs\"\r\nx-cache: Error from cloudfront\r\nvia: 1.1 331956c71b3e587b085083fed0bc8c3e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: mJEA_UJ-xTjx1GdQE_iRNeTmexeN0n__-xUUKdjtqtubl3Zdolonbg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts2.mm.bing.net/th?q=revisi%C3%B3n-adolescentes-habubu-combos-de-movistar-sin-cabeza-diario-cuidar.webp","fqdn":"ts2.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:47.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?q=revisi%C3%B3n-adolescentes-habubu-combos-de-movistar-sin-cabeza-diario-cuidar.webp HTTP/1.1\r\nHost: ts2.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=5184000\r\ncontent-length: 18436\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 0546010BEE234DF5971B9A53D8C438AD Ref B: OSL231050214054 Ref C: 2025-12-10T09:03:47Z\r\ndate: Wed, 10 Dec 2025 09:03:46 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":18436,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"31181462a8d868b65037522fbfc1cad8","sha1":"dae35b1db97d4ba16e594f3c32636a27c7cacb50","sha256":"74e0ad246337e310ec27880faa6eefa5b41f93c31e744cdded69fd8971720b27","sha512":"e338538cc742055ba392533ce4e3f062f4550cdd6d3ca62207e62962473ff54e17c2e98d7be3561256e89eab96035e35bbda8a9b5ac9cd2cec9c28619a673958","ssdeep":"384:T7YliNV5Z3Xuje+qYoPZQElIsbo8SUncbWcb7voyx42:vYlALeKoohdIsvEJ7vFC2","tlshash":"2a82d01b700c5337cb8ae376661ff360665945c4e13c20ddb0328f858fb86e2ee64558","first_seen":"2025-12-10T09:04:28.033749Z","last_seen":"2025-12-10T09:04:28.033749Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":57,"dns":38,"connect":2,"send":0,"wait":37,"receive":1,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/utility/robot/3/img/recaptcha.gif","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:50.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/interstitial/utility/robot/3/img/recaptcha.gif HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 09:03:50 GMT\r\ncontent-type: image/gif\r\ncontent-length: 65140\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 10:56:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b97041-fe74\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 4249598\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fCtJUnu0KZCIV3XnA8QsnqdyWYAwFuO37MrpKiU34aqBjHl2rhKRD8C0iXm6CHBXSCSXLkszkOq7IJZhqI%2FGyihjNmRYkIiIOgRPL4sZ\"}]}\r\ncf-ray: 9abb92440e4556b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65140,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 616 x 164","md5":"a83efb86bdb5d741f6103b69d6979035","sha1":"c944477b467f4aee49b4c86f3622a3519679667c","sha256":"e62a51a868623e3d04ac6c1bf28c3d34dd1e7008b9d62753963b2e2272971774","sha512":"9638afd8bfa476d24261a76a49c0e6df11c39db07cc357025f40660a3140499f234956a6971fce1ef0b61f74edba0f39e54a9a75e81adcbe423415f93dd23709","ssdeep":"1536:pcrveQZWvRPMwQUWJicq8ILNUcB4nReNsnrIfOPBVeD:Orve+WUJohC0fO5QD","tlshash":"4853ce1fc2181eeafc3bcbb6520b8d160a415b751c54c613e6b9f1c5382c5de2b15bae","first_seen":"2024-10-23T13:11:53.403324Z","last_seen":"2026-06-02T13:53:14.531257Z","times_seen":1737,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-content/themes/random-news/assets/js/endless-river.min.js?ver=1.8.0","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"godandcountry.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 18:04:18 GMT","end":"Sun, 15 Feb 2026 19:01:38 GMT"},"fingerprint":{"sha1":"39:34:A2:44:5E:09:D7:5B:B3:10:95:A0:BD:C7:72:E7:9E:2B:77:F1","sha256":"A3:D6:A1:84:56:C5:93:B1:A3:AF:BE:AA:EF:4A:02:4C:B6:E0:5C:15:1A:F2:F9:49:75:F2:73:AD:01:83:2E:86"}}},"request":{"raw":"GET /wp-content/themes/random-news/assets/js/endless-river.min.js?ver=1.8.0 HTTP/1.1\r\nHost: www.godandcountry.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 09:03:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Sep 2024 22:56:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"66ecac35-90c\"\r\nexpires: Wed, 10 Dec 2025 21:03:46 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rARiWlFssrq18KifERTeoC1jaG3vYNUCvjRLQJ6%2BK8xz4fHyPfxa9TlKZ16xSMslEPhDrwlW0hEquZ%2B5%2BUe8UY%2F3AkwLwCxtiR4dpPIkxH1SChnR\"}]}\r\ncf-ray: 9abb922ddc21712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2316,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2316), with no line terminators","md5":"b81c1f5f93a64a27735dbcccb6a7fc63","sha1":"e23ef344044ee2ae31ee616ba9ab17c9a0d8e854","sha256":"df4c28cc9cbaea711348a4efeb70f3bed5d72535e43f41b2a4ab11ac6de17941","sha512":"a32cfda0b921baa3f3ebef3822e54b643c650e6f99ea6cabd78840356606f38d696748867196317b28ef03b6e90a297323383ddb528c1a75f1adce7d7e9a96ec","ssdeep":"","tlshash":"9b41402a71a235f7a5f7962d232bd00e753e8a08d736821ee6aba0443dedc442157b5c","first_seen":"2023-03-10T13:51:14Z","last_seen":"2026-06-06T11:30:29.438853Z","times_seen":120,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-content/uploads/2024/08/pngegg-150x150.png","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:48.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"godandcountry.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 18:04:18 GMT","end":"Sun, 15 Feb 2026 19:01:38 GMT"},"fingerprint":{"sha1":"39:34:A2:44:5E:09:D7:5B:B3:10:95:A0:BD:C7:72:E7:9E:2B:77:F1","sha256":"A3:D6:A1:84:56:C5:93:B1:A3:AF:BE:AA:EF:4A:02:4C:B6:E0:5C:15:1A:F2:F9:49:75:F2:73:AD:01:83:2E:86"}}},"request":{"raw":"GET /wp-content/uploads/2024/08/pngegg-150x150.png HTTP/1.1\r\nHost: www.godandcountry.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=693ad8fa-6230-46fa-9b8c-c108aa45d8f7%3A2%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 09:03:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 2957\r\nlast-modified: Sun, 08 Sep 2024 15:20:22 GMT\r\npriority: u=6,i=?0\r\netag: \"66ddc0b6-b8d\"\r\nexpires: Fri, 09 Jan 2026 09:03:48 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cp8JEbVKLplolnCcxvn9KIKB%2Bt1qOAaFTyeWFloSLJf5QrP5skwbNJ1%2BJp%2FnkJyHDSWZnsMRb2BgNCHyRJDT1DmU1M2kzjpHETKR8us%2BReFHc8jW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9abb9236cc50712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2957,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"902b1ac1ac9b4d04c0766196a3e1615f","sha1":"46694044ff32118b5e20f5c0ff8562bbc4f37ea0","sha256":"fc49166b4015fbee9311f4aeb0a1ad3a04032d7ba66fad43aa78fe31e065798c","sha512":"b4288b8fe459822d5146cff50281c6a644c835b6ed9594a897518617510cd7d8ce14756b3d33598d1b2eb58c152e78fb709ffa950436e2d81957a303d08e6f61","ssdeep":"","tlshash":"23516be824328e726d798ef27e824117b09cd87a31bd60ea53cc84d563f381186a136e","first_seen":"2025-04-03T20:29:45.355335Z","last_seen":"2025-12-10T09:04:28.04011Z","times_seen":11,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-includes/css/dist/block-library/style.min.css?ver=6.6.2","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"godandcountry.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 18:04:18 GMT","end":"Sun, 15 Feb 2026 19:01:38 GMT"},"fingerprint":{"sha1":"39:34:A2:44:5E:09:D7:5B:B3:10:95:A0:BD:C7:72:E7:9E:2B:77:F1","sha256":"A3:D6:A1:84:56:C5:93:B1:A3:AF:BE:AA:EF:4A:02:4C:B6:E0:5C:15:1A:F2:F9:49:75:F2:73:AD:01:83:2E:86"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.6.2 HTTP/1.1\r\nHost: www.godandcountry.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 09:03:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 08 Sep 2024 15:07:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"66ddbdb8-1b723\"\r\nexpires: Wed, 10 Dec 2025 21:03:46 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VxNz9t4baS681rjit6DlzACRJmBQpqcqPwaSbSzdXcL35JN1d5BIAsBRuj151X3h4INCCqPUjhGYYlYTjk1zQ0lf%2FhV7on2iIdWLe%2FnTF4BceO56\"}]}\r\ncf-ray: 9abb922d6c14712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112419,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57765)","md5":"6c5989e44633f1e3f08ad845f9d9ce0b","sha1":"2b24009fd37e79d4a601e6d53d615fd2cd0a606b","sha256":"885c89e82436cfa3d0a0a5a9b2f6be6e1503457c810cc88ed2c09b4570ae9fd6","sha512":"1607a3f2ab27d377d5522bc5b7d0ebc5047e0b9352c7a49978d82d3128ebe13713af4738d05ad1d32c5a3c54ce0ec787f94bfe25073feaaf3d5d3bff8b4da2e5","ssdeep":"1536:pZeJWfZglWQg5MG7+qehN2pUkxWLPQql3Pq:pZeJwkWQg5MG7+qehN2pUk4LIU3Pq","tlshash":"f0b3614417b4dcf935ffa73a5e4ee258a103aa41c68a67e7e066d190618ca490cf3f0f","first_seen":"2024-07-23T18:54:41Z","last_seen":"2026-06-12T00:39:21.261968Z","times_seen":3994,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbva.pe/content/dam/public-web/peru/promociones-tarjetas/destacado/movistar-imagen.jpg.img.2400.1566508801534.jpg","fqdn":"www.bbva.pe","domain":"bbva.pe","tld":"pe"},"ip":{"addr":"96.6.16.130","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbva.pe","organization":"Banco Bilbao Vizcaya Argentaria S.A."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 10 Sep 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"91:84:18:39:8B:43:B3:4E:0C:19:4B:2C:C7:DB:2F:BE:EF:71:F2:9E","sha256":"3C:A7:8D:F8:BE:74:0A:02:94:EC:FA:AD:20:39:BB:42:C8:92:2C:5D:48:FD:F1:6D:DF:F2:15:E9:30:4C:8C:16"}}},"request":{"raw":"GET /content/dam/public-web/peru/promociones-tarjetas/destacado/movistar-imagen.jpg.img.2400.1566508801534.jpg HTTP/1.1\r\nHost: www.bbva.pe\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"f122e8641b119e918f6f63727034dd68\"\r\nlast-modified: Tue, 02 Dec 2025 08:56:50 GMT\r\ncontent-length: 176354\r\ncontent-type: image/avif\r\ncache-control: private, no-transform, max-age=1900395\r\nexpires: Thu, 01 Jan 2026 08:57:03 GMT\r\ndate: Wed, 10 Dec 2025 09:03:48 GMT\r\ncontent-security-policy: frame-ancestors 'self' https://bancaporinternet.bbva.pe  https://pidetutarjeta.bbva.pe https://tarjetas.bbva.pe https://cuentas.bbva.pe https://prestamos.bbva.pe https://extranetperu.grupobbva.pe\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":176354,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f1e725838d9abefb8f7ba5f116795fc4","sha1":"014be2cba2945548e51c311aaaf9863e497d8ff8","sha256":"db91b310c39cb67f31dbc138b6950deef5691a7990d151bad11f21d89c0a93cf","sha512":"a7b944dba5015f622353efe00f8af52d1b48cf49b0f9719d75dfb2b8eeb6a9ad77e5b7c8555acb74d9d6eb0423a2d24bfedd064be3599bfd4a3d033d3d459c62","ssdeep":"3072:qAVC/lrzEZNhFLP+uVlggs++LAZabxyaiOUCK3NxHe+cA3WLskFEnW1ENd4qb:M/lrzEZNhFZVlmXA8yaJUxTeO30XBErB","tlshash":"210413b169bc381dca24712e466ff912cdf0f5e0e15b06941884cb6f863e3e29d71b66","first_seen":"2025-12-10T09:04:28.042593Z","last_seen":"2025-12-10T09:04:28.042593Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1443,"timings":{"blocked":-1,"dns":205,"connect":20,"send":0,"wait":718,"receive":79,"ssl":408},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-content/themes/random-news/assets/webfonts/fa-regular-400.woff2","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:47.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"godandcountry.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 18:04:18 GMT","end":"Sun, 15 Feb 2026 19:01:38 GMT"},"fingerprint":{"sha1":"39:34:A2:44:5E:09:D7:5B:B3:10:95:A0:BD:C7:72:E7:9E:2B:77:F1","sha256":"A3:D6:A1:84:56:C5:93:B1:A3:AF:BE:AA:EF:4A:02:4C:B6:E0:5C:15:1A:F2:F9:49:75:F2:73:AD:01:83:2E:86"}}},"request":{"raw":"GET /wp-content/themes/random-news/assets/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: www.godandcountry.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/wp-content/themes/random-news/assets/css/fontawesome.min.css?ver=1.8.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 09:03:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13224\r\nlast-modified: Thu, 19 Sep 2024 22:56:40 GMT\r\npriority: u=4,i=?0\r\netag: \"66ecac28-33a8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=op%2FOB1JPq3Xk%2FkmM5fk%2BT1v2cs2rLlwGiKosn6nA9JzqaOfKBvb5eBpnx3%2BcsI56ZhzFq92yx0V49%2B0PqkjLnPMVF7wZRfcXtn%2FNhT21GLIwI6BB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9abb9231fc38712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13224,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13224, version 331.-31196","md5":"b91d376b8d7646d671cd820950d5f7f1","sha1":"13517529affa39e2585c591acae6dc336b6aa917","sha256":"e42a88444448ac3d60549cc7c1ff2c8a9cac721034c073d80a14a44e79730cca","sha512":"80d50b0cf7d064332a0c8e7d9f2e294f1abed15c47644cb04b92b785af4601b683cfd3c668c0ef31dee342840063e0c395ae453650184971ba984ec8ecd3223a","ssdeep":"384:eGBfQ1X4Rpcob1t2NCu+FfLckX1edFTYdpPKW0:eMIis6cCuZnTYLyW0","tlshash":"0d52c058c9438097d01fe137fe4fe8b95c5d518aba94d3c18628d7792cb4342ace31b2","first_seen":"2023-04-05T08:50:32Z","last_seen":"2026-06-12T01:56:21.887592Z","times_seen":20122,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1509\u0026rd=1509\u0026fd=534\u0026bv=25.12.2109\u0026tmpl=136","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:47.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 01:12:52 GMT","end":"Wed, 28 Jan 2026 01:12:51 GMT"},"fingerprint":{"sha1":"67:43:25:0A:D1:7D:95:9F:2D:A3:3F:97:74:7C:0A:AE:D2:D3:98:61","sha256":"09:09:97:4E:79:6D:B5:F4:D7:B7:F6:8F:BE:97:4E:B6:04:9C:25:29:FE:4A:0E:A2:BE:82:F0:6E:CF:8C:74:F0"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1509\u0026rd=1509\u0026fd=534\u0026bv=25.12.2109\u0026tmpl=136 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 10 Dec 2025 09:03:48 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/impr.gif?sid=H4sIAAAAAAAC_1STzYsdxRrGqyfJXdwLN9xc0Y3IWQh-4MxUd_WnWYiTGAlOPkgiWbiqz5Ny-nS3Xd2nJ7OQYEACbgZXLnueM8lgDKIbd0I448qAMMfVLDIIgv-AkLWcycDou3g_6leL5y2e-nyrPSAMLd-_eqncsHnOl6MlOnj9pi1U2bnB5RsDny7Rs4ObtojDs4P1earHb_ssXKJvDN7Xcq1cDqhPqU_9wQVba1OuLx9S2OpR5i9ldCkMlvwoxHr9z9m1Hhz3oMYH5Aysmp3-3XwEK6coRt-d126tKau33hu1OW_KGmO182GxVpRdgdFxa2oPptg5uo3SzQj5agFlsXO0Acrx9nwDCDsjCy8-hSh2jmRCjO8_Vypy6AJC_QfdeAqd78LyKWR5F1btEUAqXL6CYvTgcll3_PZzyud0Rk4--xO2m5GTT19AMfp2Jbfrg-tl3ja2LBzWTQ-7PoUdTlG1u2g2PNhuF7L5DFb9QpafraIYbV9xeQmr9l-NM8ZVavhiHDC6GMaGL2YilYvSpynnYaRSkxw-kTVTcLeA1nlorYfWeGgrDyO1PwhpGkqfs9hkSiY05GGotKBZGlDKM5mglXPtm2iqTch8E7K-g6q-gzX75V50Zu_Ub6jbx3C39n9gKc-EDLOAG5bEQZjFMtM6pJRHgskgCLlkkvsZjYxKaJAwSnUieSS4YFEimRIZY1pGzMRh7Oso9QPJs4QxmUoRUBoGmY6VVEwnNNLSNz41vvB1wGITqzQwNDERzZQfJH7sR5Hxk5jTUNE4pWmmdcQDw2gQ8ShI_TSWWRSLmMEpD64hGKsenSboHEHHCTpL0DUE3bi_r3IXuP6Byl0r_KMaHFXWT8pmuMXvl81QFwS83kSt-m1bfeLuQjYnJhvGqUk5T1w0_YQL1W9VB-R_c0946pUEa3p_ECXcz8KApTzSxvczEao0k0wrFilNMw5ne1i3AO48bNgZOXvuNCo7Iydeeg2C78Llu5D2ZfD2FHg3YZSC35oEEcVG8ZArbaxbKushVNmjak6iue1t5Qfk_5NrN1YeH9pz9dKn0PIJOQrIukdV9_jY_kQwzO9NrpUd2b5Wdo58f6Vq7Mhu8Ll1rze80f96-IG-3ZW1unjebX79rpyDefvohnbNKi-ULYaOfLNildL1hbKWmvx40d3U4mrrbq20ddFWq1fPXbg4qmrtnC2LKbjd0z9D2hn57x_jw0_55hf_hqzuwFXHKl1JICqC3BLk-vicix7ub7M47rfcPQxrD7y5i2LUY1z3GOc9eL4J156YNFX95J1f2WFA5N5E5DXZFnk953Z_YJgOJKVpEvssNdpnoZImSsNMxZwyptG4mc2S5q8AAAD___9dtuYyBQAA","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:48.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 01:12:52 GMT","end":"Wed, 28 Jan 2026 01:12:51 GMT"},"fingerprint":{"sha1":"67:43:25:0A:D1:7D:95:9F:2D:A3:3F:97:74:7C:0A:AE:D2:D3:98:61","sha256":"09:09:97:4E:79:6D:B5:F4:D7:B7:F6:8F:BE:97:4E:B6:04:9C:25:29:FE:4A:0E:A2:BE:82:F0:6E:CF:8C:74:F0"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1STzYsdxRrGqyfJXdwLN9xc0Y3IWQh-4MxUd_WnWYiTGAlOPkgiWbiqz5Ny-nS3Xd2nJ7OQYEACbgZXLnueM8lgDKIbd0I448qAMMfVLDIIgv-AkLWcycDou3g_6leL5y2e-nyrPSAMLd-_eqncsHnOl6MlOnj9pi1U2bnB5RsDny7Rs4ObtojDs4P1earHb_ssXKJvDN7Xcq1cDqhPqU_9wQVba1OuLx9S2OpR5i9ldCkMlvwoxHr9z9m1Hhz3oMYH5Aysmp3-3XwEK6coRt-d126tKau33hu1OW_KGmO182GxVpRdgdFxa2oPptg5uo3SzQj5agFlsXO0Acrx9nwDCDsjCy8-hSh2jmRCjO8_Vypy6AJC_QfdeAqd78LyKWR5F1btEUAqXL6CYvTgcll3_PZzyud0Rk4--xO2m5GTT19AMfp2Jbfrg-tl3ja2LBzWTQ-7PoUdTlG1u2g2PNhuF7L5DFb9QpafraIYbV9xeQmr9l-NM8ZVavhiHDC6GMaGL2YilYvSpynnYaRSkxw-kTVTcLeA1nlorYfWeGgrDyO1PwhpGkqfs9hkSiY05GGotKBZGlDKM5mglXPtm2iqTch8E7K-g6q-gzX75V50Zu_Ub6jbx3C39n9gKc-EDLOAG5bEQZjFMtM6pJRHgskgCLlkkvsZjYxKaJAwSnUieSS4YFEimRIZY1pGzMRh7Oso9QPJs4QxmUoRUBoGmY6VVEwnNNLSNz41vvB1wGITqzQwNDERzZQfJH7sR5Hxk5jTUNE4pWmmdcQDw2gQ8ShI_TSWWRSLmMEpD64hGKsenSboHEHHCTpL0DUE3bi_r3IXuP6Byl0r_KMaHFXWT8pmuMXvl81QFwS83kSt-m1bfeLuQjYnJhvGqUk5T1w0_YQL1W9VB-R_c0946pUEa3p_ECXcz8KApTzSxvczEao0k0wrFilNMw5ne1i3AO48bNgZOXvuNCo7Iydeeg2C78Llu5D2ZfD2FHg3YZSC35oEEcVG8ZArbaxbKushVNmjak6iue1t5Qfk_5NrN1YeH9pz9dKn0PIJOQrIukdV9_jY_kQwzO9NrpUd2b5Wdo58f6Vq7Mhu8Ll1rze80f96-IG-3ZW1unjebX79rpyDefvohnbNKi-ULYaOfLNildL1hbKWmvx40d3U4mrrbq20ddFWq1fPXbg4qmrtnC2LKbjd0z9D2hn57x_jw0_55hf_hqzuwFXHKl1JICqC3BLk-vicix7ub7M47rfcPQxrD7y5i2LUY1z3GOc9eL4J156YNFX95J1f2WFA5N5E5DXZFnk953Z_YJgOJKVpEvssNdpnoZImSsNMxZwyptG4mc2S5q8AAAD___9dtuYyBQAA HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.vafP6Ov5l2KWTs_l7Ca-A0BW0FrQ9UOFxXPmIqUyBdk; uid_id2=693ad8fa-6230-46fa-9b8c-c108aa45d8f7:2:1; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl23338551=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 10 Dec 2025 09:03:48 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: db9a13e46ec814db37b3d6cbd6325a88\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/utility/robot/3/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:50.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/interstitial/utility/robot/3/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.godandcountry.blog\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 09:03:50 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 13:25:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b9935a-18f3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KT0t0A9eU2vOUL4zvOSevt%2Be4BbYkbMVZp9c21Q5gE6CyFreEGSuLVDDOCcAOcmi1s8EP3Mlj9MFDglGEloc0C57SZQrtrD%2F3%2Fj%2B5zFr\"}]}\r\ncf-ray: 9abb92438dd656b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6387,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"20b72d2b5d691275f5e1f201c54208eb","sha1":"a8082db410892a8b50274eeb812fe58c04e5e407","sha256":"476950bbfeccfbd5ad93c5ad69d5192e62e9eb9e3e03dfc2447c98c7bb5634e6","sha512":"5702a11b753960144f8debcbbff5ad272f00543b6b8bd71a440fb28945bf4d81bd75cc1a08fa531e10efe8aa8dbcb6305dc882e12b8854ccb6f88b62dbeb934d","ssdeep":"96:1zlzMUmWCfICX6zXXgCfUKOtAYiY5mnM0pfiUpznL4OHBCHL+OCBhEkuCo1cCJ0v:LMZnincKOyXnMsIM0M9X4U4H4vFEa","tlshash":"ebd130a617650204740bd8563d126f17a3688053ef0fd9b86ed2244cceca6ce56f378f","first_seen":"2025-09-21T13:47:45.281723Z","last_seen":"2026-06-02T13:53:14.560436Z","times_seen":1695,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":45,"dns":19,"connect":1,"send":0,"wait":467,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbs?c=1","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:51.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 01:12:52 GMT","end":"Wed, 28 Jan 2026 01:12:51 GMT"},"fingerprint":{"sha1":"67:43:25:0A:D1:7D:95:9F:2D:A3:3F:97:74:7C:0A:AE:D2:D3:98:61","sha256":"09:09:97:4E:79:6D:B5:F4:D7:B7:F6:8F:BE:97:4E:B6:04:9C:25:29:FE:4A:0E:A2:BE:82:F0:6E:CF:8C:74:F0"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.vafP6Ov5l2KWTs_l7Ca-A0BW0FrQ9UOFxXPmIqUyBdk; uid_id2=693ad8fa-6230-46fa-9b8c-c108aa45d8f7:2:1; pdhtkv=true; uncs=2; pdhtkv5=true; uncs5=1; u_pl23338551=1; pdhtkv29=true; uncs29=1; u_pl26519074=1; sleccf85dec27b33de4ca3d391cd894db44c=[6308898]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 10 Dec 2025 09:03:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"godandcountry.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 18:04:18 GMT","end":"Sun, 15 Feb 2026 19:01:38 GMT"},"fingerprint":{"sha1":"39:34:A2:44:5E:09:D7:5B:B3:10:95:A0:BD:C7:72:E7:9E:2B:77:F1","sha256":"A3:D6:A1:84:56:C5:93:B1:A3:AF:BE:AA:EF:4A:02:4C:B6:E0:5C:15:1A:F2:F9:49:75:F2:73:AD:01:83:2E:86"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: www.godandcountry.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 09:03:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 08 Sep 2024 15:07:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"66ddbdb7-3509\"\r\nexpires: Wed, 10 Dec 2025 21:03:46 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJOM7Rmfzb%2BS0%2FrawQF3cQXCXKUcwmuEvYbXA%2BwjOaYkr6GXhBBdF%2BI6yclSf7Y6Pu6p4k5e%2FNVPH5%2BZrPYGrlPL3jTYM5MAn92Pz%2BxuY%2FQ9Fjne\"}]}\r\ncf-ray: 9abb922d7c1d712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-12T01:48:44.914402Z","times_seen":830921,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-content/themes/random-news/assets/js/navigation.min.js?ver=1.0.3","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"godandcountry.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 18:04:18 GMT","end":"Sun, 15 Feb 2026 19:01:38 GMT"},"fingerprint":{"sha1":"39:34:A2:44:5E:09:D7:5B:B3:10:95:A0:BD:C7:72:E7:9E:2B:77:F1","sha256":"A3:D6:A1:84:56:C5:93:B1:A3:AF:BE:AA:EF:4A:02:4C:B6:E0:5C:15:1A:F2:F9:49:75:F2:73:AD:01:83:2E:86"}}},"request":{"raw":"GET /wp-content/themes/random-news/assets/js/navigation.min.js?ver=1.0.3 HTTP/1.1\r\nHost: www.godandcountry.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 09:03:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Sep 2024 22:56:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"66ecac35-4d1\"\r\nexpires: Wed, 10 Dec 2025 21:03:46 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hsh80SVpKR1dMShGuxhrPw8LrIyNvqUT2rPoksZrMgxSyzBeng53cY9iyjfTcRSlMAqXNFssS1U6zWOxIZxjHxxP1ImJz0YQ8jszr8QQ38xFzmsj\"}]}\r\ncf-ray: 9abb922dcc1f712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1233,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1233), with no line terminators","md5":"34111f809922172188dd1d5fe79bf8e9","sha1":"4850fa99bda5a1de24ff33ed9c5d444b8aa2467c","sha256":"e41a7f04a7ee5039f882bc018d3f8123784cb1e6039be786e139a8df36d55621","sha512":"630c2174efa3ade1e686d9615e7d33ce9cac2efaf92eb3071075b251444cae1fadf9e34eba1b38c1df5cf24b417772b2c3580b3e8052794af0bd22ffe2a06220","ssdeep":"","tlshash":"4821e27f1a803abb1ace32cb73e754813b732096a84548256593dc470e28df105f5bec","first_seen":"2023-03-10T13:51:14Z","last_seen":"2026-06-10T11:24:24.491942Z","times_seen":171,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/watch.1284028319827.js?key=57a194238a5ef119b4d89c3ed35de09a\u0026kw=%5B%22movistar%22%2C%22%C2%AB%22%2C%22distribuidor%22%2C%22autorizado%22%2C%22rgso%22%5D\u0026refer=https%3A%2F%2Fwww.godandcountry.blog%2Fes%2Fcomo-cambiar-paquete-movistar-tv.html\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=693ad8fa-6230-46fa-9b8c-c108aa45d8f7%3A2%3A1","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:47.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 01:12:52 GMT","end":"Wed, 28 Jan 2026 01:12:51 GMT"},"fingerprint":{"sha1":"67:43:25:0A:D1:7D:95:9F:2D:A3:3F:97:74:7C:0A:AE:D2:D3:98:61","sha256":"09:09:97:4E:79:6D:B5:F4:D7:B7:F6:8F:BE:97:4E:B6:04:9C:25:29:FE:4A:0E:A2:BE:82:F0:6E:CF:8C:74:F0"}}},"request":{"raw":"GET /watch.1284028319827.js?key=57a194238a5ef119b4d89c3ed35de09a\u0026kw=%5B%22movistar%22%2C%22%C2%AB%22%2C%22distribuidor%22%2C%22autorizado%22%2C%22rgso%22%5D\u0026refer=https%3A%2F%2Fwww.godandcountry.blog%2Fes%2Fcomo-cambiar-paquete-movistar-tv.html\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=693ad8fa-6230-46fa-9b8c-c108aa45d8f7%3A2%3A1 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.godandcountry.blog\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.21.6\r\nDate: Wed, 10 Dec 2025 09:03:47 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://www.godandcountry.blog\r\naccess-control-allow-credentials: true\r\nlocation: https://wayfarerorthodox.com/watch.1284028319827.js?key=57a194238a5ef119b4d89c3ed35de09a\u0026kw=%5B%22movistar%22%2C%22%C2%AB%22%2C%22distribuidor%22%2C%22autorizado%22%2C%22rgso%22%5D\u0026refer=https%3A%2F%2Fwww.godandcountry.blog%2Fes%2Fcomo-cambiar-paquete-movistar-tv.html\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=693ad8fa-6230-46fa-9b8c-c108aa45d8f7%3A2%3A1\u0026shu=38a9bc492af3762496c9ee400a5b3c224ac3ca1905fd7027300e7ca5bab357c3db933ec53f6461e5812ca9733c8cb200429e6dcd3e705ec1f10f1b1e236f6d82f07f509d12716155f176a04d068089ee5a2f3025a528186c956b63\u0026pst=1765357487\u0026rmtc=t\r\nset-cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.vafP6Ov5l2KWTs_l7Ca-A0BW0FrQ9UOFxXPmIqUyBdk; expires=Wed, 10 Dec 2025 09:04:47 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 1\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0d56eb7a47624ae6f3527c87dac340d8\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4830,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":648,"timings":{"blocked":262,"dns":1,"connect":98,"send":0,"wait":96,"receive":1,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/ren.gif?sid=H4sIAAAAAAAC_1RTsY8bxReeda76_YqIEEEDkhUhEQTn2_Xu2l5ShFxCUJSQhCQoBQXMzsz6Bq93lpldr-OGiAgUOkeiAESx_uy7E-GEoKRARD4kipOQYqorcorEP4AESo3ssxTxivfefN8U3_fmzWej_IC4yOn-1bfVQMYxXfNrdvXkTZlwVZjq5RtVx67Zp6o3ZdLwTlX786R7rzuuV7Nfqb4lWEet1W3Hth3bqZ6XWkSqv7ZgIdOdwKkFds2r1xzfQ1__92zyCgy1wHsH5Bgknx39M3oPkk2RdH84J0wnU-lrb3bzmGZKo8e33006iSoSdJ-2kbYQJdvL21BmRsiXFahke-kAqjeZO0AoZ6Ty3COEyfZSJsLe5qHSMIZIEPL_o-hNIeIpJJ2CqTuQ_CEBGMflK0i6W5eVLuitQ5bO2RlZefI3ZDEjK4-OI-l-vx7LfvW6ivNMqsSgH5WQ_Slke4o030U2sCCLXbDsE0j-O1l7cglJd3LFxAqS77_UCFzKWxFdbdRde9VrRHQ1CFtslTl2i1LP562ouRiRjKagpoLcWMilhTyykKcWuny_6tktjznUbUQBZ03bo57HRWgHrbpt04A1kbO59iGydAgWD8H0p1sp38g6vUmmczHJE2ZGzvYh5C-wzTnmj5yd_P00rruu2_J9Z-Qg1bfRkfce-seg8wcwGyUMr8BkM2K98zF6vEQhCApDUFCCQhIUGUHRKzd5bOqm3OKxyUNnWevL6pZjlbVHdFNlbZEQUD2E5uVEph-ZO2DZkfEgMnys5omGWTmmIS9H6QF5Zv4o1hdbJ9AR-1UWtXwuWL0Zui4XHqMudwOH8Vbg8dDzGIwsIU0F1FgYyBk5dfYoUjkjR55_GSHdhYl3weQLoPmLoEUJulFikNynXETS1JRug6sSabaC7JY1ig_Is-NrN9YfLDbjg3MnINjeG-7jM583L_4GpkukusSH8leCdnx3fE0VZHJNFYb8eCXNZFcO6Hxrrmc0Eyv3L4pbhdL8wjkz_PYMmxPzdueGMNklmnCZtA35bl1yLvR5pZkgP18wN0V4NTcb67lO8vTS1bPnL3RTLYyRKpmCyhn53zevgskZOX7y9OJH-P88Bktvw6R7p3_6ah5fwyiCMLUQS4JY7JFlgIYljHjqJxR7v_x1yI3MXbS1BZrdQdIt0dMlenEJGg9h8iPjLNV7p_9wF4EwtsZhrK1JGOv43uGcjNyv-vXQbbRaDRE1eORyt-7ywLdF4NGg4QWej8zMZNDM_w0AAP__StWXXrQEAAA=","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:49.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 01:12:52 GMT","end":"Wed, 28 Jan 2026 01:12:51 GMT"},"fingerprint":{"sha1":"67:43:25:0A:D1:7D:95:9F:2D:A3:3F:97:74:7C:0A:AE:D2:D3:98:61","sha256":"09:09:97:4E:79:6D:B5:F4:D7:B7:F6:8F:BE:97:4E:B6:04:9C:25:29:FE:4A:0E:A2:BE:82:F0:6E:CF:8C:74:F0"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RTsY8bxReeda76_YqIEEEDkhUhEQTn2_Xu2l5ShFxCUJSQhCQoBQXMzsz6Bq93lpldr-OGiAgUOkeiAESx_uy7E-GEoKRARD4kipOQYqorcorEP4AESo3ssxTxivfefN8U3_fmzWej_IC4yOn-1bfVQMYxXfNrdvXkTZlwVZjq5RtVx67Zp6o3ZdLwTlX786R7rzuuV7Nfqb4lWEet1W3Hth3bqZ6XWkSqv7ZgIdOdwKkFds2r1xzfQ1__92zyCgy1wHsH5Bgknx39M3oPkk2RdH84J0wnU-lrb3bzmGZKo8e33006iSoSdJ-2kbYQJdvL21BmRsiXFahke-kAqjeZO0AoZ6Ty3COEyfZSJsLe5qHSMIZIEPL_o-hNIeIpJJ2CqTuQ_CEBGMflK0i6W5eVLuitQ5bO2RlZefI3ZDEjK4-OI-l-vx7LfvW6ivNMqsSgH5WQ_Slke4o030U2sCCLXbDsE0j-O1l7cglJd3LFxAqS77_UCFzKWxFdbdRde9VrRHQ1CFtslTl2i1LP562ouRiRjKagpoLcWMilhTyykKcWuny_6tktjznUbUQBZ03bo57HRWgHrbpt04A1kbO59iGydAgWD8H0p1sp38g6vUmmczHJE2ZGzvYh5C-wzTnmj5yd_P00rruu2_J9Z-Qg1bfRkfce-seg8wcwGyUMr8BkM2K98zF6vEQhCApDUFCCQhIUGUHRKzd5bOqm3OKxyUNnWevL6pZjlbVHdFNlbZEQUD2E5uVEph-ZO2DZkfEgMnys5omGWTmmIS9H6QF5Zv4o1hdbJ9AR-1UWtXwuWL0Zui4XHqMudwOH8Vbg8dDzGIwsIU0F1FgYyBk5dfYoUjkjR55_GSHdhYl3weQLoPmLoEUJulFikNynXETS1JRug6sSabaC7JY1ig_Is-NrN9YfLDbjg3MnINjeG-7jM583L_4GpkukusSH8leCdnx3fE0VZHJNFYb8eCXNZFcO6Hxrrmc0Eyv3L4pbhdL8wjkz_PYMmxPzdueGMNklmnCZtA35bl1yLvR5pZkgP18wN0V4NTcb67lO8vTS1bPnL3RTLYyRKpmCyhn53zevgskZOX7y9OJH-P88Bktvw6R7p3_6ah5fwyiCMLUQS4JY7JFlgIYljHjqJxR7v_x1yI3MXbS1BZrdQdIt0dMlenEJGg9h8iPjLNV7p_9wF4EwtsZhrK1JGOv43uGcjNyv-vXQbbRaDRE1eORyt-7ywLdF4NGg4QWej8zMZNDM_w0AAP__StWXXrQEAAA= HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.vafP6Ov5l2KWTs_l7Ca-A0BW0FrQ9UOFxXPmIqUyBdk; uid_id2=693ad8fa-6230-46fa-9b8c-c108aa45d8f7:2:1; pdhtkv=true; uncs=2; pdhtkv5=true; uncs5=1; u_pl23338551=1; pdhtkv29=true; uncs29=1; u_pl26519074=1; sleccf85dec27b33de4ca3d391cd894db44c=[6308898]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 10 Dec 2025 09:03:49 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: ba66f62f4738a54c4ce460de94515167\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/uk0dHjWOJMA/maxresdefault.jpg","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.250.74.150","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:42 GMT","end":"Mon, 19 Jan 2026 08:33:41 GMT"},"fingerprint":{"sha1":"A5:AF:4B:FA:75:93:1D:71:E3:13:0F:54:62:E3:C1:CD:54:FA:BB:3C","sha256":"BD:B3:95:9F:5C:41:DD:AB:ED:97:A5:A6:69:97:2C:11:29:D4:2C:22:07:36:93:DD:C7:20:46:DD:57:97:1A:E5"}}},"request":{"raw":"GET /vi/uk0dHjWOJMA/maxresdefault.jpg HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 167253\r\ndate: Wed, 10 Dec 2025 09:03:47 GMT\r\nexpires: Wed, 10 Dec 2025 11:03:47 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1474382508\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":167253,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"0dbaddb7f8e8dc22afc0446628daaad9","sha1":"746a4cc83ea2812d54c046b8b4f2511c63f650c1","sha256":"6d4ed0dce10eb32680429ab390424c2d60b2f1ae328d5a8e0022dd5cf30a6d7e","sha512":"06fcfa110f5e8870cdb510192c345d78742cc8020d1413a04036511ccda4844915010e5085f914137c27c52b22a299766508e703ad7d2386f8a803e7ab2dc26e","ssdeep":"3072:BhdEbPsuQwwqRyHxK/WQPhLl+3RxYeMbKkLp6+AP6dOSjX8RAvjoUv3hN:sPJ4HxrQPhB+3vFKp6L6dZjXQAvjJ","tlshash":"32f3f10dd8ccca88d69605808d686b019da373793620ac574c7f9c9eb058cd76fa9fb3","first_seen":"2025-12-10T09:04:28.046099Z","last_seen":"2025-12-10T09:04:28.046099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":49,"connect":22,"send":0,"wait":46,"receive":31,"ssl":245},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.japan2uk.com/cdn/shop/files/image_ad787388-4b28-4920-a212-6ce4bd62b3b1_700x700.png?v=1690797315","fqdn":"www.japan2uk.com","domain":"japan2uk.com","tld":"com"},"ip":{"addr":"23.227.38.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.japan2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 12:18:01 GMT","end":"Sat, 21 Feb 2026 13:17:56 GMT"},"fingerprint":{"sha1":"34:57:97:11:59:BE:39:84:1D:F6:91:DB:47:97:77:A9:E3:7B:FA:FE","sha256":"8B:ED:75:EF:29:68:D7:D7:7F:05:79:79:98:6F:1B:85:A4:16:9E:BE:68:28:5B:40:0C:DD:6E:0B:3A:1B:73:FA"}}},"request":{"raw":"GET /cdn/shop/files/image_ad787388-4b28-4920-a212-6ce4bd62b3b1_700x700.png?v=1690797315 HTTP/1.1\r\nHost: www.japan2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 09:03:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 118488\r\ncf-ray: 9abb922f7b5a723c-OSL\r\nx-sorting-hat-podid: 376\r\nx-sorting-hat-shopid: 49821221019\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: public, max-age=31557600\r\nserver-timing: imagery;dur=747.432, imageryFetch;dur=228.764, imageryProcess;dur=517.679;desc=\"image\", cfRequestDuration;dur=1101.999760\r\nsource-length: 7450584\r\nsource-type: image/png\r\ntiming-allow-origin: *\r\nvary: Accept, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-request-id: 3df97395-50ea-4038-89ca-6e221aac64ff-1765357427\r\nx-shopid: 49821221019\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-dc: gcp-us-east1,gcp-us-central1\r\nlast-modified: Wed, 10 Dec 2025 09:03:48 GMT\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PnYVO%2BWCI1A4jLM739p9XP73jEXbmGVUYbiEnKyp3YuxCE4YYjo%2BXwFlQaRg5HPlUGvil0De1BxsbhyRa5u19zeP9RNsX5qSiDCCLb9xe5KkC0ZwkMsHqU66a0Eji0p0vGU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nx-permitted-cross-domain-policies: none\r\nx-download-options: noopen\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Shopify","description":"Shopify is a subscription-based software that allows anyone to set up an online store and sell their products. Shopify store owners can also sell in physical locations using Shopify POS, a point-of-sale app and accompanying hardware.","website":"https://shopify.com","common_platform_enumeration":"","icon":"Shopify.svg","categories":["Ecommerce","CMS"]}],"data":{"size":118488,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"04c133ca7ff7ba5d59b55de98ebda230","sha1":"8370e050ee11815edb3caaecd05c1501c00aec31","sha256":"3a86f6ad645a2e9bc4a78b0dc113abf28c8df640442b959f0bb42731ee0a864c","sha512":"a83b36c15356c2c8acd223276c583efe01a84a4602de1741f32d9f3a8ebb9f9db6d9dec3c6744a232ec6a144fdedac3597833d7c7701dc39f2be155139ca16e9","ssdeep":"3072:cYgaUU07fbJDswkRE2ICZ8KFkUiu0cQl0f9faW:z0bJkmK6Lu9nf9faW","tlshash":"e5c31342cdc36be7d12255f4d79fdd0a86ed256321ac3e0bb022672fda483637c66281","first_seen":"2025-12-10T09:04:28.047031Z","last_seen":"2025-12-10T09:04:28.047031Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1390,"timings":{"blocked":-1,"dns":190,"connect":5,"send":0,"wait":1103,"receive":5,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-content/themes/random-news/assets/js/custom.min.js?ver=1.0.3","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"godandcountry.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 18:04:18 GMT","end":"Sun, 15 Feb 2026 19:01:38 GMT"},"fingerprint":{"sha1":"39:34:A2:44:5E:09:D7:5B:B3:10:95:A0:BD:C7:72:E7:9E:2B:77:F1","sha256":"A3:D6:A1:84:56:C5:93:B1:A3:AF:BE:AA:EF:4A:02:4C:B6:E0:5C:15:1A:F2:F9:49:75:F2:73:AD:01:83:2E:86"}}},"request":{"raw":"GET /wp-content/themes/random-news/assets/js/custom.min.js?ver=1.0.3 HTTP/1.1\r\nHost: www.godandcountry.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 09:03:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Sep 2024 22:56:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"66ecac37-1821\"\r\nexpires: Wed, 10 Dec 2025 21:03:46 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fGgDL7%2ByN6escx0J6tJtWts2VW6T5xXdQVK%2BsXif3EGwn1c30ai5chdwRDLuVrc06ROhgYzsgRhZOaVLyPYy8AkA9uZfFGxIkRQf7W9wXR3hsPya\"}]}\r\ncf-ray: 9abb922ddc22712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6177,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6177), with no line terminators","md5":"3e743a702d1b09fcdab99895a38bec4e","sha1":"02952f0a4c35c377b6085e4229f803e98fd3066c","sha256":"c7739ef2dd5325e2d7d8692ec1585aa31b4dde734ae3be54212ec52aa3508843","sha512":"89e77c87e30329a21a61d9477c7db3892ee220daf5e4a189ebf821745078375f6cc80494b282eb64fa11ca8b520a128cb5f237cc4fbc858abbb8eb91b72934b2","ssdeep":"48:kkOxpWzu5bN5bWu5bN5bEZu5bN5bym75bN5bEnKmr05bN5bEtVm95bN5bEYmS5bT:kUzBVfmpmrTVmZm1r+AMstKanvhmRr","tlshash":"07d1a611b42661974ab733b6a047e200a24f2d3ddac962c19dc788e917cc80e9735bf7","first_seen":"2023-08-18T02:07:25Z","last_seen":"2026-05-13T13:06:03.749273Z","times_seen":12,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"18.195.78.6","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:47.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.godandcountry.blog\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 09:03:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://www.godandcountry.blog\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=693ad8fa-6230-46fa-9b8c-c108aa45d8f7:2:1; expires=Sat, 08 Dec 2035 09:03:47 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"199cee8be7e31716b0ccb73b14a00e51","sha1":"6de79def428305728074c56955cf7d5bc4192f0c","sha256":"4c28a4ba46e071907ad64d48935782ffd686112aa387165aa4bf9a26c66004c6","sha512":"86a2fe08087659dba751c9fa37232c552d46d1577c3bed6f10588c3e0d785555110db47f7ae6e9e62bab7a543740f5cd99b68f0b6e5d96a04a359c47e4f1445f","ssdeep":"","tlshash":"7a90044d707451dd40554110cc477fd3041311450013c40f0f4145054157170c4d115f","first_seen":"2025-12-10T09:04:28.048545Z","last_seen":"2025-12-10T09:04:28.048545Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":115,"dns":21,"connect":21,"send":0,"wait":22,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-creative1.com/sb/interstitial/utility/robot/3/index.html","fqdn":"cdn.show-creative1.com","domain":"show-creative1.com","tld":"com"},"ip":{"addr":"104.21.15.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:49.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-creative1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Dec 2025 21:44:28 GMT","end":"Thu, 05 Mar 2026 22:42:58 GMT"},"fingerprint":{"sha1":"32:E8:D3:D8:57:3D:77:06:14:B5:AE:66:6B:E6:23:35:25:11:2C:25","sha256":"65:65:A6:2D:1D:7A:E9:EF:3F:02:AB:E8:2B:83:22:39:7B:1B:99:BB:3D:AE:E4:D2:5F:AB:C5:32:3B:21:23:C3"}}},"request":{"raw":"GET /sb/interstitial/utility/robot/3/index.html HTTP/1.1\r\nHost: cdn.show-creative1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.godandcountry.blog\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 09:03:50 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 10:55:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VPgvD4po%2F%2BItZ1%2FaIR4KwgT0HlRDekVj0J1eyiJ7VDEGKQxOaLufwFGUWw34QE9K%2BMrhaudV2krrgkgYAOk56%2F19VqnYub9nluMmqto9an2kRZB3AXM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9abb92400945c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1524,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"9dc0a25dabbe4de856fe02152e69ab75","sha1":"d8a184a181424a51a758b262927e6c0aba7b2b15","sha256":"8c71a26417b0ad5884462cf96135d8aaf1012b9ead37bdf5b505e51dcfd3d173","sha512":"c28042db79a340dea9f66b3c4ed465fa38ea7b152549cd518ee00415109f70eb28602dee1fd4ca9b8ce4810354fe7fc7bfa1ec271cb8cfbe59c2efc58a0de182","ssdeep":"","tlshash":"a231495529fccb26118361e63f702f7ba984e943895b8440b2bd4a908be7ec5cd5720b","first_seen":"2025-09-21T13:47:45.272345Z","last_seen":"2026-06-02T13:53:14.553795Z","times_seen":1772,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":49,"dns":34,"connect":1,"send":0,"wait":475,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/utility/robot/3/img/banner.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:50.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/interstitial/utility/robot/3/img/banner.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 09:03:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 31747\r\nserver: cloudflare\r\nlast-modified: Thu, 12 Dec 2024 14:36:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"675af4e6-7c03\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 5820521\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G5VjUdwDpDZU254LfasTjqV5Fsf23PT87ktPwn3WOMCL2cLfujfD6y2M4UmVhCqowfXwmAecfPB%2F6x4u3A9aScVBdgq50CfA3y%2FQEF%2BR\"}]}\r\ncf-ray: 9abb92440e4256b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31747,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 400, 8-bit/color RGBA, non-interlaced","md5":"8b80e5aaebd2987d46dd0382da97fdc1","sha1":"bccdfd974f19600eac67f10c43a8d3cd92188aff","sha256":"41f23c36cc8dedef9d191f90f7f85c4aebba6012af7794fdfdf30331df5afe05","sha512":"dbc5a79c4e6b8cc0c1a2a20e857a399e84ff155ce6f68a6de65af23c20d57d7075bf93ba40748fa39942ce84001da19cf5dbd22ab2ab5b4bc3df63d220741e88","ssdeep":"768:oUUUUU2mxm90tQeKC4/cDQ+dexqKogEmXoYIQSR/Fiwecp8wwwwwwwwU:oUUUUU2J+s/cDx73jlp/E7+h","tlshash":"b2e2ae13c4d932371c5a9ded9b6b2b847aa225e320401f7bcf1e1078248b4b5fd27d9a","first_seen":"2025-07-04T18:28:09.276271Z","last_seen":"2026-06-11T02:25:26.91184Z","times_seen":3225,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-content/themes/random-news/assets/webfonts/fa-solid-900.woff2","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:47.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"godandcountry.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 18:04:18 GMT","end":"Sun, 15 Feb 2026 19:01:38 GMT"},"fingerprint":{"sha1":"39:34:A2:44:5E:09:D7:5B:B3:10:95:A0:BD:C7:72:E7:9E:2B:77:F1","sha256":"A3:D6:A1:84:56:C5:93:B1:A3:AF:BE:AA:EF:4A:02:4C:B6:E0:5C:15:1A:F2:F9:49:75:F2:73:AD:01:83:2E:86"}}},"request":{"raw":"GET /wp-content/themes/random-news/assets/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: www.godandcountry.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/wp-content/themes/random-news/assets/css/fontawesome.min.css?ver=1.8.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 09:03:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 78268\r\nlast-modified: Thu, 19 Sep 2024 22:56:49 GMT\r\npriority: u=4,i=?0\r\netag: \"66ecac31-131bc\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zl%2FN%2Ban15njm%2BXwnPqCXV7W14dEraRHQV3uCYMBJX%2BOpGLkmTXV4TnB%2F1YIyyEw7S%2FoXRP7w4Bya8LeXzFrj0%2BcbCkE9NNGUOF0MknVnzSI2ExAG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9abb92320c3a712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78268,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78268, version 331.-31196","md5":"d824df7eb2e268626a2dd9a6a741ac4e","sha1":"0ccb2c814a7e4ca12c4778821633809cb0361eaa","sha256":"9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537","sha512":"a84e13f216ea95146af285af98aef0b464cd962440e161a1c602ca2178a179e04ae4ed2a2f98d5b2eb165480ec6920e0e88de77d5f1eb7f11ed772b092daf865","ssdeep":"1536:AOhrLFyv3lzKb1hkG8l0o4HXWj2uwgcdSJSls7ZahNpUFl8a/KdDe8Y7fN5O:AOhfMv3ILc0Dm3wA4LpKKdO7a","tlshash":"c97312aba6cd77ac88dd14565f0043533afdfb35ab27864349eca2e01a300677b5712b","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-06-12T01:31:38.579211Z","times_seen":50990,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-creative1.com%2Fsb%2Finterstitial%2Futility%2Frobot%2F3%2Findex.html\u0026l=1524\u0026fd=530","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:50.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:33:26 GMT","end":"Sat, 24 Jan 2026 22:33:25 GMT"},"fingerprint":{"sha1":"74:B9:DE:52:5E:A4:22:C1:3F:4E:90:E5:53:C1:13:27:E5:47:BB:D2","sha256":"0D:C6:A2:6A:15:63:9B:67:CF:55:A8:E1:E3:EC:AF:D3:57:2E:38:F3:44:79:B9:FC:61:8A:CD:64:82:05:64:6F"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-creative1.com%2Fsb%2Finterstitial%2Futility%2Frobot%2F3%2Findex.html\u0026l=1524\u0026fd=530 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 10 Dec 2025 09:03:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":711,"timings":{"blocked":306,"dns":27,"connect":92,"send":0,"wait":96,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Finterstitial%2Futility%2Frobot%2F3%2Fjs%2Fscript.js\u0026l=8051\u0026fd=492","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:51.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:33:26 GMT","end":"Sat, 24 Jan 2026 22:33:25 GMT"},"fingerprint":{"sha1":"74:B9:DE:52:5E:A4:22:C1:3F:4E:90:E5:53:C1:13:27:E5:47:BB:D2","sha256":"0D:C6:A2:6A:15:63:9B:67:CF:55:A8:E1:E3:EC:AF:D3:57:2E:38:F3:44:79:B9:FC:61:8A:CD:64:82:05:64:6F"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Finterstitial%2Futility%2Frobot%2F3%2Fjs%2Fscript.js\u0026l=8051\u0026fd=492 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 10 Dec 2025 09:03:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turtlecreeklane.com/wp-content/uploads/2018/11/FullSizeRender-2.jpg","fqdn":"turtlecreeklane.com","domain":"turtlecreeklane.com","tld":"com"},"ip":{"addr":"104.196.31.58","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turtlecreeklane.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 16:24:28 GMT","end":"Wed, 11 Feb 2026 16:24:27 GMT"},"fingerprint":{"sha1":"36:E5:5D:15:D2:62:41:F9:87:40:C3:4C:43:58:3C:6E:14:25:DB:DE","sha256":"82:F0:50:B7:96:9C:AA:21:DE:7B:EC:3C:26:5A:D2:24:0B:67:23:C4:DC:F6:3E:40:DA:15:C5:F3:05:E3:9F:90"}}},"request":{"raw":"GET /wp-content/uploads/2018/11/FullSizeRender-2.jpg HTTP/1.1\r\nHost: turtlecreeklane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 10 Dec 2025 09:03:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 555386\r\nlast-modified: Mon, 26 Nov 2018 18:03:10 GMT\r\netag: \"5bfc355e-8797a\"\r\ncache-control: public, max-age=31536000\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":555386,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=11, manufacturer=Apple, model=iPhone XS Max, xresolution=166, yresolution=174, resolutionunit=2, software=TouchRetouch, datetime=2018:11:23 08:38:19], baseline, precision 8, 1472x2048, components 3","md5":"9c9685d7f59c3eda1ec2e948635978ba","sha1":"ac4bb0963973050152b1cc70fd789063a35cd003","sha256":"cc18195b6016587fe3c94a54436ece212d431754cd2b398a9907c429c1a6fdeb","sha512":"42bca77a1f4817a9f72c2c2b04971863cf9b76a815b17bff5550f6639d65c5ab902f2025392a8862db1cc9d81cbb80c06dba6800a4fb64af959e7d8c5d1c8134","ssdeep":"12288:nw4IW+p8NDi0N+3O9LinHH4etwtmV8Frdwk3Btw8W22s4j3tqJS:wTG7N+3O9Q4etwt/Z7BtZW2Zc","tlshash":"a7c423ddce65de8ad9c704f91ec24215e3c7a1c6b429c68b337f91aa97282c4f6c214d","first_seen":"2025-12-10T09:04:28.050929Z","last_seen":"2025-12-10T09:04:28.050929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1134,"timings":{"blocked":-1,"dns":87,"connect":132,"send":0,"wait":254,"receive":516,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/utility/robot/3/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:50.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/interstitial/utility/robot/3/js/jquery.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 09:03:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 10:55:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NEANTaymQP%2BYhCyh0377Yd%2B0mRYiJK1%2FRarBha27c8JCAgxd0TcJK7dRoNEYLMesPlVgW84rKl%2F5PAxREunGB4tA7LhqOvFI22lSgh3U\"}]}\r\nage: 5799981\r\ncf-cache-status: HIT\r\netag: W/\"68b9703b-149a0\"\r\ncontent-encoding: br\r\ncf-ray: 9abb92440e4756b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84384,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-06-11T22:31:53.886888Z","times_seen":12101,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-content/themes/random-news/assets/css/fontawesome.min.css?ver=1.8.0","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"godandcountry.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 18:04:18 GMT","end":"Sun, 15 Feb 2026 19:01:38 GMT"},"fingerprint":{"sha1":"39:34:A2:44:5E:09:D7:5B:B3:10:95:A0:BD:C7:72:E7:9E:2B:77:F1","sha256":"A3:D6:A1:84:56:C5:93:B1:A3:AF:BE:AA:EF:4A:02:4C:B6:E0:5C:15:1A:F2:F9:49:75:F2:73:AD:01:83:2E:86"}}},"request":{"raw":"GET /wp-content/themes/random-news/assets/css/fontawesome.min.css?ver=1.8.0 HTTP/1.1\r\nHost: www.godandcountry.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 09:03:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Sep 2024 22:56:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"66ecac38-ea20\"\r\nexpires: Wed, 10 Dec 2025 21:03:46 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FvX%2BkVlfgGVgXEMpHZs7LbtqVb9IGTLZK6oj9khy5Jk4xJ6y8p90nwJ81H8rcEADa6jc4RR7D8TyE9pZUxQVZjGtQWm24Ii4r6ZHT6uw0wCsNgoS\"}]}\r\ncf-ray: 9abb922d6c18712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59936,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59746), with CRLF line terminators","md5":"0257fbc2d3a03f529feac10991c8aa0f","sha1":"f160848e2c502ac37aa6313c36f3ba7a101b1d0c","sha256":"70eb4d2ecc2a64ca5eb773c9be46b1f4df2b1ba688b1386d18c3a554dfff1a65","sha512":"177c684d63b52ac8b2fc754343b5b0c4ec379ec7dfcd1fb2d0a6e929b1c575dca4b225efceafc656290d6615c54b88b7f0ba4d7540c6dccc6d101637fe35b484","ssdeep":"768:PYh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzo:PY0PxXE4YXJgndFTfy9lQE","tlshash":"8e430bb8e54d01cab731c44bbf81b2bca1b6f73de5814d95f00e591c2ad26a811c5fba","first_seen":"2025-04-03T20:29:45.353429Z","last_seen":"2025-12-10T09:04:28.052352Z","times_seen":3,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adslzone.net/app/uploads-adslzone.net/2018/02/movistar.jpg","fqdn":"www.adslzone.net","domain":"adslzone.net","tld":"net"},"ip":{"addr":"79.127.237.161","port":443,"asn":60068,"as":"Datacamp Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adslzone.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 08:06:06 GMT","end":"Sat, 10 Jan 2026 08:06:05 GMT"},"fingerprint":{"sha1":"15:8A:D6:8F:17:3C:EB:6D:75:85:91:3F:27:E1:B9:23:B6:31:0B:9A","sha256":"6A:4F:BF:6A:AF:3F:7A:EB:34:12:20:C8:52:71:33:E6:EF:C8:D6:9F:43:7C:6D:D0:41:C3:38:87:BF:DE:8B:0A"}}},"request":{"raw":"GET /app/uploads-adslzone.net/2018/02/movistar.jpg HTTP/1.1\r\nHost: www.adslzone.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 17:59:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38580\r\nimg-service: gaz\r\ncache-control: max-age=2592000s, s-max-age=2592000s, max-age=2592000, s-maxage=2592000\r\nazage: 658833\r\nx-cache: HIT\r\nage: 203\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ntp-cache: hit\r\nvary: ,acceptsWebP\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38580,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9d41680d4ce92216d6fde4c2309fef1d","sha1":"994bd5aab18475a8f4197057bb1d178b06626333","sha256":"afb7fb684f5d436d46dbf52d842fd45f4fcce5cd41183b1235e85bca88364ce0","sha512":"3ec4f167589b2383669d5e6f32fcb64711c2f9f35030c1f3ad036d507556b4b11299900db4a271aaea54dc2c2669a2020f12810455cd44811c62efd9c3b406fd","ssdeep":"768:iKMGBRdy2N3HzBC21anviQvNZiEIDVzoTQFUuvlswiZmh3WMIZ/+s9uHVY:wGpHN39C21anvisZZICUtkZxMIZ5uHm","tlshash":"c703f197deb85bebc01874fba412dbe4142b244d1e69c33332c54c60459e966dbbc8b3","first_seen":"2025-12-10T09:04:28.053319Z","last_seen":"2025-12-10T09:04:28.053319Z","times_seen":1,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":91,"connect":30,"send":0,"wait":84,"receive":17,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.godandcountry.blog/wp-content/themes/random-news/assets/js/slick.min.js?ver=1.8.0","fqdn":"www.godandcountry.blog","domain":"godandcountry.blog","tld":"blog"},"ip":{"addr":"104.21.62.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:46.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"godandcountry.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 18:04:18 GMT","end":"Sun, 15 Feb 2026 19:01:38 GMT"},"fingerprint":{"sha1":"39:34:A2:44:5E:09:D7:5B:B3:10:95:A0:BD:C7:72:E7:9E:2B:77:F1","sha256":"A3:D6:A1:84:56:C5:93:B1:A3:AF:BE:AA:EF:4A:02:4C:B6:E0:5C:15:1A:F2:F9:49:75:F2:73:AD:01:83:2E:86"}}},"request":{"raw":"GET /wp-content/themes/random-news/assets/js/slick.min.js?ver=1.8.0 HTTP/1.1\r\nHost: www.godandcountry.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 09:03:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Sep 2024 22:56:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"66ecac36-ab79\"\r\nexpires: Wed, 10 Dec 2025 21:03:46 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FoYkrMzkn%2FKsQMmeKpf2d5rloZ1ci2hUpRDAVn5LdUBaZQfozjgI3tz%2FcIFPHCJ4oy1rOKD1rA3X8VOwemNJdlSs4ywpdSCoNV4AMqMdCn3MGtTq\"}]}\r\ncf-ray: 9abb922dcc20712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43897,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43897), with no line terminators","md5":"66743b6d71a22c592ecd79da70cd26eb","sha1":"04c6168035124c2421a53c52b789437645bae9db","sha256":"a1a49c85ae2db19ca7ad2bd54a706a632f8c9534c609acee3388f116df3bc53d","sha512":"7131214de0bb8023a0595294d4ae518a26cebcd884cd6c46c4c7302b9abcd62cfc8e50bd1d135e432f68e1b04558f2c916705fbe2752e103539429c44b1b3c35","ssdeep":"768:N7VPetHFVsb8S8AGltPBH76Kr4hB9Aojq4nQB2AF4uoa+hV6d5dP0I17G:PgV7TPBHHa","tlshash":"f513620ae210176299d711e12117c50db3fbf73db522c0ac78e98bdb609d9089ad77fa","first_seen":"2023-03-09T02:33:25Z","last_seen":"2026-06-10T11:24:24.50227Z","times_seen":209,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:47.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 01:12:52 GMT","end":"Wed, 28 Jan 2026 01:12:51 GMT"},"fingerprint":{"sha1":"67:43:25:0A:D1:7D:95:9F:2D:A3:3F:97:74:7C:0A:AE:D2:D3:98:61","sha256":"09:09:97:4E:79:6D:B5:F4:D7:B7:F6:8F:BE:97:4E:B6:04:9C:25:29:FE:4A:0E:A2:BE:82:F0:6E:CF:8C:74:F0"}}},"request":{"raw":"GET /1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 10 Dec 2025 09:03:47 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3403\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 68afbefd3717ddf31d2da6f3be3e51a1\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6454,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6454), with no line terminators","md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"resource_available":true,"data":null}},"time_used":710,"timings":{"blocked":314,"dns":2,"connect":96,"send":0,"wait":98,"receive":0,"ssl":197},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"negocioefectivo.com/wp-content/uploads/2021/05/movi_doblegb_18.5.21-05-1024x1024.jpg","fqdn":"negocioefectivo.com","domain":"negocioefectivo.com","tld":"com"},"ip":{"addr":"213.158.84.71","port":443,"asn":0,"as":"","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:47.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"negocioefectivo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 06:02:20 GMT","end":"Tue, 10 Mar 2026 06:02:19 GMT"},"fingerprint":{"sha1":"46:9D:3A:AF:0A:B5:97:E4:11:26:19:F7:4C:1C:A3:61:3D:B7:ED:44","sha256":"AE:E9:03:58:19:67:76:41:09:7B:5B:D9:4A:F2:5B:F8:97:68:C8:EC:C5:EF:C5:96:40:D2:DA:84:78:61:C7:9C"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/movi_doblegb_18.5.21-05-1024x1024.jpg HTTP/1.1\r\nHost: negocioefectivo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 10 Dec 2025 09:03:47 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts2.mm.bing.net/th?q=cambio-decodificador-movistar-tv-comunidad-movistar.webp","fqdn":"ts2.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.godandcountry.blog/es/como-cambiar-paquete-movistar-tv.html","date":"2025-12-10T09:03:47.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?q=cambio-decodificador-movistar-tv-comunidad-movistar.webp HTTP/1.1\r\nHost: ts2.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.godandcountry.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=5184000\r\ncontent-length: 21834\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 4CFA4EF5A39149C0B1C3214433C1770B Ref B: OSL231050214054 Ref C: 2025-12-10T09:03:47Z\r\ndate: Wed, 10 Dec 2025 09:03:46 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":21834,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"ad6d8a1bf1e2f187f6c919614f962ae6","sha1":"5ebeab1f4678e653e0a32fffc3562f29699952ca","sha256":"2de99f3531a32d316aec16e49587bbbef1f0fc2e967defbc3c818c6272c802dc","sha512":"206ed5e0d051e8b23cfae08e77449ae12bc2158cf30adb89eef625cb35273ef55344a8a68da7bc9d624a61a787fce9384554c837823ebb297079b37bc00722dd","ssdeep":"384:O7TvFvYuuZmTNc9BvHHcxMyYA8QEFQLTCBp4zc2JmvjkjJL9et9vSU6lf1U:aTNuZmxcrncxmAkQfCfF2JmvjkjiKU6g","tlshash":"50a2d043050db7a5e5e473b8b86e3ada370c18bccb6156661115ccfbba006683e5782f","first_seen":"2025-12-10T09:04:28.055934Z","last_seen":"2025-12-10T09:04:28.055934Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}