{"report_id":"bde2f95b-6edb-4ec6-bc4f-e4c3d1135a68","version":6,"status":"done","tags":[],"date":"2025-10-22T08:40:15Z","url":{"schema":"http","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"172.67.153.83","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"title":"x.ag2m4.cfd/embed-0z6utgknx8ew.html"},"submit":{"url":{"schema":"http","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"172.67.153.83","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-26T08:40:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"x.ag2m4.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"lups1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"waust.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"lups1.site","ip":{"addr":"104.21.79.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-03","domain_rank":0,"first_seen":"2025-10-12T23:21:57.667181Z","last_seen":"2025-10-12T23:21:57.667182Z","alert_count":2,"request_count":2,"received_data":2185546,"sent_data":859,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}]},{"fqdn":"waust.at","ip":{"addr":"104.26.5.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":36042,"first_seen":"2016-01-28T18:24:33Z","last_seen":"2025-10-20T07:04:44.714965Z","alert_count":1,"request_count":1,"received_data":8416,"sent_data":397,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-10-19T22:15:22.988011Z","alert_count":0,"request_count":1,"received_data":5078,"sent_data":450,"comment":"","tags":null,"fingerprints":null},{"fqdn":"t.dtscout.com","ip":{"addr":"172.67.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-01","domain_rank":54823,"first_seen":"2017-01-30T04:52:42Z","last_seen":"2025-10-20T01:33:37.921747Z","alert_count":0,"request_count":2,"received_data":3456,"sent_data":977,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img.cdn77s.com","ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-22","domain_rank":0,"first_seen":"2024-12-31T08:25:12.005606Z","last_seen":"2025-10-12T23:21:58.244979Z","alert_count":0,"request_count":1,"received_data":28416,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"imasdk.googleapis.com","ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3922,"first_seen":"2014-02-25T09:02:53Z","last_seen":"2025-10-20T02:13:27.906093Z","alert_count":0,"request_count":1,"received_data":312,"sent_data":412,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kde2.uk-traffic-076.com","ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"domain_registered":"2024-12-10","domain_rank":0,"first_seen":"2025-10-22T08:40:24.538779Z","last_seen":"2025-10-22T08:40:24.538779Z","alert_count":0,"request_count":55,"received_data":79420567,"sent_data":33149,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"x.ag2m4.cfd","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-05","domain_rank":0,"first_seen":"2025-10-13T17:27:21.900775Z","last_seen":"2025-10-21T06:53:18.229363Z","alert_count":8,"request_count":8,"received_data":1086022,"sent_data":3717,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8fa14cdd754f91cc6554c9e71929cce7","sha1":"4a0a19218e082a343a1b17e5333409af9d98f0f5","sha256":"252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111","sha512":"711c22448e721e5491d8245b49425aa861f1fc4a15287f0735e203799b65cffec50b5abd0fddd91cd643aeb3b530d48f05e258e7e230a94ed5025c1387bb4e1b","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000003000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-03T15:35:12.628682Z","times_seen":57455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/pv/?_a=v\u0026_h=x.ag2m4.cfd\u0026_ss=59snl4wur5\u0026_pv=1\u0026_ls=0\u0026_u1=1\u0026_u3=1\u0026_cc=no\u0026_pl=d\u0026_cbid=4a60\u0026_cb=_dtspv.c","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"172.67.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81c6f487bc5a3593762b5dca885d5383","sha1":"1b2b680f981cbcc3615b987d149def4914a00fa7","sha256":"9ac4068f903004725c3cbfd071c7372431e36b0f42a593af282203125144f04c","sha512":"48920735ade63e21092015bc0cf908237ff6760bb82155466f9b5e9726e043bc1d2d1b38663f708de92fcb174a319c82f05663bf7d72a0ef22bc8fc98294c9be","ssdeep":"","tlshash":"cd90021868e180201ad9d740145716444171679015c45595d63155641a49b809b5b9bc","size":52,"data":"","first_seen":"2025-10-22T08:40:35.128725Z","last_seen":"2025-10-22T08:40:35.128725Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"08a83c328d4d6d738542de4bfa28192c","sha1":"0ae0d57adb1fd1ebd67fb829b8acda8e15e3a2f5","sha256":"20b03db3e8c088dfbf6b9d8ccb5aa1f3d40c8cb11c9b763fdb318690ba6297b0","sha512":"3487a66417298564c4f98ecaec5698c479ff5acc3b4cf084090b8cd23e125d2e1ec77a5ec39890a4bd2d574994e1fd49110fb88b51bd9daaf9300d74e6487e8c","ssdeep":"","tlshash":"655124f37ad924898acd96d6db0f983d96b23e1609af94358e0f123706f570848cee14","size":2458,"data":"","first_seen":"2025-10-12T23:22:52.28932Z","last_seen":"2025-10-25T19:50:15.105809Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b9acfdd5ccc1af988c7519621dae4bd","sha1":"9ee03b0fab61d1b32eceb56f93708ea0e1fc8900","sha256":"8d9c76d054eef329d1d7f4d287668ee3efeb5cbad32c609f4f3dbb35cc659812","sha512":"2efe93e59cf4a6042d89344c27b5ba148d68e0028efdfd8300d325369e8455b6bb2e351570c405f476a885c6d349a7c3ad1dc6ef0a75046c4e1a5603b06c1f17","ssdeep":"","tlshash":"c8a022a8230b003f000e030020380fc823b0000000b0030033082e30202e00c2883200","size":65,"data":"","first_seen":"2025-06-22T10:13:07.584058Z","last_seen":"2025-12-21T22:34:26.095161Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/i/?l=https%3A%2F%2Fx.ag2m4.cfd%2Fembed-0z6utgknx8ew.html\u0026j=","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"172.67.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51bd741af3fcc4984d1a753eebfa1141","sha1":"534664acf69cbbb5c9b97c96b63dd37bdc580da2","sha256":"3e9c8e5dcf3cbff9e1b7211551a31fe388f1b8e607fd78a0a34855be65da721c","sha512":"14958b02aed15cfa48facbdd8e8752ac7d1220631fb6af7658bcd5b804c0be52f9555a1d0ebe0bd68ee3a5f60164d97cbf020884d8757afaa3297d0768ab8886","ssdeep":"","tlshash":"0441a70bb5e9347813a2007a55ff235fb2324928ac1788c08196d804bc785faa1b6ea6","size":2079,"data":"","first_seen":"2023-03-07T01:03:00Z","last_seen":"2025-11-28T22:34:42.368027Z","times_seen":7807,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1b44ed9aa0ecbeb0021b77d0e040f820","sha1":"2cfdaafe5f5a1933937cd5b7ad31ed8c8f2341e8","sha256":"48c4683ee672abf500e996aaa8f4f6c5de3a18c0cf9d7085f0f5b37528ce31f5","sha512":"138132a50aa6b2aec05f523459d8f496ef3c1bd3496c6f9329a3b53785b5eef0651fdb33b83209aa4511dbac449745b2ce74901edf5ef21fa142f8f871ccf402","ssdeep":"","tlshash":"69700032080e0cc0880208e02a00a0023320088088800200f082b30c808c00800bc022","size":23,"data":"","first_seen":"2024-02-11T23:55:57Z","last_seen":"2026-03-30T19:28:14.164284Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b427175fa1078775eb792756e7b6d1e7","sha1":"4c55c0233d3d9002b3449c025f97821f8bb8900d","sha256":"ee147e859ad0f09aa50367974e38ab53e7c7054c4a51d400a7f45b0eb251454f","sha512":"af8d384188363378bc99c2e51523e74e1d18ba77d51bff7647a377a117499421f9e94477e09907925e46dad0a908b799a616d0b4855ffff064ba6350815063d3","ssdeep":"96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2","tlshash":"d191c68d7a70f4328aa138b6283f964ae37b50b5f4d4f0d5508ccce45a78e4a4726f6d","size":4272,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-04-03T16:48:30.843704Z","times_seen":8664,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4e1723f13b32d196981ad315a49c0616","sha1":"9b037162278054e93245d315e4e2e71ac8b3390f","sha256":"d68b8898a1d8810921ad7e080e5aa88b7bdc9e797896df41dd56cc069abb0ac9","sha512":"9cb4217d17836154bea93e90c9b5a22e285486c4d024af8939c91f8c7ce6ce92b23e327a8ce9ae3ebc970c3d7ecef4d199af360e05d15d49896c210634f299ec","ssdeep":"","tlshash":"7ed0222b2b6c891e8d1a12c32a2a1e1833d0c6e6f5a84808ccc9fcec01b8207d748489","size":208,"data":"","first_seen":"2025-08-21T23:35:02.089672Z","last_seen":"2025-11-18T05:21:35.318053Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"433c8c9a864db4cf91f873b5ab5b92fb","sha1":"62966cd7febd07d091e570233f874e46b5b825ee","sha256":"968b251372f8f4d6864a9c8deaad2b135b877ffe7d62e88ae1f4ea9b96539a7e","sha512":"5157a2d97717ae80bb8285b49162cb4a8ba1d5d9cfaca22d2614a199dc221575a9a4c1896322b1b4c4949ac79d3d146ce4bf838c0e5247c06c7e5ce760a5ba9e","ssdeep":"","tlshash":"3901d53d01e25825031f60e8575f6134a1759517705ace173e0ece406f8132ac3e7edd","size":832,"data":"","first_seen":"2025-09-20T23:54:27.270592Z","last_seen":"2025-12-10T22:32:29.903978Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/js/jquery.min.js","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-03T16:29:13.319659Z","times_seen":444520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d7f839ab7bb4c2da967e12626015cee8","sha1":"9c21a39fe452a3fb10266824eff2918c9671ff07","sha256":"aa0c292b18bdff8b7e90764b19acd5ade0348a738129a00fa0352412f706540e","sha512":"857187efb8f7c3777a2c23940b5e219ee8dc2bf00c6a9bf7916b658b8196b5549239cc1b9788f9d9f2faf6e02ac9894c8b0deca8c9bc4e6286eb092a382e87a7","ssdeep":"","tlshash":"d930000000000000000000000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:17:20Z","last_seen":"2026-04-03T15:47:32.403821Z","times_seen":1716,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8fa14cdd754f91cc6554c9e71929cce7","sha1":"4a0a19218e082a343a1b17e5333409af9d98f0f5","sha256":"252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111","sha512":"711c22448e721e5491d8245b49425aa861f1fc4a15287f0735e203799b65cffec50b5abd0fddd91cd643aeb3b530d48f05e258e7e230a94ed5025c1387bb4e1b","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000003000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-03T15:35:12.628682Z","times_seen":57455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8fa14cdd754f91cc6554c9e71929cce7","sha1":"4a0a19218e082a343a1b17e5333409af9d98f0f5","sha256":"252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111","sha512":"711c22448e721e5491d8245b49425aa861f1fc4a15287f0735e203799b65cffec50b5abd0fddd91cd643aeb3b530d48f05e258e7e230a94ed5025c1387bb4e1b","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000003000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-03T15:35:12.628682Z","times_seen":57455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"725d693b232813b83c2d5e514557b958","sha1":"5a9fa63213ce2614063b272a73bb16b8aee800cd","sha256":"1652eb6c018f3a41c2e40b7596891d776c77c24570b286210764c6cd62096f78","sha512":"29c5e2716c41b0f98c7f489ea4e6530123f972f739f62fd2db975af28f0ab336393bd0273a16a81927d682daeecc8d20ea356b1b77c528be978564b780954404","ssdeep":"","tlshash":"249002b410540904181112d75520006560748449fcd59924f447b749058d0580b53940","size":47,"data":"","first_seen":"2025-10-22T08:40:35.19227Z","last_seen":"2025-10-22T08:40:35.19227Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f164b1f26b631b72cb462f8d5c36ddeb","sha1":"2c01bd366d2aa84bea901568133650d436893460","sha256":"e535d0e07d55d3f8b32fb0475cd7f2778d5da7a8a0367a0b887ae6b95beef602","sha512":"072c8162e87c47bd4daee413b3e7dea24c29da2bf493de56613a06f9845519b9e54a9a94941e83ec340092ad8d2a877bd12446b5210425a22ac4eee084dc5dd0","ssdeep":"","tlshash":"7190047050540d0d1c3010575d0400577150c04dfcff4500f503ffdd40dc0054d31440","size":41,"data":"","first_seen":"2025-07-27T14:08:55.545674Z","last_seen":"2025-11-18T05:21:35.368588Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"15bf3f10366db48f1ef4f085428b908a","sha1":"1c9c68916dbd37c065076a6cb55f2b0c0889a10a","sha256":"66ee2b5817289c79a8012cfc552aaadbd84cb5d23017246a10de5b4fe4035bdd","sha512":"0ea7969892c16f653d2a017d32dce50dbabccc14f3faa43870fbd1b1b0a68516e8937aae30d6722aef5eda320b9561dc83fc867b06ebc4301d18788c24877838","ssdeep":"","tlshash":"96c02b1012c750550b1c1ce30d4f08fe64b0fa01ae3221e8c2094ca06a0cf9bc039d30","size":138,"data":"","first_seen":"2023-03-07T01:17:20Z","last_seen":"2026-04-03T15:47:32.405038Z","times_seen":1704,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6f67948f708dd53c2d320da103868405","sha1":"adcfef16f46244c055949de9b6c3008ab82fc188","sha256":"4937f2fdc1304a33f286c67e5a071dc357dfaaaabb69dd1042667293be2711bc","sha512":"b2bab5d8cd0164585f2603b5c651459297b95deb7a790f733d484fc368aff1fc710a30ff38b222ee3a5227780c78d49746ee5be337c8ff44ba5d5c6d4a9ad13f","ssdeep":"","tlshash":"c72000000000000000000000c003000000000000000000000000000000000000030000","size":3,"data":"","first_seen":"2023-03-07T01:17:20Z","last_seen":"2026-04-03T07:45:43.793863Z","times_seen":1211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d00a243ea9b8f9ac010c591e5a65f055","sha1":"e9ca8d9a7aa820c00d3ab05c3cdc1fd81c92726f","sha256":"f705940e69387bd285eacb7fac7d6a6969b75e6e01d037bbca0d5d6fb8ad5fc2","sha512":"617a26d9f82fc8b16444dda61ab6d80f32ab6f6ba87f82aa76ab0806817b02de6d2a59f5b246d948d42be32c06418f0137f52b8a8f33361e0923cf3a935e7d44","ssdeep":"","tlshash":"fe3000000000000000000000000000000000000000030000000000000c000000000030","size":4,"data":"","first_seen":"2023-03-07T01:17:20Z","last_seen":"2026-04-03T07:45:43.801446Z","times_seen":1208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fb64b812367812940190dee8fda5af15","sha1":"573f1a8dc15c61653834f7d51ace8d1e801dec36","sha256":"f770ac95d53de5e43a57677f4decfc98d20c611cdd1705fbe56db71ab9836580","sha512":"af55232ec1a879fbdc3cb353c9cc43cd33efd9b8e795e6f81979345be36f802f3c5f39d766dad1f3d0b66ce29d3454f988d91ddf1ffecfec127a2c447d143a91","ssdeep":"","tlshash":"fe40000030000000000000030000000000000000000000c00000000000000000000000","size":6,"data":"","first_seen":"2023-03-07T01:17:20Z","last_seen":"2026-04-03T07:45:43.806905Z","times_seen":1197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"00f96341ff7080c9b6e137426b548888","sha1":"c69969157e7008c084414681b819bc866fc85f48","sha256":"08b17ddf51195fb0672c88c125f6f5cc65cb17b5b7694eeec513fd3d10a3f74c","sha512":"8e83f9ffd763222bf52cc5d59b38f95e29defcf86a01e909fa248a41c46f4ce5cc16c0047f23c6511951b9dd56111369381eabdf217b4a4548f5797eccbf4729","ssdeep":"","tlshash":"e19002b410540584181112975520005560b08449ecd59914f407b74905890180a53940","size":46,"data":"","first_seen":"2025-10-22T08:40:35.228783Z","last_seen":"2025-10-22T08:40:35.228783Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"725d693b232813b83c2d5e514557b958","sha1":"5a9fa63213ce2614063b272a73bb16b8aee800cd","sha256":"1652eb6c018f3a41c2e40b7596891d776c77c24570b286210764c6cd62096f78","sha512":"29c5e2716c41b0f98c7f489ea4e6530123f972f739f62fd2db975af28f0ab336393bd0273a16a81927d682daeecc8d20ea356b1b77c528be978564b780954404","ssdeep":"","tlshash":"249002b410540904181112d75520006560748449fcd59924f447b749058d0580b53940","size":47,"data":"","first_seen":"2025-10-22T08:40:35.19227Z","last_seen":"2025-10-22T08:40:35.19227Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f164b1f26b631b72cb462f8d5c36ddeb","sha1":"2c01bd366d2aa84bea901568133650d436893460","sha256":"e535d0e07d55d3f8b32fb0475cd7f2778d5da7a8a0367a0b887ae6b95beef602","sha512":"072c8162e87c47bd4daee413b3e7dea24c29da2bf493de56613a06f9845519b9e54a9a94941e83ec340092ad8d2a877bd12446b5210425a22ac4eee084dc5dd0","ssdeep":"","tlshash":"7190047050540d0d1c3010575d0400577150c04dfcff4500f503ffdd40dc0054d31440","size":41,"data":"","first_seen":"2025-07-27T14:08:55.545674Z","last_seen":"2025-11-18T05:21:35.368588Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/js/dnsads.js","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99eccae6afa72c589ae54b5c3890282a","sha1":"0f102f8f5b556635de65d16cf70fa8269c6761b4","sha256":"b74a58316385de04b054737776e71c160cd60d2d01b5440b32c21651fb0ab8d3","sha512":"01bc413c1695c125b8ab111c60974da99989b618fb674631d998db519996966c569503efb97a3c760b50069e87b6b42891985b00c64810a43935ada075a19d24","ssdeep":"","tlshash":"eb8000ee08e2bcbec02c0000000e02a802b00c00a023ac20a00e8e0233e2e20c228c3a","size":38,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-01T22:14:46.458669Z","times_seen":2580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"725d693b232813b83c2d5e514557b958","sha1":"5a9fa63213ce2614063b272a73bb16b8aee800cd","sha256":"1652eb6c018f3a41c2e40b7596891d776c77c24570b286210764c6cd62096f78","sha512":"29c5e2716c41b0f98c7f489ea4e6530123f972f739f62fd2db975af28f0ab336393bd0273a16a81927d682daeecc8d20ea356b1b77c528be978564b780954404","ssdeep":"","tlshash":"249002b410540904181112d75520006560748449fcd59924f447b749058d0580b53940","size":47,"data":"","first_seen":"2025-10-22T08:40:35.19227Z","last_seen":"2025-10-22T08:40:35.19227Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4e1723f13b32d196981ad315a49c0616","sha1":"9b037162278054e93245d315e4e2e71ac8b3390f","sha256":"d68b8898a1d8810921ad7e080e5aa88b7bdc9e797896df41dd56cc069abb0ac9","sha512":"9cb4217d17836154bea93e90c9b5a22e285486c4d024af8939c91f8c7ce6ce92b23e327a8ce9ae3ebc970c3d7ecef4d199af360e05d15d49896c210634f299ec","ssdeep":"","tlshash":"7ed0222b2b6c891e8d1a12c32a2a1e1833d0c6e6f5a84808ccc9fcec01b8207d748489","size":208,"data":"","first_seen":"2025-08-21T23:35:02.089672Z","last_seen":"2025-11-18T05:21:35.318053Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cf4327be89825a150421dc4a7c6d6b19","sha1":"f9a0c3e876834519a5432bec6631683127423929","sha256":"f24e6781092897f142c0ee0f540ef0446fdc7115472f5d6bcd38bc0183873355","sha512":"1eb98761b2b89eb6cf5b6e3a90b471eb984325eebb0e36b858cb44df63290ca2940cf2ac8a25d9eff352b3d769f9623feef328f27252d2359337df7e46127d98","ssdeep":"","tlshash":"45d0a92baaaca95f8d051ac718960c1832e0d4e6b4ac4800ccc2eced00ba216db0248e","size":225,"data":"","first_seen":"2025-08-14T06:17:39.615938Z","last_seen":"2025-11-18T05:21:35.337109Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/js/xupload.js","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7cb7dae1da48c74b41563b936111f97","sha1":"bda176bc9fd4060d50006cd31d8c25453362db70","sha256":"590c624e3400ed1e344d5c44f184356937d2704917289340ec5b099d35d5b9e8","sha512":"06ccc732465996d4b4531bc0a1e40cacbecc0e936a84e15132fda6839549358b9681494529128d493a70cd7ac1a913edea05b1facb97d8810290e9d6f9df451e","ssdeep":"192:7IKE9YGs1aGjrl6IsZWnrbll621w+4UWdRebMQ4WdReDyYQaQv7OsaaFg+BnqGQZ:EGyctBlV9GRebVReDyYS7OsaaF10fq3u","tlshash":"fc22674abaa339912a7731390bbf52043b398407114aca54bd5cd6c4af8452897ffbfd","size":10790,"data":"","first_seen":"2023-08-16T14:17:26Z","last_seen":"2026-04-03T06:04:44.359802Z","times_seen":606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c6e780ed140f9bba95e4ba38fb9c4740","sha1":"81467f2fdc12c9c9f035ab9773b05e7f8c5b5e11","sha256":"64484bee759ffebab3fcd44da43a0c14ecfc9dc82b799fa2afc19d3b0b2605c3","sha512":"97f8f791c9be82d825140d45bcb23d25b9df0dd7ef3581aafd37cb3bb9fab222ec91635c152f75a4b7ba3e58abddf4cc228da6e716e063d37a33bd7c87db6abe","ssdeep":"","tlshash":"6ff0e11329ce90674d4e1cd34d4b489d17b2b922f56f51a6ce4f58bb191d78ac02b938","size":540,"data":"","first_seen":"2023-03-07T01:17:20Z","last_seen":"2026-04-03T15:47:32.404445Z","times_seen":1710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"725d693b232813b83c2d5e514557b958","sha1":"5a9fa63213ce2614063b272a73bb16b8aee800cd","sha256":"1652eb6c018f3a41c2e40b7596891d776c77c24570b286210764c6cd62096f78","sha512":"29c5e2716c41b0f98c7f489ea4e6530123f972f739f62fd2db975af28f0ab336393bd0273a16a81927d682daeecc8d20ea356b1b77c528be978564b780954404","ssdeep":"","tlshash":"249002b410540904181112d75520006560748449fcd59924f447b749058d0580b53940","size":47,"data":"","first_seen":"2025-10-22T08:40:35.19227Z","last_seen":"2025-10-22T08:40:35.19227Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0c8f89f775a03b4226081f0469259ced","sha1":"a11882bd38c214e33871e3f457d25349c362c253","sha256":"d551024d889e1626a67335441adcc98ea4126dcab46f68c2ee93345b2b1e2e92","sha512":"17eaa360c4c1a4fc26938de8491b111244ced36d950302ef6d8fc78330c2600bc5b8c629f404077ed451a424cc9ae27c59c8c17bf25594d36704ed9f83669307","ssdeep":"","tlshash":"0441005a155a0efe42d91a9dd708c7608714e3b0c068905e84eaadc3ee77b1135ebde0","size":2323,"data":"","first_seen":"2024-02-22T18:14:25Z","last_seen":"2026-04-02T15:59:06.058908Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9f64ca3bf6d8d34d2ee331698c7e6eec","sha1":"86ca41b6536dd24f31c79cbff4e8a9c12d1d06b8","sha256":"0d25cde547c9643a2bac679d57b2f792ac3f3762793ad0cee1dfcaba5fd2fe04","sha512":"36b2916716b6bbe500c6012233e42ebe8f70e1718427f41a6486b50c6f79e76d9968b2bec78a5ebb737c4bb25329e186102578091dfc8176f6a8023bf36bcad1","ssdeep":"","tlshash":"8b4000000000c0000000000000c000000000000000c00000000000000000000c000000","size":6,"data":"","first_seen":"2023-03-07T01:17:20Z","last_seen":"2026-04-03T07:45:43.80632Z","times_seen":1202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cf4327be89825a150421dc4a7c6d6b19","sha1":"f9a0c3e876834519a5432bec6631683127423929","sha256":"f24e6781092897f142c0ee0f540ef0446fdc7115472f5d6bcd38bc0183873355","sha512":"1eb98761b2b89eb6cf5b6e3a90b471eb984325eebb0e36b858cb44df63290ca2940cf2ac8a25d9eff352b3d769f9623feef328f27252d2359337df7e46127d98","ssdeep":"","tlshash":"45d0a92baaaca95f8d051ac718960c1832e0d4e6b4ac4800ccc2eced00ba216db0248e","size":225,"data":"","first_seen":"2025-08-14T06:17:39.615938Z","last_seen":"2025-11-18T05:21:35.337109Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f164b1f26b631b72cb462f8d5c36ddeb","sha1":"2c01bd366d2aa84bea901568133650d436893460","sha256":"e535d0e07d55d3f8b32fb0475cd7f2778d5da7a8a0367a0b887ae6b95beef602","sha512":"072c8162e87c47bd4daee413b3e7dea24c29da2bf493de56613a06f9845519b9e54a9a94941e83ec340092ad8d2a877bd12446b5210425a22ac4eee084dc5dd0","ssdeep":"","tlshash":"7190047050540d0d1c3010575d0400577150c04dfcff4500f503ffdd40dc0054d31440","size":41,"data":"","first_seen":"2025-07-27T14:08:55.545674Z","last_seen":"2025-11-18T05:21:35.368588Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/js/jquery.cookie.js","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae0c2c5d8f01f7d35bb698bb618a62f7","sha1":"63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20","sha256":"75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc","sha512":"eac94ca9d884692af8bdf12aa6e902a3be4eed0772ad8f2932ac1c3328b83a7351cdf743a409bbc0a3cd385956c08d3203d51c572bb1680489e37330fe27a2bb","ssdeep":"96:L4BZxb64Ng7V8cNwpGylRCsKZcj1JXulL6M/aGByLskPSP4lBCClf1wgCyC:LQnb6eg7DgCsk8fgZJkPSPa+gCyC","tlshash":"2e91fd293a0d231d149353f57aee10c8a930d632216ad46c744cb6b06f00c63ddfbbea","size":4331,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-02T14:58:36.908103Z","times_seen":4342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"292319b54763298d78749524658f165c","sha1":"d3bddead413ab56beffe0754685c8bf75f91f6d3","sha256":"c77f0814f3262d11ed966f46f67883abcb22009160131e1ac5c567d2c9d68eb2","sha512":"b20cf8a75f04d859ae53d0188d64b2fbc60ee95a8353fb058916070c90de78eac1c1c38dc0c2a1493cb90e5d3b1e35eb34d8092da35e1f619d91198cf2ca75bf","ssdeep":"96:D9Oa3zi+9vbDKMAt24aj50Fa2PvuDjbsiyvbxBuMRYWDxiF4UB5xLHXs:JNzi+1KFtWKk2X1iyzxFS8i/L3s","tlshash":"2ec1ecd1ed78a94777cc6def9e2f8c6e8e222520099fe0015a8d21071af66d499c5e33","size":5700,"data":"","first_seen":"2025-10-12T23:22:52.026328Z","last_seen":"2025-10-25T19:50:15.100162Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d7f839ab7bb4c2da967e12626015cee8","sha1":"9c21a39fe452a3fb10266824eff2918c9671ff07","sha256":"aa0c292b18bdff8b7e90764b19acd5ade0348a738129a00fa0352412f706540e","sha512":"857187efb8f7c3777a2c23940b5e219ee8dc2bf00c6a9bf7916b658b8196b5549239cc1b9788f9d9f2faf6e02ac9894c8b0deca8c9bc4e6286eb092a382e87a7","ssdeep":"","tlshash":"d930000000000000000000000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:17:20Z","last_seen":"2026-04-03T15:47:32.403821Z","times_seen":1716,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8fa14cdd754f91cc6554c9e71929cce7","sha1":"4a0a19218e082a343a1b17e5333409af9d98f0f5","sha256":"252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111","sha512":"711c22448e721e5491d8245b49425aa861f1fc4a15287f0735e203799b65cffec50b5abd0fddd91cd643aeb3b530d48f05e258e7e230a94ed5025c1387bb4e1b","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000003000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-03T15:35:12.628682Z","times_seen":57455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8fa14cdd754f91cc6554c9e71929cce7","sha1":"4a0a19218e082a343a1b17e5333409af9d98f0f5","sha256":"252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111","sha512":"711c22448e721e5491d8245b49425aa861f1fc4a15287f0735e203799b65cffec50b5abd0fddd91cd643aeb3b530d48f05e258e7e230a94ed5025c1387bb4e1b","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000003000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-03T15:35:12.628682Z","times_seen":57455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d9c10f7e4d6b2302d25b6e814d8b9278","sha1":"18c55db7d68156b2867beccc8601c340d472d171","sha256":"1043f8f17bc2eae2ff88d089a7adc284d8eae29a5a8430c6e29f8a1ab727e055","sha512":"c58cbf39a4b5927abf740d373c638cd0807a86e4e0fca2ee74687953bc72f1a92324e09878b6780b5eef5373977816f26df1ad9274d50407e60c7644b89f9eb0","ssdeep":"12288:fRmMwRmM8xQhYJ6P6y5qys3SF07wOBurbneeVSo+WqVTHPkO281Y0LqB:r6P6NyJ07w2urbVVN+WqVTHPkO281Y9","tlshash":"e4c43a5773a02637c1df64ba68af8618af3281510a034551e43dd8905eb0fd299bbfbf","size":554279,"data":"","first_seen":"2025-10-12T23:22:52.24679Z","last_seen":"2025-10-25T19:50:15.113483Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"725d693b232813b83c2d5e514557b958","sha1":"5a9fa63213ce2614063b272a73bb16b8aee800cd","sha256":"1652eb6c018f3a41c2e40b7596891d776c77c24570b286210764c6cd62096f78","sha512":"29c5e2716c41b0f98c7f489ea4e6530123f972f739f62fd2db975af28f0ab336393bd0273a16a81927d682daeecc8d20ea356b1b77c528be978564b780954404","ssdeep":"","tlshash":"249002b410540904181112d75520006560748449fcd59924f447b749058d0580b53940","size":47,"data":"","first_seen":"2025-10-22T08:40:35.19227Z","last_seen":"2025-10-22T08:40:35.19227Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6f67948f708dd53c2d320da103868405","sha1":"adcfef16f46244c055949de9b6c3008ab82fc188","sha256":"4937f2fdc1304a33f286c67e5a071dc357dfaaaabb69dd1042667293be2711bc","sha512":"b2bab5d8cd0164585f2603b5c651459297b95deb7a790f733d484fc368aff1fc710a30ff38b222ee3a5227780c78d49746ee5be337c8ff44ba5d5c6d4a9ad13f","ssdeep":"","tlshash":"c72000000000000000000000c003000000000000000000000000000000000000030000","size":3,"data":"","first_seen":"2023-03-07T01:17:20Z","last_seen":"2026-04-03T07:45:43.793863Z","times_seen":1211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e507d873ee1c19fd7249959afba82170","sha1":"442eabe85899eca79557f1740e714a5d7b5f5fb4","sha256":"d0f43775d32d6d44b2c445cde60f63400cd95cc3cb0d4b3b4e40ed992b70999d","sha512":"944a37698a1db533c065803ffe3480e017a93bc09caa06e594352a2b53645c4176e89f14ab5caf3fd4bac4e644570700abe4c83075b53fdd54aa324c2901fdd1","ssdeep":"","tlshash":"33900470145405040d1001d3154400117050c045fcd3c511f407f7cc01cc1150151454","size":39,"data":"","first_seen":"2025-06-22T10:13:07.581303Z","last_seen":"2025-11-18T05:21:35.364922Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/player/pjs/playerjs.js","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"754aaea4f0a5130da856bd4d6be1bda4","sha1":"4820938cbe75d8475088cf7f8025caf0b7663918","sha256":"0402d2acb737545b06f9ce6f881f86cdb24b219f225a92da9ab2c378a5eedbb2","sha512":"ed587e6038788d2abd8216ca0ea253dc7fc6b201503746467e540edd6b7b87047a6f61ea950715c72482014a25a5e146e6e33a91129ed523bcadc824f4e7bcf0","ssdeep":"12288:5yon8bUJpDDtp3KemFvbVjGRmMlTLQYMUOvBvMUo2dSvRz8qPGZRqKxyXZ0EPi:7mG3l8ARz8qUqKxU0EPi","tlshash":"4e157dea37a0601757dab069643f851a2b3a240a184bc06cfd2edcc75d75548e87bf3b","size":920658,"data":"","first_seen":"2025-10-12T23:22:51.943786Z","last_seen":"2025-10-25T19:50:15.069349Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waust.at/s.js","fqdn":"waust.at","domain":"waust.at","tld":"at"},"ip":{"addr":"104.26.5.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7622b281a43fa62a6fae065a55606494","sha1":"dd80aba33691a79d6d51e8500532dafb8ae2655c","sha256":"f807fad61b514259fb7678ec3b99c0aa533becd8e6831a0ef0a58226a0c0a47c","sha512":"a88c5f29e686f81bbc0378c228a0900dc675c1b7c8e24cbd56da392622b8293b52f04eafc882655a5be066bab09e4b861d6b5a9c8a569ca7edf2dd161745cd40","ssdeep":"96:t5uENgm/Zi2sSNuYMb8NORDvckw9AVDx+ll8tbPmSQ2sCq0jjaNr0Bqwjnu8QIi9:VP4BbvjPVDxptbPmd2FBHjulIGQKG+I8","tlshash":"49f1c676315314765ffa10a5616fb305b831517baf869001809e84b826acf4f91eafbb","size":7694,"data":"","first_seen":"2025-09-28T04:53:54.905455Z","last_seen":"2025-11-27T17:16:00.073479Z","times_seen":375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb82bd0309aaf669f27780f24fdf3ae2","sha1":"77c093ab074398a11e7c11083e2d70650fd9aa79","sha256":"2a6c0c364a84071ed368d5541ef24631b752b4dc4dbaaf782e7aa2016408ac1f","sha512":"d142db2dcc82abb5cae2ab03fcd5bf9898b0422456f0d0384dc7961285539b41b811b5c6ab71272a1af63dcffe272c03801e7b959ff0e5b2921ee860880f5172","ssdeep":"","tlshash":"0cb012171a4cd029d1357639c520b0c7f82a102081025a8c1184256c73430052dc00b6","size":88,"data":"","first_seen":"2025-10-22T08:40:35.23843Z","last_seen":"2025-10-22T08:40:35.23843Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c56310be6766bc15a5a2b9fd7de4d431","sha1":"fb27b8a015855fcbb5e2e90ef411fc72f27c9b50","sha256":"df3b4e01aadc29f52296dd5c9a1351e2c6ec17b26347a9e1f646002dd832508a","sha512":"4b3c2a071e2494168763b29b046bb0f716a0a0d53cdf7742bdc1be45df5eb79f4f00789eae6e9cdf6f6eb8acde4a653ab346997344e2efaef55cdff16f8b3bc0","ssdeep":"","tlshash":"9241525be4b16d0094bd50f621cba51836f50943bdda8b04f9096b842f5847d31eabdc","size":2017,"data":"","first_seen":"2025-10-22T08:40:35.240671Z","last_seen":"2025-10-22T08:40:35.240671Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cf4327be89825a150421dc4a7c6d6b19","sha1":"f9a0c3e876834519a5432bec6631683127423929","sha256":"f24e6781092897f142c0ee0f540ef0446fdc7115472f5d6bcd38bc0183873355","sha512":"1eb98761b2b89eb6cf5b6e3a90b471eb984325eebb0e36b858cb44df63290ca2940cf2ac8a25d9eff352b3d769f9623feef328f27252d2359337df7e46127d98","ssdeep":"","tlshash":"45d0a92baaaca95f8d051ac718960c1832e0d4e6b4ac4800ccc2eced00ba216db0248e","size":225,"data":"","first_seen":"2025-08-14T06:17:39.615938Z","last_seen":"2025-11-18T05:21:35.337109Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c4c3de222ea9ae7d38274bf17530f804","sha1":"ee45b549a1c16259c3802f67a8f844139213ea7e","sha256":"50e9156eafc2ec7583fd4711e9bf655d52a5fbe5043b0bd3a1c681b8513b6a58","sha512":"93685a8b2556cd3139c4c134320b650a9b3b8cb9c0eb620f457723821076b159f2c233ae2d3760c438b3a5dc5b0e9869a0867eb9e956a23a0544c551d9076d2b","ssdeep":"","tlshash":"fed0a70111f013b0f11705dcc43b45186581eb341cc547a2bd0ed9885c10d239e7abd5","size":233,"data":"","first_seen":"2025-08-22T01:50:39.963188Z","last_seen":"2025-12-21T22:34:26.093757Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8fa14cdd754f91cc6554c9e71929cce7","sha1":"4a0a19218e082a343a1b17e5333409af9d98f0f5","sha256":"252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111","sha512":"711c22448e721e5491d8245b49425aa861f1fc4a15287f0735e203799b65cffec50b5abd0fddd91cd643aeb3b530d48f05e258e7e230a94ed5025c1387bb4e1b","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000003000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-03T15:35:12.628682Z","times_seen":57455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4e1723f13b32d196981ad315a49c0616","sha1":"9b037162278054e93245d315e4e2e71ac8b3390f","sha256":"d68b8898a1d8810921ad7e080e5aa88b7bdc9e797896df41dd56cc069abb0ac9","sha512":"9cb4217d17836154bea93e90c9b5a22e285486c4d024af8939c91f8c7ce6ce92b23e327a8ce9ae3ebc970c3d7ecef4d199af360e05d15d49896c210634f299ec","ssdeep":"","tlshash":"7ed0222b2b6c891e8d1a12c32a2a1e1833d0c6e6f5a84808ccc9fcec01b8207d748489","size":208,"data":"","first_seen":"2025-08-21T23:35:02.089672Z","last_seen":"2025-11-18T05:21:35.318053Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f164b1f26b631b72cb462f8d5c36ddeb","sha1":"2c01bd366d2aa84bea901568133650d436893460","sha256":"e535d0e07d55d3f8b32fb0475cd7f2778d5da7a8a0367a0b887ae6b95beef602","sha512":"072c8162e87c47bd4daee413b3e7dea24c29da2bf493de56613a06f9845519b9e54a9a94941e83ec340092ad8d2a877bd12446b5210425a22ac4eee084dc5dd0","ssdeep":"","tlshash":"7190047050540d0d1c3010575d0400577150c04dfcff4500f503ffdd40dc0054d31440","size":41,"data":"","first_seen":"2025-07-27T14:08:55.545674Z","last_seen":"2025-11-18T05:21:35.368588Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cf4327be89825a150421dc4a7c6d6b19","sha1":"f9a0c3e876834519a5432bec6631683127423929","sha256":"f24e6781092897f142c0ee0f540ef0446fdc7115472f5d6bcd38bc0183873355","sha512":"1eb98761b2b89eb6cf5b6e3a90b471eb984325eebb0e36b858cb44df63290ca2940cf2ac8a25d9eff352b3d769f9623feef328f27252d2359337df7e46127d98","ssdeep":"","tlshash":"45d0a92baaaca95f8d051ac718960c1832e0d4e6b4ac4800ccc2eced00ba216db0248e","size":225,"data":"","first_seen":"2025-08-14T06:17:39.615938Z","last_seen":"2025-11-18T05:21:35.337109Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cf4327be89825a150421dc4a7c6d6b19","sha1":"f9a0c3e876834519a5432bec6631683127423929","sha256":"f24e6781092897f142c0ee0f540ef0446fdc7115472f5d6bcd38bc0183873355","sha512":"1eb98761b2b89eb6cf5b6e3a90b471eb984325eebb0e36b858cb44df63290ca2940cf2ac8a25d9eff352b3d769f9623feef328f27252d2359337df7e46127d98","ssdeep":"","tlshash":"45d0a92baaaca95f8d051ac718960c1832e0d4e6b4ac4800ccc2eced00ba216db0248e","size":225,"data":"","first_seen":"2025-08-14T06:17:39.615938Z","last_seen":"2025-11-18T05:21:35.337109Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6052027f8899a6bfe3148fb3b49c2e5d","sha1":"0c623518c7ab0d4725e6808c76798123779d6372","sha256":"442c8e7468ce2fb1deae90be815308271b69df058481e94135a669b7a6134500","sha512":"cfadae54723ecf92f2a689d3a3dc1e7411a698c5ef2c9934d59e183446d576feee80264e0c15cf4c263bcde9ff939adf23d0450329e01ee907848bf20c97952d","ssdeep":"","tlshash":"2170000cb8ac2200003a30a2203b000c003220002008820000c002800822228080280a","size":22,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-03-31T00:38:52.452307Z","times_seen":647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d00a243ea9b8f9ac010c591e5a65f055","sha1":"e9ca8d9a7aa820c00d3ab05c3cdc1fd81c92726f","sha256":"f705940e69387bd285eacb7fac7d6a6969b75e6e01d037bbca0d5d6fb8ad5fc2","sha512":"617a26d9f82fc8b16444dda61ab6d80f32ab6f6ba87f82aa76ab0806817b02de6d2a59f5b246d948d42be32c06418f0137f52b8a8f33361e0923cf3a935e7d44","ssdeep":"","tlshash":"fe3000000000000000000000000000000000000000030000000000000c000000000030","size":4,"data":"","first_seen":"2023-03-07T01:17:20Z","last_seen":"2026-04-03T07:45:43.801446Z","times_seen":1208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8fa14cdd754f91cc6554c9e71929cce7","sha1":"4a0a19218e082a343a1b17e5333409af9d98f0f5","sha256":"252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111","sha512":"711c22448e721e5491d8245b49425aa861f1fc4a15287f0735e203799b65cffec50b5abd0fddd91cd643aeb3b530d48f05e258e7e230a94ed5025c1387bb4e1b","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000003000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-03T15:35:12.628682Z","times_seen":57455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f164b1f26b631b72cb462f8d5c36ddeb","sha1":"2c01bd366d2aa84bea901568133650d436893460","sha256":"e535d0e07d55d3f8b32fb0475cd7f2778d5da7a8a0367a0b887ae6b95beef602","sha512":"072c8162e87c47bd4daee413b3e7dea24c29da2bf493de56613a06f9845519b9e54a9a94941e83ec340092ad8d2a877bd12446b5210425a22ac4eee084dc5dd0","ssdeep":"","tlshash":"7190047050540d0d1c3010575d0400577150c04dfcff4500f503ffdd40dc0054d31440","size":41,"data":"","first_seen":"2025-07-27T14:08:55.545674Z","last_seen":"2025-11-18T05:21:35.368588Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cf4327be89825a150421dc4a7c6d6b19","sha1":"f9a0c3e876834519a5432bec6631683127423929","sha256":"f24e6781092897f142c0ee0f540ef0446fdc7115472f5d6bcd38bc0183873355","sha512":"1eb98761b2b89eb6cf5b6e3a90b471eb984325eebb0e36b858cb44df63290ca2940cf2ac8a25d9eff352b3d769f9623feef328f27252d2359337df7e46127d98","ssdeep":"","tlshash":"45d0a92baaaca95f8d051ac718960c1832e0d4e6b4ac4800ccc2eced00ba216db0248e","size":225,"data":"","first_seen":"2025-08-14T06:17:39.615938Z","last_seen":"2025-11-18T05:21:35.337109Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4e1723f13b32d196981ad315a49c0616","sha1":"9b037162278054e93245d315e4e2e71ac8b3390f","sha256":"d68b8898a1d8810921ad7e080e5aa88b7bdc9e797896df41dd56cc069abb0ac9","sha512":"9cb4217d17836154bea93e90c9b5a22e285486c4d024af8939c91f8c7ce6ce92b23e327a8ce9ae3ebc970c3d7ecef4d199af360e05d15d49896c210634f299ec","ssdeep":"","tlshash":"7ed0222b2b6c891e8d1a12c32a2a1e1833d0c6e6f5a84808ccc9fcec01b8207d748489","size":208,"data":"","first_seen":"2025-08-21T23:35:02.089672Z","last_seen":"2025-11-18T05:21:35.318053Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b0d35e00b0d820c1879c22f3cd45ba8b","sha1":"1bde2a5e4245d7e35615e566b3c5c19da1634b2f","sha256":"4e8174bd05a6d2a9e216ea3b124fcd00ca2ca27bdc9f7aa69f9c310340209c55","sha512":"72113a1fafeb71cdd92ac64ba9730be3b16cb1fb725461f5f5c94da31e71476707ae9028b6efdbd982b3b1e780e4f87864fb4afc7e22a6073e591eceb4960591","ssdeep":"","tlshash":"af8004700c5cc1100c110051150011137050c0cdfcf34700f513f74d00cd4141151540","size":35,"data":"","first_seen":"2025-06-22T10:13:07.592166Z","last_seen":"2025-11-18T05:21:35.363246Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f164b1f26b631b72cb462f8d5c36ddeb","sha1":"2c01bd366d2aa84bea901568133650d436893460","sha256":"e535d0e07d55d3f8b32fb0475cd7f2778d5da7a8a0367a0b887ae6b95beef602","sha512":"072c8162e87c47bd4daee413b3e7dea24c29da2bf493de56613a06f9845519b9e54a9a94941e83ec340092ad8d2a877bd12446b5210425a22ac4eee084dc5dd0","ssdeep":"","tlshash":"7190047050540d0d1c3010575d0400577150c04dfcff4500f503ffdd40dc0054d31440","size":41,"data":"","first_seen":"2025-07-27T14:08:55.545674Z","last_seen":"2025-11-18T05:21:35.368588Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cf4327be89825a150421dc4a7c6d6b19","sha1":"f9a0c3e876834519a5432bec6631683127423929","sha256":"f24e6781092897f142c0ee0f540ef0446fdc7115472f5d6bcd38bc0183873355","sha512":"1eb98761b2b89eb6cf5b6e3a90b471eb984325eebb0e36b858cb44df63290ca2940cf2ac8a25d9eff352b3d769f9623feef328f27252d2359337df7e46127d98","ssdeep":"","tlshash":"45d0a92baaaca95f8d051ac718960c1832e0d4e6b4ac4800ccc2eced00ba216db0248e","size":225,"data":"","first_seen":"2025-08-14T06:17:39.615938Z","last_seen":"2025-11-18T05:21:35.337109Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f0bda6d98bfd1ce207d1710a0956a2fa","sha1":"a3b62483fffd2178cdbb40dc54c6721e7d1bace7","sha256":"6e64ff2509bcbe2d5a8aa03de2aa0bee2cc4cf363c871e81767a1fb21d43c922","sha512":"d669e8d24df8b69de80edd5f646868ef55356581e0a0d7ddb7f54e94a549a8a29d6da067af0c06af37539cd3adeb75f825eb77b36dcab956afcb59bbb54907a4","ssdeep":"","tlshash":"348004701475504d0d110055354041137050c145fcf3d500f403f75c00cc0440143440","size":33,"data":"","first_seen":"2025-06-22T10:13:07.574972Z","last_seen":"2026-03-29T11:11:07.3381Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f164b1f26b631b72cb462f8d5c36ddeb","sha1":"2c01bd366d2aa84bea901568133650d436893460","sha256":"e535d0e07d55d3f8b32fb0475cd7f2778d5da7a8a0367a0b887ae6b95beef602","sha512":"072c8162e87c47bd4daee413b3e7dea24c29da2bf493de56613a06f9845519b9e54a9a94941e83ec340092ad8d2a877bd12446b5210425a22ac4eee084dc5dd0","ssdeep":"","tlshash":"7190047050540d0d1c3010575d0400577150c04dfcff4500f503ffdd40dc0054d31440","size":41,"data":"","first_seen":"2025-07-27T14:08:55.545674Z","last_seen":"2025-11-18T05:21:35.368588Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4e1723f13b32d196981ad315a49c0616","sha1":"9b037162278054e93245d315e4e2e71ac8b3390f","sha256":"d68b8898a1d8810921ad7e080e5aa88b7bdc9e797896df41dd56cc069abb0ac9","sha512":"9cb4217d17836154bea93e90c9b5a22e285486c4d024af8939c91f8c7ce6ce92b23e327a8ce9ae3ebc970c3d7ecef4d199af360e05d15d49896c210634f299ec","ssdeep":"","tlshash":"7ed0222b2b6c891e8d1a12c32a2a1e1833d0c6e6f5a84808ccc9fcec01b8207d748489","size":208,"data":"","first_seen":"2025-08-21T23:35:02.089672Z","last_seen":"2025-11-18T05:21:35.318053Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fb64b812367812940190dee8fda5af15","sha1":"573f1a8dc15c61653834f7d51ace8d1e801dec36","sha256":"f770ac95d53de5e43a57677f4decfc98d20c611cdd1705fbe56db71ab9836580","sha512":"af55232ec1a879fbdc3cb353c9cc43cd33efd9b8e795e6f81979345be36f802f3c5f39d766dad1f3d0b66ce29d3454f988d91ddf1ffecfec127a2c447d143a91","ssdeep":"","tlshash":"fe40000030000000000000030000000000000000000000c00000000000000000000000","size":6,"data":"","first_seen":"2023-03-07T01:17:20Z","last_seen":"2026-04-03T07:45:43.806905Z","times_seen":1197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4e1723f13b32d196981ad315a49c0616","sha1":"9b037162278054e93245d315e4e2e71ac8b3390f","sha256":"d68b8898a1d8810921ad7e080e5aa88b7bdc9e797896df41dd56cc069abb0ac9","sha512":"9cb4217d17836154bea93e90c9b5a22e285486c4d024af8939c91f8c7ce6ce92b23e327a8ce9ae3ebc970c3d7ecef4d199af360e05d15d49896c210634f299ec","ssdeep":"","tlshash":"7ed0222b2b6c891e8d1a12c32a2a1e1833d0c6e6f5a84808ccc9fcec01b8207d748489","size":208,"data":"","first_seen":"2025-08-21T23:35:02.089672Z","last_seen":"2025-11-18T05:21:35.318053Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8fa14cdd754f91cc6554c9e71929cce7","sha1":"4a0a19218e082a343a1b17e5333409af9d98f0f5","sha256":"252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111","sha512":"711c22448e721e5491d8245b49425aa861f1fc4a15287f0735e203799b65cffec50b5abd0fddd91cd643aeb3b530d48f05e258e7e230a94ed5025c1387bb4e1b","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000003000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-03T15:35:12.628682Z","times_seen":57455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9f64ca3bf6d8d34d2ee331698c7e6eec","sha1":"86ca41b6536dd24f31c79cbff4e8a9c12d1d06b8","sha256":"0d25cde547c9643a2bac679d57b2f792ac3f3762793ad0cee1dfcaba5fd2fe04","sha512":"36b2916716b6bbe500c6012233e42ebe8f70e1718427f41a6486b50c6f79e76d9968b2bec78a5ebb737c4bb25329e186102578091dfc8176f6a8023bf36bcad1","ssdeep":"","tlshash":"8b4000000000c0000000000000c000000000000000c00000000000000000000c000000","size":6,"data":"","first_seen":"2023-03-07T01:17:20Z","last_seen":"2026-04-03T07:45:43.80632Z","times_seen":1202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d00a243ea9b8f9ac010c591e5a65f055","sha1":"e9ca8d9a7aa820c00d3ab05c3cdc1fd81c92726f","sha256":"f705940e69387bd285eacb7fac7d6a6969b75e6e01d037bbca0d5d6fb8ad5fc2","sha512":"617a26d9f82fc8b16444dda61ab6d80f32ab6f6ba87f82aa76ab0806817b02de6d2a59f5b246d948d42be32c06418f0137f52b8a8f33361e0923cf3a935e7d44","ssdeep":"","tlshash":"fe3000000000000000000000000000000000000000030000000000000c000000000030","size":4,"data":"","first_seen":"2023-03-07T01:17:20Z","last_seen":"2026-04-03T07:45:43.801446Z","times_seen":1208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4e1723f13b32d196981ad315a49c0616","sha1":"9b037162278054e93245d315e4e2e71ac8b3390f","sha256":"d68b8898a1d8810921ad7e080e5aa88b7bdc9e797896df41dd56cc069abb0ac9","sha512":"9cb4217d17836154bea93e90c9b5a22e285486c4d024af8939c91f8c7ce6ce92b23e327a8ce9ae3ebc970c3d7ecef4d199af360e05d15d49896c210634f299ec","ssdeep":"","tlshash":"7ed0222b2b6c891e8d1a12c32a2a1e1833d0c6e6f5a84808ccc9fcec01b8207d748489","size":208,"data":"","first_seen":"2025-08-21T23:35:02.089672Z","last_seen":"2025-11-18T05:21:35.318053Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d00a243ea9b8f9ac010c591e5a65f055","sha1":"e9ca8d9a7aa820c00d3ab05c3cdc1fd81c92726f","sha256":"f705940e69387bd285eacb7fac7d6a6969b75e6e01d037bbca0d5d6fb8ad5fc2","sha512":"617a26d9f82fc8b16444dda61ab6d80f32ab6f6ba87f82aa76ab0806817b02de6d2a59f5b246d948d42be32c06418f0137f52b8a8f33361e0923cf3a935e7d44","ssdeep":"","tlshash":"fe3000000000000000000000000000000000000000030000000000000c000000000030","size":4,"data":"","first_seen":"2023-03-07T01:17:20Z","last_seen":"2026-04-03T07:45:43.801446Z","times_seen":1208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:55.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:55 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 171832\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-29f38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171832,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"a10e7741ca561df0d3a66bb066b424b0","sha1":"17078a0d445f0f57c9a3ceb6dd701a6d3d7e36ce","sha256":"d375c83912d6a91c32361316098fb5db913e830dcb2d726128aeea06fe7f9bd3","sha512":"622ae7f1a1c1e6ef62c6d10956ce0bd0e88209c523e3203486cf77e95de368aa2b95e1408b285706a8805e0de381438661a74de48abebbe3111851875a99a67e","ssdeep":"3072:+3hvHGSl3qSH/7FmfpNZo9NIi5OR+ssYl0CFiQj4KObDiDAZz:+35R3qY/ePo3IiOMY7kmVOniDA9","tlshash":"4bf3021ff2e4a84bc787c27093c6c2ebdab34d95e24217094636bd7170bd6e6e50471a","first_seen":"2025-10-22T08:40:34.938189Z","last_seen":"2025-10-22T08:40:34.938189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:56.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:56 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 150776\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-24cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150776,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"ab54c542f613153835bf358e2405b353","sha1":"42c0e82be5a24088b0901e5abe0be2965bf6b45c","sha256":"b00ae34af063d637384529a141d1dfafeade733650b993c2e2a0d2497ddd9173","sha512":"37b953223fdfa35dcf6076513417485c11e75bde8cadf1d9736d98433003841867b92c6e2e756a36089771415592356bbca6785127e44d960b79b4490de2bc56","ssdeep":"3072:IDCHOPdcpY+NzQcvJIMPCCJMUCK6eKnt9JU6Od/KuMCu7EM38s1QDHhfkE7R:aKpYyQcBIPolh2XuMCuzQhkEV","tlshash":"d3e301ae1aa2990fcbd325305349c093e1b70ed5ba9363654bf13f96b6b2253e4fc500","first_seen":"2025-10-22T08:40:34.948219Z","last_seen":"2025-10-22T08:40:34.948219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:57.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:57 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 171832\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-29f38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171832,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"a10e7741ca561df0d3a66bb066b424b0","sha1":"17078a0d445f0f57c9a3ceb6dd701a6d3d7e36ce","sha256":"d375c83912d6a91c32361316098fb5db913e830dcb2d726128aeea06fe7f9bd3","sha512":"622ae7f1a1c1e6ef62c6d10956ce0bd0e88209c523e3203486cf77e95de368aa2b95e1408b285706a8805e0de381438661a74de48abebbe3111851875a99a67e","ssdeep":"3072:+3hvHGSl3qSH/7FmfpNZo9NIi5OR+ssYl0CFiQj4KObDiDAZz:+35R3qY/ePo3IiOMY7kmVOniDA9","tlshash":"4bf3021ff2e4a84bc787c27093c6c2ebdab34d95e24217094636bd7170bd6e6e50471a","first_seen":"2025-10-22T08:40:34.938189Z","last_seen":"2025-10-22T08:40:34.938189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:40:05.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:40:05 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 150776\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-24cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150776,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"ab54c542f613153835bf358e2405b353","sha1":"42c0e82be5a24088b0901e5abe0be2965bf6b45c","sha256":"b00ae34af063d637384529a141d1dfafeade733650b993c2e2a0d2497ddd9173","sha512":"37b953223fdfa35dcf6076513417485c11e75bde8cadf1d9736d98433003841867b92c6e2e756a36089771415592356bbca6785127e44d960b79b4490de2bc56","ssdeep":"3072:IDCHOPdcpY+NzQcvJIMPCCJMUCK6eKnt9JU6Od/KuMCu7EM38s1QDHhfkE7R:aKpYyQcBIPolh2XuMCuzQhkEV","tlshash":"d3e301ae1aa2990fcbd325305349c093e1b70ed5ba9363654bf13f96b6b2253e4fc500","first_seen":"2025-10-22T08:40:34.948219Z","last_seen":"2025-10-22T08:40:34.948219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/embed-0z6utgknx8ew.html","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-22T08:39:46.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ag2m4.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 08:09:31 GMT","end":"Sat, 03 Jan 2026 09:07:57 GMT"},"fingerprint":{"sha1":"66:C3:2A:1C:63:DB:29:46:CF:58:47:B8:E2:7F:9B:F8:16:55:B5:DC","sha256":"BD:F3:FA:89:8F:37:6D:EE:3B:05:B4:3B:A7:B7:AD:E7:DD:8F:1A:AA:86:46:2C:36:D4:13:A4:EA:25:45:98:0E"}}},"request":{"raw":"GET /embed-0z6utgknx8ew.html HTTP/1.1\r\nHost: x.ag2m4.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 08:39:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nexpires: Tue, 21 Oct 2025 08:39:46 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jlDfXDuWN7ml7UV8Aa4gM%2BdpmkeHMCZH6Mhw9EJb0ltnbKM%2BtHKq9HTTCTs9C22sWMZztUH175kYrEIeHaGF8upsdPu5ZDSzlg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: lang=1; HttpOnly; Path=/; Domain=x.ag2m4.cfd\r\ncf-ray: 9927afa2be2556c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":4003,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (631)","md5":"d3074ee317daf9a32be4ff08afabdb4e","sha1":"592684915e9fcc0dfb1fbd10d17f4cdbea656edc","sha256":"7db0d6c877808ad04b1c7b535cbf0dd702a98811c6db2e40ae5e47c797c333bd","sha512":"008c394ddf979b15c026f5dd53a247dbc07d116ad92b3e80225392f6359f9d721bd82c2df0a538ff6a60404f1a01beed33dccc37420ec879386da8536a8ab343","ssdeep":"","tlshash":"6f81a41fecf5d811402960f422bfe01c71b64903fd96cf09b55daa442f486ad69a6edc","first_seen":"2025-10-22T08:40:34.958394Z","last_seen":"2025-10-22T08:40:34.958394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":773,"timings":{"blocked":69,"dns":48,"connect":1,"send":0,"wait":636,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"x.ag2m4.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:50.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:50 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 2542136\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-26ca38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2542136,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"49324e125f276158c60d0addcb9e0243","sha1":"013f65334288f3e4f6e3869f89a0ff24dd29b7ce","sha256":"1525a2e744956ef80ac9cbe46f6ecee25b1952cb57872a4f7b9e10d6561bcf2d","sha512":"935d2fcb2fe76468406dcdd3806decb99d8b123fd174a19b0764e99b2ff23a53b6d2b0591206eea8737f6018518b5f6f97d67b12626fa5fcebb2fa0df4ccbb58","ssdeep":"24576:F4zepSrrlF0n0e6B0ICLgbUTrNq/GzlbsIjrXM/2czl26CUpy21/6:F4zs/6TCLggTrxR3jrM/JVm4/6","tlshash":"fd25234ebbfd4d43cdb6d3b00384da44e2704c409e2e6bd718a5ba8bf8ba6c9d454578","first_seen":"2025-10-22T08:40:34.968708Z","last_seen":"2025-10-22T08:40:34.968708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":515,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:54.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:54 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 150776\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-24cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150776,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"ab54c542f613153835bf358e2405b353","sha1":"42c0e82be5a24088b0901e5abe0be2965bf6b45c","sha256":"b00ae34af063d637384529a141d1dfafeade733650b993c2e2a0d2497ddd9173","sha512":"37b953223fdfa35dcf6076513417485c11e75bde8cadf1d9736d98433003841867b92c6e2e756a36089771415592356bbca6785127e44d960b79b4490de2bc56","ssdeep":"3072:IDCHOPdcpY+NzQcvJIMPCCJMUCK6eKnt9JU6Od/KuMCu7EM38s1QDHhfkE7R:aKpYyQcBIPolh2XuMCuzQhkEV","tlshash":"d3e301ae1aa2990fcbd325305349c093e1b70ed5ba9363654bf13f96b6b2253e4fc500","first_seen":"2025-10-22T08:40:34.948219Z","last_seen":"2025-10-22T08:40:34.948219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:54.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:54 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 3230968\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-314cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3230968,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"3fc7b498b073ab845efefeb26f564baa","sha1":"83e0d81938c8d2aead545325ea9a4201c13b24f0","sha256":"e84edc0e6fd74291b4945a6326794179a391e4fa0629c0f2d553de26e15361c8","sha512":"c8c4a981b3ffe3c9d266bf9e392a7df125cc033087fab9813dd199887a869636ffc1b5850002e8fe1e475d902116c8142fd3bdb11275d3d248109e11b5abbf06","ssdeep":"24576:/PXevNE6XFRKURm2mrlbL8W0VfNkGWogBpGX8KBxNc0Kjdd48wPEAc:/mVDHm2IxoFk9h2X8WNFE48wpc","tlshash":"ee25232e32d4ee55ce2061b22a0cdba1c0f54d2866849f7b4257f919faff6d0c5244fa","first_seen":"2025-10-22T08:40:34.99877Z","last_seen":"2025-10-22T08:40:34.99877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":645,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:59.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:59 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 2542136\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-26ca38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2542136,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"49324e125f276158c60d0addcb9e0243","sha1":"013f65334288f3e4f6e3869f89a0ff24dd29b7ce","sha256":"1525a2e744956ef80ac9cbe46f6ecee25b1952cb57872a4f7b9e10d6561bcf2d","sha512":"935d2fcb2fe76468406dcdd3806decb99d8b123fd174a19b0764e99b2ff23a53b6d2b0591206eea8737f6018518b5f6f97d67b12626fa5fcebb2fa0df4ccbb58","ssdeep":"24576:F4zepSrrlF0n0e6B0ICLgbUTrNq/GzlbsIjrXM/2czl26CUpy21/6:F4zs/6TCLggTrxR3jrM/JVm4/6","tlshash":"fd25234ebbfd4d43cdb6d3b00384da44e2704c409e2e6bd718a5ba8bf8ba6c9d454578","first_seen":"2025-10-22T08:40:34.968708Z","last_seen":"2025-10-22T08:40:34.968708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":528,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:47.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:47 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 150776\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-24cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150776,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"ab54c542f613153835bf358e2405b353","sha1":"42c0e82be5a24088b0901e5abe0be2965bf6b45c","sha256":"b00ae34af063d637384529a141d1dfafeade733650b993c2e2a0d2497ddd9173","sha512":"37b953223fdfa35dcf6076513417485c11e75bde8cadf1d9736d98433003841867b92c6e2e756a36089771415592356bbca6785127e44d960b79b4490de2bc56","ssdeep":"3072:IDCHOPdcpY+NzQcvJIMPCCJMUCK6eKnt9JU6Od/KuMCu7EM38s1QDHhfkE7R:aKpYyQcBIPolh2XuMCuzQhkEV","tlshash":"d3e301ae1aa2990fcbd325305349c093e1b70ed5ba9363654bf13f96b6b2253e4fc500","first_seen":"2025-10-22T08:40:34.948219Z","last_seen":"2025-10-22T08:40:34.948219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/favicon.ico","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:48.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ag2m4.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 08:09:31 GMT","end":"Sat, 03 Jan 2026 09:07:57 GMT"},"fingerprint":{"sha1":"66:C3:2A:1C:63:DB:29:46:CF:58:47:B8:E2:7F:9B:F8:16:55:B5:DC","sha256":"BD:F3:FA:89:8F:37:6D:EE:3B:05:B4:3B:A7:B7:AD:E7:DD:8F:1A:AA:86:46:2C:36:D4:13:A4:EA:25:45:98:0E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: x.ag2m4.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/embed-0z6utgknx8ew.html\r\nCookie: lang=1; file_id=21684; aff=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 08:39:48 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Feb 2015 19:26:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Oct 2025 08:39:48 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m0CQpQcFU53KTgZ9PXUfPP8s6K%2BIrh1Oiqbtfk5Hk5sf2tP22dPaXwaM7s3ADwA8D1yy7YU9eVn09dvyNL5Yz1cF0q8H7SPNgQ%3D%3D\"}]}\r\netag: W/\"54cfcf64-47e\"\r\ncontent-encoding: br\r\ncf-ray: 9927afae89ddb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"f7b404d04734d64575f577b506c22a06","sha1":"485d344ea5ace3529dd472f3fadaa621f046eaf5","sha256":"c53b6a1e519b835191c058325f17d0f3ea15e1507ca47313c94cc54b68741500","sha512":"6d7e6c943f1e253ad80662a1afa62235b605a8657b8f9f132b4a865c4a789030e7acadab3b18d355a09d1a0422435b81c731ba17141126cd02366f5605845ac5","ssdeep":"","tlshash":"552104fa9255b1d8c8426c73f481ffa886191e441b6d5202d4b12d03f8de0f875b1ca7","first_seen":"2023-05-06T16:43:05Z","last_seen":"2026-03-28T19:27:31.337753Z","times_seen":388,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":674,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"x.ag2m4.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:53.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:53 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 3230968\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-314cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3230968,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"3fc7b498b073ab845efefeb26f564baa","sha1":"83e0d81938c8d2aead545325ea9a4201c13b24f0","sha256":"e84edc0e6fd74291b4945a6326794179a391e4fa0629c0f2d553de26e15361c8","sha512":"c8c4a981b3ffe3c9d266bf9e392a7df125cc033087fab9813dd199887a869636ffc1b5850002e8fe1e475d902116c8142fd3bdb11275d3d248109e11b5abbf06","ssdeep":"24576:/PXevNE6XFRKURm2mrlbL8W0VfNkGWogBpGX8KBxNc0Kjdd48wPEAc:/mVDHm2IxoFk9h2X8WNFE48wpc","tlshash":"ee25232e32d4ee55ce2061b22a0cdba1c0f54d2866849f7b4257f919faff6d0c5244fa","first_seen":"2025-10-22T08:40:34.99877Z","last_seen":"2025-10-22T08:40:34.99877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":650,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:40:00.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:40:00 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 171832\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-29f38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171832,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"a10e7741ca561df0d3a66bb066b424b0","sha1":"17078a0d445f0f57c9a3ceb6dd701a6d3d7e36ce","sha256":"d375c83912d6a91c32361316098fb5db913e830dcb2d726128aeea06fe7f9bd3","sha512":"622ae7f1a1c1e6ef62c6d10956ce0bd0e88209c523e3203486cf77e95de368aa2b95e1408b285706a8805e0de381438661a74de48abebbe3111851875a99a67e","ssdeep":"3072:+3hvHGSl3qSH/7FmfpNZo9NIi5OR+ssYl0CFiQj4KObDiDAZz:+35R3qY/ePo3IiOMY7kmVOniDA9","tlshash":"4bf3021ff2e4a84bc787c27093c6c2ebdab34d95e24217094636bd7170bd6e6e50471a","first_seen":"2025-10-22T08:40:34.938189Z","last_seen":"2025-10-22T08:40:34.938189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:47.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:47 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 2542136\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-26ca38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2542136,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"49324e125f276158c60d0addcb9e0243","sha1":"013f65334288f3e4f6e3869f89a0ff24dd29b7ce","sha256":"1525a2e744956ef80ac9cbe46f6ecee25b1952cb57872a4f7b9e10d6561bcf2d","sha512":"935d2fcb2fe76468406dcdd3806decb99d8b123fd174a19b0764e99b2ff23a53b6d2b0591206eea8737f6018518b5f6f97d67b12626fa5fcebb2fa0df4ccbb58","ssdeep":"24576:F4zepSrrlF0n0e6B0ICLgbUTrNq/GzlbsIjrXM/2czl26CUpy21/6:F4zs/6TCLggTrxR3jrM/JVm4/6","tlshash":"fd25234ebbfd4d43cdb6d3b00384da44e2704c409e2e6bd718a5ba8bf8ba6c9d454578","first_seen":"2025-10-22T08:40:34.968708Z","last_seen":"2025-10-22T08:40:34.968708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":520,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:50.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:50 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 3230968\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-314cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3230968,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"3fc7b498b073ab845efefeb26f564baa","sha1":"83e0d81938c8d2aead545325ea9a4201c13b24f0","sha256":"e84edc0e6fd74291b4945a6326794179a391e4fa0629c0f2d553de26e15361c8","sha512":"c8c4a981b3ffe3c9d266bf9e392a7df125cc033087fab9813dd199887a869636ffc1b5850002e8fe1e475d902116c8142fd3bdb11275d3d248109e11b5abbf06","ssdeep":"24576:/PXevNE6XFRKURm2mrlbL8W0VfNkGWogBpGX8KBxNc0Kjdd48wPEAc:/mVDHm2IxoFk9h2X8WNFE48wpc","tlshash":"ee25232e32d4ee55ce2061b22a0cdba1c0f54d2866849f7b4257f919faff6d0c5244fa","first_seen":"2025-10-22T08:40:34.99877Z","last_seen":"2025-10-22T08:40:34.99877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":652,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:52.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:52 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 2542136\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-26ca38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2542136,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"49324e125f276158c60d0addcb9e0243","sha1":"013f65334288f3e4f6e3869f89a0ff24dd29b7ce","sha256":"1525a2e744956ef80ac9cbe46f6ecee25b1952cb57872a4f7b9e10d6561bcf2d","sha512":"935d2fcb2fe76468406dcdd3806decb99d8b123fd174a19b0764e99b2ff23a53b6d2b0591206eea8737f6018518b5f6f97d67b12626fa5fcebb2fa0df4ccbb58","ssdeep":"24576:F4zepSrrlF0n0e6B0ICLgbUTrNq/GzlbsIjrXM/2czl26CUpy21/6:F4zs/6TCLggTrxR3jrM/JVm4/6","tlshash":"fd25234ebbfd4d43cdb6d3b00384da44e2704c409e2e6bd718a5ba8bf8ba6c9d454578","first_seen":"2025-10-22T08:40:34.968708Z","last_seen":"2025-10-22T08:40:34.968708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":517,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:55.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:55 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 2542136\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-26ca38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2542136,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"49324e125f276158c60d0addcb9e0243","sha1":"013f65334288f3e4f6e3869f89a0ff24dd29b7ce","sha256":"1525a2e744956ef80ac9cbe46f6ecee25b1952cb57872a4f7b9e10d6561bcf2d","sha512":"935d2fcb2fe76468406dcdd3806decb99d8b123fd174a19b0764e99b2ff23a53b6d2b0591206eea8737f6018518b5f6f97d67b12626fa5fcebb2fa0df4ccbb58","ssdeep":"24576:F4zepSrrlF0n0e6B0ICLgbUTrNq/GzlbsIjrXM/2czl26CUpy21/6:F4zs/6TCLggTrxR3jrM/JVm4/6","tlshash":"fd25234ebbfd4d43cdb6d3b00384da44e2704c409e2e6bd718a5ba8bf8ba6c9d454578","first_seen":"2025-10-22T08:40:34.968708Z","last_seen":"2025-10-22T08:40:34.968708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":508,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:55.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:56 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 3230968\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-314cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3230968,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"3fc7b498b073ab845efefeb26f564baa","sha1":"83e0d81938c8d2aead545325ea9a4201c13b24f0","sha256":"e84edc0e6fd74291b4945a6326794179a391e4fa0629c0f2d553de26e15361c8","sha512":"c8c4a981b3ffe3c9d266bf9e392a7df125cc033087fab9813dd199887a869636ffc1b5850002e8fe1e475d902116c8142fd3bdb11275d3d248109e11b5abbf06","ssdeep":"24576:/PXevNE6XFRKURm2mrlbL8W0VfNkGWogBpGX8KBxNc0Kjdd48wPEAc:/mVDHm2IxoFk9h2X8WNFE48wpc","tlshash":"ee25232e32d4ee55ce2061b22a0cdba1c0f54d2866849f7b4257f919faff6d0c5244fa","first_seen":"2025-10-22T08:40:34.99877Z","last_seen":"2025-10-22T08:40:34.99877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":645,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:53.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:53 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 2542136\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-26ca38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2542136,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"49324e125f276158c60d0addcb9e0243","sha1":"013f65334288f3e4f6e3869f89a0ff24dd29b7ce","sha256":"1525a2e744956ef80ac9cbe46f6ecee25b1952cb57872a4f7b9e10d6561bcf2d","sha512":"935d2fcb2fe76468406dcdd3806decb99d8b123fd174a19b0764e99b2ff23a53b6d2b0591206eea8737f6018518b5f6f97d67b12626fa5fcebb2fa0df4ccbb58","ssdeep":"24576:F4zepSrrlF0n0e6B0ICLgbUTrNq/GzlbsIjrXM/2czl26CUpy21/6:F4zs/6TCLggTrxR3jrM/JVm4/6","tlshash":"fd25234ebbfd4d43cdb6d3b00384da44e2704c409e2e6bd718a5ba8bf8ba6c9d454578","first_seen":"2025-10-22T08:40:34.968708Z","last_seen":"2025-10-22T08:40:34.968708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":488,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:58.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:58 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 150776\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-24cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150776,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"ab54c542f613153835bf358e2405b353","sha1":"42c0e82be5a24088b0901e5abe0be2965bf6b45c","sha256":"b00ae34af063d637384529a141d1dfafeade733650b993c2e2a0d2497ddd9173","sha512":"37b953223fdfa35dcf6076513417485c11e75bde8cadf1d9736d98433003841867b92c6e2e756a36089771415592356bbca6785127e44d960b79b4490de2bc56","ssdeep":"3072:IDCHOPdcpY+NzQcvJIMPCCJMUCK6eKnt9JU6Od/KuMCu7EM38s1QDHhfkE7R:aKpYyQcBIPolh2XuMCuzQhkEV","tlshash":"d3e301ae1aa2990fcbd325305349c093e1b70ed5ba9363654bf13f96b6b2253e4fc500","first_seen":"2025-10-22T08:40:34.948219Z","last_seen":"2025-10-22T08:40:34.948219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:40:01.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:40:01 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 171832\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-29f38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171832,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"a10e7741ca561df0d3a66bb066b424b0","sha1":"17078a0d445f0f57c9a3ceb6dd701a6d3d7e36ce","sha256":"d375c83912d6a91c32361316098fb5db913e830dcb2d726128aeea06fe7f9bd3","sha512":"622ae7f1a1c1e6ef62c6d10956ce0bd0e88209c523e3203486cf77e95de368aa2b95e1408b285706a8805e0de381438661a74de48abebbe3111851875a99a67e","ssdeep":"3072:+3hvHGSl3qSH/7FmfpNZo9NIi5OR+ssYl0CFiQj4KObDiDAZz:+35R3qY/ePo3IiOMY7kmVOniDA9","tlshash":"4bf3021ff2e4a84bc787c27093c6c2ebdab34d95e24217094636bd7170bd6e6e50471a","first_seen":"2025-10-22T08:40:34.938189Z","last_seen":"2025-10-22T08:40:34.938189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:40:04.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:40:04 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 2542136\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-26ca38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2542136,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"49324e125f276158c60d0addcb9e0243","sha1":"013f65334288f3e4f6e3869f89a0ff24dd29b7ce","sha256":"1525a2e744956ef80ac9cbe46f6ecee25b1952cb57872a4f7b9e10d6561bcf2d","sha512":"935d2fcb2fe76468406dcdd3806decb99d8b123fd174a19b0764e99b2ff23a53b6d2b0591206eea8737f6018518b5f6f97d67b12626fa5fcebb2fa0df4ccbb58","ssdeep":"24576:F4zepSrrlF0n0e6B0ICLgbUTrNq/GzlbsIjrXM/2czl26CUpy21/6:F4zs/6TCLggTrxR3jrM/JVm4/6","tlshash":"fd25234ebbfd4d43cdb6d3b00384da44e2704c409e2e6bd718a5ba8bf8ba6c9d454578","first_seen":"2025-10-22T08:40:34.968708Z","last_seen":"2025-10-22T08:40:34.968708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":506,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:40:01.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:40:01 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 3230968\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-314cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3230968,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"3fc7b498b073ab845efefeb26f564baa","sha1":"83e0d81938c8d2aead545325ea9a4201c13b24f0","sha256":"e84edc0e6fd74291b4945a6326794179a391e4fa0629c0f2d553de26e15361c8","sha512":"c8c4a981b3ffe3c9d266bf9e392a7df125cc033087fab9813dd199887a869636ffc1b5850002e8fe1e475d902116c8142fd3bdb11275d3d248109e11b5abbf06","ssdeep":"24576:/PXevNE6XFRKURm2mrlbL8W0VfNkGWogBpGX8KBxNc0Kjdd48wPEAc:/mVDHm2IxoFk9h2X8WNFE48wpc","tlshash":"ee25232e32d4ee55ce2061b22a0cdba1c0f54d2866849f7b4257f919faff6d0c5244fa","first_seen":"2025-10-22T08:40:34.99877Z","last_seen":"2025-10-22T08:40:34.99877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":646,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/js/jquery.min.js","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:47.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ag2m4.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 08:09:31 GMT","end":"Sat, 03 Jan 2026 09:07:57 GMT"},"fingerprint":{"sha1":"66:C3:2A:1C:63:DB:29:46:CF:58:47:B8:E2:7F:9B:F8:16:55:B5:DC","sha256":"BD:F3:FA:89:8F:37:6D:EE:3B:05:B4:3B:A7:B7:AD:E7:DD:8F:1A:AA:86:46:2C:36:D4:13:A4:EA:25:45:98:0E"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: x.ag2m4.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/embed-0z6utgknx8ew.html\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 08:39:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 03 Mar 2021 00:27:20 GMT\r\netag: \"603ed7e8-15d9d\"\r\nexpires: Sun, 26 Oct 2025 12:01:25 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 247101\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lgkXZODGNn9HIzejw%2F2vvUkwenqxN6dBpcvM2T22MRrPoiJKU%2B1hhc5hBNJgd1PrALuEen9tOM5O8AtLMvvKwvuSIhpgOOfNfw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9927afa7bc74b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-03T16:29:13.319659Z","times_seen":444520,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"x.ag2m4.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/,0z6utgknx8ew_n,.urlset/master.m3u8?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:47.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/,0z6utgknx8ew_n,.urlset/master.m3u8?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:47 GMT\r\nContent-Type: application/vnd.apple.mpegurl\r\nLast-Modified: Wed, 22 Oct 2025 08:39:47 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Tue, 27 Jan 2026 11:24:45 GMT\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1287,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, Unicode text, UTF-8 text, with very long lines (319)","md5":"788054090e690a727ef5ebea81cdbf98","sha1":"3f2df1a03e7270528a696fc40aa12d39e6856589","sha256":"793750b33ff7a9a6da9686fc6c4a6e3706f5fd334bee01f1a7c0f94f4208aff4","sha512":"d3b0afe4c70de39d319325454fc223fa3b95aae43b3b6496f567c216442d0d4a395b388b0b3aff384aba6276f99cbed71ef1255d9fab63eb6c6d6f656d08508b","ssdeep":"","tlshash":"bb21cc85a84da597383894c50e8471192fe12d87affc3734646c2241bb95c213aefa45","first_seen":"2025-10-22T08:40:35.033001Z","last_seen":"2025-10-22T08:40:35.033001Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":78,"dns":28,"connect":19,"send":0,"wait":19,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/js/xupload.js","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:47.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ag2m4.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 08:09:31 GMT","end":"Sat, 03 Jan 2026 09:07:57 GMT"},"fingerprint":{"sha1":"66:C3:2A:1C:63:DB:29:46:CF:58:47:B8:E2:7F:9B:F8:16:55:B5:DC","sha256":"BD:F3:FA:89:8F:37:6D:EE:3B:05:B4:3B:A7:B7:AD:E7:DD:8F:1A:AA:86:46:2C:36:D4:13:A4:EA:25:45:98:0E"}}},"request":{"raw":"GET /js/xupload.js HTTP/1.1\r\nHost: x.ag2m4.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/embed-0z6utgknx8ew.html\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 08:39:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 12 Jan 2023 11:18:46 GMT\r\netag: \"63bfec96-2a26\"\r\nexpires: Mon, 27 Oct 2025 20:33:08 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 129998\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fol3nI47b%2FIokPTtec7wEN3cDV9%2FkDZGlxcDX2RuyKV8GWpHZ9ICA3ucdH78iOczWz4SqqDgyOOTww7sjIRx5OgPyyMTpRaT0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9927afa7bc76b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10790,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"e7cb7dae1da48c74b41563b936111f97","sha1":"bda176bc9fd4060d50006cd31d8c25453362db70","sha256":"590c624e3400ed1e344d5c44f184356937d2704917289340ec5b099d35d5b9e8","sha512":"06ccc732465996d4b4531bc0a1e40cacbecc0e936a84e15132fda6839549358b9681494529128d493a70cd7ac1a913edea05b1facb97d8810290e9d6f9df451e","ssdeep":"192:7IKE9YGs1aGjrl6IsZWnrbll621w+4UWdRebMQ4WdReDyYQaQv7OsaaFg+BnqGQZ:EGyctBlV9GRebVReDyYS7OsaaF10fq3u","tlshash":"fc22674abaa339912a7731390bbf52043b398407114aca54bd5cd6c4af8452897ffbfd","first_seen":"2023-08-16T14:17:26Z","last_seen":"2026-04-03T06:04:44.359802Z","times_seen":606,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"x.ag2m4.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lups1.site/padisahbet.gif","fqdn":"lups1.site","domain":"lups1.site","tld":"site"},"ip":{"addr":"104.21.79.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:47.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lups1.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 09:59:38 GMT","end":"Thu, 01 Jan 2026 10:57:50 GMT"},"fingerprint":{"sha1":"29:B2:A3:57:82:0E:91:94:3C:E4:35:E8:86:44:3B:85:67:40:0A:AF","sha256":"55:7A:01:7B:61:F0:79:50:BB:69:AC:EA:07:AE:AD:F7:49:AC:3B:70:2A:C2:0F:00:77:89:CF:88:55:9E:21:7B"}}},"request":{"raw":"GET /padisahbet.gif HTTP/1.1\r\nHost: lups1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 08:39:47 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1651434\r\nserver: cloudflare\r\nlast-modified: Thu, 12 Jun 2025 17:43:14 GMT\r\netag: \"684b11b2-1932ea\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nage: 1097\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dMXYFJCxyirLtnMab8Lrm4c0yls4QWnXlwelj9%2FJJU3qza6W3%2FkZUL4YTqVyjrC4M4QRsJS1vqRGqGJQ%2FDkLvyu6T2dj%2BRU6\"}]}\r\ncf-ray: 9927afab5f477129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1651434,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 728 x 90","md5":"3a8993f8883aed595de58dc69653d122","sha1":"6483a0fcb33c41a778bf73198a382f0761088b02","sha256":"25fbb49b47c7e01fdd9c2c6e5e4abc602497f494ffc2e7a0078909e7aa5b293f","sha512":"61d5d7dab34edd7e5d373a486e22cacc2e620a05dffd137e222607f86f69f53bc1f4fd533dcc8a9f3ae0c8662c2d4ee83b47de397cb8136f1ebfb4193f6613fb","ssdeep":"24576:mGnKIMCtd3u/cjdEkSSirL+C1JIvf5QcppqmuK4MeHf:mGKIDa/cjd6Si+IOfW0pqmOMe/","tlshash":"e325332b58ac40d7a03a1d9509ce8f0a3e7330fbfc4da15d9232759a39a426fd685f47","first_seen":"2025-08-22T01:39:31.953339Z","last_seen":"2026-01-04T20:37:04.282908Z","times_seen":86,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":109,"dns":73,"connect":3,"send":0,"wait":10,"receive":143,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"lups1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:52.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:52 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 150776\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-24cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150776,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"ab54c542f613153835bf358e2405b353","sha1":"42c0e82be5a24088b0901e5abe0be2965bf6b45c","sha256":"b00ae34af063d637384529a141d1dfafeade733650b993c2e2a0d2497ddd9173","sha512":"37b953223fdfa35dcf6076513417485c11e75bde8cadf1d9736d98433003841867b92c6e2e756a36089771415592356bbca6785127e44d960b79b4490de2bc56","ssdeep":"3072:IDCHOPdcpY+NzQcvJIMPCCJMUCK6eKnt9JU6Od/KuMCu7EM38s1QDHhfkE7R:aKpYyQcBIPolh2XuMCuzQhkEV","tlshash":"d3e301ae1aa2990fcbd325305349c093e1b70ed5ba9363654bf13f96b6b2253e4fc500","first_seen":"2025-10-22T08:40:34.948219Z","last_seen":"2025-10-22T08:40:34.948219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:56.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:56 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 2542136\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-26ca38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2542136,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"49324e125f276158c60d0addcb9e0243","sha1":"013f65334288f3e4f6e3869f89a0ff24dd29b7ce","sha256":"1525a2e744956ef80ac9cbe46f6ecee25b1952cb57872a4f7b9e10d6561bcf2d","sha512":"935d2fcb2fe76468406dcdd3806decb99d8b123fd174a19b0764e99b2ff23a53b6d2b0591206eea8737f6018518b5f6f97d67b12626fa5fcebb2fa0df4ccbb58","ssdeep":"24576:F4zepSrrlF0n0e6B0ICLgbUTrNq/GzlbsIjrXM/2czl26CUpy21/6:F4zs/6TCLggTrxR3jrM/JVm4/6","tlshash":"fd25234ebbfd4d43cdb6d3b00384da44e2704c409e2e6bd718a5ba8bf8ba6c9d454578","first_seen":"2025-10-22T08:40:34.968708Z","last_seen":"2025-10-22T08:40:34.968708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":512,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/css/main.css","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:47.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ag2m4.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 08:09:31 GMT","end":"Sat, 03 Jan 2026 09:07:57 GMT"},"fingerprint":{"sha1":"66:C3:2A:1C:63:DB:29:46:CF:58:47:B8:E2:7F:9B:F8:16:55:B5:DC","sha256":"BD:F3:FA:89:8F:37:6D:EE:3B:05:B4:3B:A7:B7:AD:E7:DD:8F:1A:AA:86:46:2C:36:D4:13:A4:EA:25:45:98:0E"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: x.ag2m4.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/embed-0z6utgknx8ew.html\r\nCookie: lang=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 08:39:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 18 May 2023 18:01:36 GMT\r\netag: W/\"64666800-c05b\"\r\nexpires: Thu, 23 Oct 2025 05:24:18 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 530128\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kOdlHtHtsIQgYf0i2301dXTzlmXowa4G4fFm5Xu9oq%2B53M1v9KE4OYdEt6JxTNvDVsNd7hXo%2BWm7AzcfbN5%2F9BPLNf633fBGqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9927afa7bc71b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49243,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"40fa099cd62886ddda0afde4ef18cc84","sha1":"4c53f2b1e903260eeeff8c4f78b1562e015e1951","sha256":"57fd276195b1343bb4664915c74396b2331de23b3a778e05e85c149db2332d55","sha512":"d360bcb45964adc2756e33f7402775cc883e4710864d945a60caba1e33cd70b530de7613ffb853ed062f43dfbf2e471472e92174ec9b392b8200d23dba92f7a0","ssdeep":"1536:AQV8FxnYgp9ry2vYsRwq9AOOGvC4DONaY93Rz:AQVMxnYSy2v/AOOk4Rz","tlshash":"aa238422a7812c0cf06bd1b67d6197d6233e4053d92b1f7c7ab93578c28e4e85173b9a","first_seen":"2023-10-26T04:52:23Z","last_seen":"2026-03-31T00:38:52.399402Z","times_seen":881,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"x.ag2m4.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waust.at/s.js","fqdn":"waust.at","domain":"waust.at","tld":"at"},"ip":{"addr":"104.26.5.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:47.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waust.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 17:56:52 GMT","end":"Thu, 15 Jan 2026 18:56:42 GMT"},"fingerprint":{"sha1":"D0:1C:48:C2:85:E7:70:B5:92:4E:44:F7:D2:C4:15:9A:33:43:58:F4","sha256":"82:9E:D2:CA:61:8C:47:66:66:E2:86:1F:A9:23:F7:BB:B0:62:3E:0C:6C:96:EA:60:DC:51:D9:97:87:8A:98:6B"}}},"request":{"raw":"GET /s.js HTTP/1.1\r\nHost: waust.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 08:39:47 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 17 Oct 2025 17:05:25 GMT\r\netag: \"68f27755-1e0e\"\r\nexpires: Thu, 23 Oct 2025 08:16:48 GMT\r\ncache-control: max-age=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 1379\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vz90dvwS6eHDJ33ln9F1Ky%2FPhq4KbmH5RLCKUlDwebQ6TQUUQr6QRpCfrsGROj39nNOvvCSgh49padm3bxTPzeYQluz0\"}]}\r\nserver: cloudflare\r\ncf-ray: 9927afa81b9356a2-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7694,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (7694), with no line terminators","md5":"7622b281a43fa62a6fae065a55606494","sha1":"dd80aba33691a79d6d51e8500532dafb8ae2655c","sha256":"f807fad61b514259fb7678ec3b99c0aa533becd8e6831a0ef0a58226a0c0a47c","sha512":"a88c5f29e686f81bbc0378c228a0900dc675c1b7c8e24cbd56da392622b8293b52f04eafc882655a5be066bab09e4b861d6b5a9c8a569ca7edf2dd161745cd40","ssdeep":"96:t5uENgm/Zi2sSNuYMb8NORDvckw9AVDx+ll8tbPmSQ2sCq0jjaNr0Bqwjnu8QIi9:VP4BbvjPVDxptbPmd2FBHjulIGQKG+I8","tlshash":"49f1c676315314765ffa10a5616fb305b831517baf869001809e84b826acf4f91eafbb","first_seen":"2025-09-28T04:53:54.905455Z","last_seen":"2025-11-27T17:16:00.073479Z","times_seen":375,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":47,"dns":34,"connect":1,"send":0,"wait":7,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"waust.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:58.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:58 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 3230968\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-314cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3230968,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"3fc7b498b073ab845efefeb26f564baa","sha1":"83e0d81938c8d2aead545325ea9a4201c13b24f0","sha256":"e84edc0e6fd74291b4945a6326794179a391e4fa0629c0f2d553de26e15361c8","sha512":"c8c4a981b3ffe3c9d266bf9e392a7df125cc033087fab9813dd199887a869636ffc1b5850002e8fe1e475d902116c8142fd3bdb11275d3d248109e11b5abbf06","ssdeep":"24576:/PXevNE6XFRKURm2mrlbL8W0VfNkGWogBpGX8KBxNc0Kjdd48wPEAc:/mVDHm2IxoFk9h2X8WNFE48wpc","tlshash":"ee25232e32d4ee55ce2061b22a0cdba1c0f54d2866849f7b4257f919faff6d0c5244fa","first_seen":"2025-10-22T08:40:34.99877Z","last_seen":"2025-10-22T08:40:34.99877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":688,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":668,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:40:02.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:40:02 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 150776\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-24cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150776,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"ab54c542f613153835bf358e2405b353","sha1":"42c0e82be5a24088b0901e5abe0be2965bf6b45c","sha256":"b00ae34af063d637384529a141d1dfafeade733650b993c2e2a0d2497ddd9173","sha512":"37b953223fdfa35dcf6076513417485c11e75bde8cadf1d9736d98433003841867b92c6e2e756a36089771415592356bbca6785127e44d960b79b4490de2bc56","ssdeep":"3072:IDCHOPdcpY+NzQcvJIMPCCJMUCK6eKnt9JU6Od/KuMCu7EM38s1QDHhfkE7R:aKpYyQcBIPolh2XuMCuzQhkEV","tlshash":"d3e301ae1aa2990fcbd325305349c093e1b70ed5ba9363654bf13f96b6b2253e4fc500","first_seen":"2025-10-22T08:40:34.948219Z","last_seen":"2025-10-22T08:40:34.948219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:40:04.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:40:04 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 150776\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-24cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150776,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"ab54c542f613153835bf358e2405b353","sha1":"42c0e82be5a24088b0901e5abe0be2965bf6b45c","sha256":"b00ae34af063d637384529a141d1dfafeade733650b993c2e2a0d2497ddd9173","sha512":"37b953223fdfa35dcf6076513417485c11e75bde8cadf1d9736d98433003841867b92c6e2e756a36089771415592356bbca6785127e44d960b79b4490de2bc56","ssdeep":"3072:IDCHOPdcpY+NzQcvJIMPCCJMUCK6eKnt9JU6Od/KuMCu7EM38s1QDHhfkE7R:aKpYyQcBIPolh2XuMCuzQhkEV","tlshash":"d3e301ae1aa2990fcbd325305349c093e1b70ed5ba9363654bf13f96b6b2253e4fc500","first_seen":"2025-10-22T08:40:34.948219Z","last_seen":"2025-10-22T08:40:34.948219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:49.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:49 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 150776\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-24cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150776,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"ab54c542f613153835bf358e2405b353","sha1":"42c0e82be5a24088b0901e5abe0be2965bf6b45c","sha256":"b00ae34af063d637384529a141d1dfafeade733650b993c2e2a0d2497ddd9173","sha512":"37b953223fdfa35dcf6076513417485c11e75bde8cadf1d9736d98433003841867b92c6e2e756a36089771415592356bbca6785127e44d960b79b4490de2bc56","ssdeep":"3072:IDCHOPdcpY+NzQcvJIMPCCJMUCK6eKnt9JU6Od/KuMCu7EM38s1QDHhfkE7R:aKpYyQcBIPolh2XuMCuzQhkEV","tlshash":"d3e301ae1aa2990fcbd325305349c093e1b70ed5ba9363654bf13f96b6b2253e4fc500","first_seen":"2025-10-22T08:40:34.948219Z","last_seen":"2025-10-22T08:40:34.948219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:49.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:49 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 2542136\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-26ca38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2542136,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"49324e125f276158c60d0addcb9e0243","sha1":"013f65334288f3e4f6e3869f89a0ff24dd29b7ce","sha256":"1525a2e744956ef80ac9cbe46f6ecee25b1952cb57872a4f7b9e10d6561bcf2d","sha512":"935d2fcb2fe76468406dcdd3806decb99d8b123fd174a19b0764e99b2ff23a53b6d2b0591206eea8737f6018518b5f6f97d67b12626fa5fcebb2fa0df4ccbb58","ssdeep":"24576:F4zepSrrlF0n0e6B0ICLgbUTrNq/GzlbsIjrXM/2czl26CUpy21/6:F4zs/6TCLggTrxR3jrM/JVm4/6","tlshash":"fd25234ebbfd4d43cdb6d3b00384da44e2704c409e2e6bd718a5ba8bf8ba6c9d454578","first_seen":"2025-10-22T08:40:34.968708Z","last_seen":"2025-10-22T08:40:34.968708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":508,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:58.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:58 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 2542136\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-26ca38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2542136,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"49324e125f276158c60d0addcb9e0243","sha1":"013f65334288f3e4f6e3869f89a0ff24dd29b7ce","sha256":"1525a2e744956ef80ac9cbe46f6ecee25b1952cb57872a4f7b9e10d6561bcf2d","sha512":"935d2fcb2fe76468406dcdd3806decb99d8b123fd174a19b0764e99b2ff23a53b6d2b0591206eea8737f6018518b5f6f97d67b12626fa5fcebb2fa0df4ccbb58","ssdeep":"24576:F4zepSrrlF0n0e6B0ICLgbUTrNq/GzlbsIjrXM/2czl26CUpy21/6:F4zs/6TCLggTrxR3jrM/JVm4/6","tlshash":"fd25234ebbfd4d43cdb6d3b00384da44e2704c409e2e6bd718a5ba8bf8ba6c9d454578","first_seen":"2025-10-22T08:40:34.968708Z","last_seen":"2025-10-22T08:40:34.968708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":506,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:58.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:58 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 171832\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-29f38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171832,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"a10e7741ca561df0d3a66bb066b424b0","sha1":"17078a0d445f0f57c9a3ceb6dd701a6d3d7e36ce","sha256":"d375c83912d6a91c32361316098fb5db913e830dcb2d726128aeea06fe7f9bd3","sha512":"622ae7f1a1c1e6ef62c6d10956ce0bd0e88209c523e3203486cf77e95de368aa2b95e1408b285706a8805e0de381438661a74de48abebbe3111851875a99a67e","ssdeep":"3072:+3hvHGSl3qSH/7FmfpNZo9NIi5OR+ssYl0CFiQj4KObDiDAZz:+35R3qY/ePo3IiOMY7kmVOniDA9","tlshash":"4bf3021ff2e4a84bc787c27093c6c2ebdab34d95e24217094636bd7170bd6e6e50471a","first_seen":"2025-10-22T08:40:34.938189Z","last_seen":"2025-10-22T08:40:34.938189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:40:01.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:40:01 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 150776\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-24cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150776,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"ab54c542f613153835bf358e2405b353","sha1":"42c0e82be5a24088b0901e5abe0be2965bf6b45c","sha256":"b00ae34af063d637384529a141d1dfafeade733650b993c2e2a0d2497ddd9173","sha512":"37b953223fdfa35dcf6076513417485c11e75bde8cadf1d9736d98433003841867b92c6e2e756a36089771415592356bbca6785127e44d960b79b4490de2bc56","ssdeep":"3072:IDCHOPdcpY+NzQcvJIMPCCJMUCK6eKnt9JU6Od/KuMCu7EM38s1QDHhfkE7R:aKpYyQcBIPolh2XuMCuzQhkEV","tlshash":"d3e301ae1aa2990fcbd325305349c093e1b70ed5ba9363654bf13f96b6b2253e4fc500","first_seen":"2025-10-22T08:40:34.948219Z","last_seen":"2025-10-22T08:40:34.948219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/index-a1.m3u8?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:47.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/index-a1.m3u8?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:47 GMT\r\nContent-Type: application/vnd.apple.mpegurl\r\nLast-Modified: Wed, 22 Oct 2025 08:39:47 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76343,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"fed026dbe1af050fc77a0549fa100161","sha1":"dd63520e0d33d8350c35ddc479b0ee9ab5ab1e14","sha256":"286df4cf48144a4297ebfe63256089ae60f5ce54b9d83750581a63b76f2c5eff","sha512":"64c6eddc624e46e8db0948a3b8cc8098df49d3594adacd56f731e1071bbcaeb2441e250c0117334d99424fe0211e9426910878c9dde4d2594d9ef1c2df2d920a","ssdeep":"96:TfNEiE9EwEhEoEvE8ETEREgEVE+E1EeEjESE7E4E8E7EaErEWEZEGEpEkEFE5EqL:TotqJnv/DcT","tlshash":"27730e96888a6ad7243c98c90b8062555ef01c877fbc3bb8543c3245bf64c553aefbd6","first_seen":"2025-10-22T08:40:35.101164Z","last_seen":"2025-10-22T08:40:35.101164Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:54.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:54 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 171832\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-29f38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171832,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"a10e7741ca561df0d3a66bb066b424b0","sha1":"17078a0d445f0f57c9a3ceb6dd701a6d3d7e36ce","sha256":"d375c83912d6a91c32361316098fb5db913e830dcb2d726128aeea06fe7f9bd3","sha512":"622ae7f1a1c1e6ef62c6d10956ce0bd0e88209c523e3203486cf77e95de368aa2b95e1408b285706a8805e0de381438661a74de48abebbe3111851875a99a67e","ssdeep":"3072:+3hvHGSl3qSH/7FmfpNZo9NIi5OR+ssYl0CFiQj4KObDiDAZz:+35R3qY/ePo3IiOMY7kmVOniDA9","tlshash":"4bf3021ff2e4a84bc787c27093c6c2ebdab34d95e24217094636bd7170bd6e6e50471a","first_seen":"2025-10-22T08:40:34.938189Z","last_seen":"2025-10-22T08:40:34.938189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:40:04.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:40:04 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 171832\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-29f38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171832,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"a10e7741ca561df0d3a66bb066b424b0","sha1":"17078a0d445f0f57c9a3ceb6dd701a6d3d7e36ce","sha256":"d375c83912d6a91c32361316098fb5db913e830dcb2d726128aeea06fe7f9bd3","sha512":"622ae7f1a1c1e6ef62c6d10956ce0bd0e88209c523e3203486cf77e95de368aa2b95e1408b285706a8805e0de381438661a74de48abebbe3111851875a99a67e","ssdeep":"3072:+3hvHGSl3qSH/7FmfpNZo9NIi5OR+ssYl0CFiQj4KObDiDAZz:+35R3qY/ePo3IiOMY7kmVOniDA9","tlshash":"4bf3021ff2e4a84bc787c27093c6c2ebdab34d95e24217094636bd7170bd6e6e50471a","first_seen":"2025-10-22T08:40:34.938189Z","last_seen":"2025-10-22T08:40:34.938189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:48.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:48 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 171832\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-29f38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171832,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"a10e7741ca561df0d3a66bb066b424b0","sha1":"17078a0d445f0f57c9a3ceb6dd701a6d3d7e36ce","sha256":"d375c83912d6a91c32361316098fb5db913e830dcb2d726128aeea06fe7f9bd3","sha512":"622ae7f1a1c1e6ef62c6d10956ce0bd0e88209c523e3203486cf77e95de368aa2b95e1408b285706a8805e0de381438661a74de48abebbe3111851875a99a67e","ssdeep":"3072:+3hvHGSl3qSH/7FmfpNZo9NIi5OR+ssYl0CFiQj4KObDiDAZz:+35R3qY/ePo3IiOMY7kmVOniDA9","tlshash":"4bf3021ff2e4a84bc787c27093c6c2ebdab34d95e24217094636bd7170bd6e6e50471a","first_seen":"2025-10-22T08:40:34.938189Z","last_seen":"2025-10-22T08:40:34.938189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:57.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:57 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 3230968\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-314cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3230968,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"3fc7b498b073ab845efefeb26f564baa","sha1":"83e0d81938c8d2aead545325ea9a4201c13b24f0","sha256":"e84edc0e6fd74291b4945a6326794179a391e4fa0629c0f2d553de26e15361c8","sha512":"c8c4a981b3ffe3c9d266bf9e392a7df125cc033087fab9813dd199887a869636ffc1b5850002e8fe1e475d902116c8142fd3bdb11275d3d248109e11b5abbf06","ssdeep":"24576:/PXevNE6XFRKURm2mrlbL8W0VfNkGWogBpGX8KBxNc0Kjdd48wPEAc:/mVDHm2IxoFk9h2X8WNFE48wpc","tlshash":"ee25232e32d4ee55ce2061b22a0cdba1c0f54d2866849f7b4257f919faff6d0c5244fa","first_seen":"2025-10-22T08:40:34.99877Z","last_seen":"2025-10-22T08:40:34.99877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":647,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:59.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:59 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 150776\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-24cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150776,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"ab54c542f613153835bf358e2405b353","sha1":"42c0e82be5a24088b0901e5abe0be2965bf6b45c","sha256":"b00ae34af063d637384529a141d1dfafeade733650b993c2e2a0d2497ddd9173","sha512":"37b953223fdfa35dcf6076513417485c11e75bde8cadf1d9736d98433003841867b92c6e2e756a36089771415592356bbca6785127e44d960b79b4490de2bc56","ssdeep":"3072:IDCHOPdcpY+NzQcvJIMPCCJMUCK6eKnt9JU6Od/KuMCu7EM38s1QDHhfkE7R:aKpYyQcBIPolh2XuMCuzQhkEV","tlshash":"d3e301ae1aa2990fcbd325305349c093e1b70ed5ba9363654bf13f96b6b2253e4fc500","first_seen":"2025-10-22T08:40:34.948219Z","last_seen":"2025-10-22T08:40:34.948219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:40:02.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:40:02 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 2542136\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-26ca38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2542136,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"49324e125f276158c60d0addcb9e0243","sha1":"013f65334288f3e4f6e3869f89a0ff24dd29b7ce","sha256":"1525a2e744956ef80ac9cbe46f6ecee25b1952cb57872a4f7b9e10d6561bcf2d","sha512":"935d2fcb2fe76468406dcdd3806decb99d8b123fd174a19b0764e99b2ff23a53b6d2b0591206eea8737f6018518b5f6f97d67b12626fa5fcebb2fa0df4ccbb58","ssdeep":"24576:F4zepSrrlF0n0e6B0ICLgbUTrNq/GzlbsIjrXM/2czl26CUpy21/6:F4zs/6TCLggTrxR3jrM/JVm4/6","tlshash":"fd25234ebbfd4d43cdb6d3b00384da44e2704c409e2e6bd718a5ba8bf8ba6c9d454578","first_seen":"2025-10-22T08:40:34.968708Z","last_seen":"2025-10-22T08:40:34.968708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":506,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:40:03.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:40:03 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 3230968\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-314cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3230968,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"3fc7b498b073ab845efefeb26f564baa","sha1":"83e0d81938c8d2aead545325ea9a4201c13b24f0","sha256":"e84edc0e6fd74291b4945a6326794179a391e4fa0629c0f2d553de26e15361c8","sha512":"c8c4a981b3ffe3c9d266bf9e392a7df125cc033087fab9813dd199887a869636ffc1b5850002e8fe1e475d902116c8142fd3bdb11275d3d248109e11b5abbf06","ssdeep":"24576:/PXevNE6XFRKURm2mrlbL8W0VfNkGWogBpGX8KBxNc0Kjdd48wPEAc:/mVDHm2IxoFk9h2X8WNFE48wpc","tlshash":"ee25232e32d4ee55ce2061b22a0cdba1c0f54d2866849f7b4257f919faff6d0c5244fa","first_seen":"2025-10-22T08:40:34.99877Z","last_seen":"2025-10-22T08:40:34.99877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":668,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:40:05.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:40:05 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 2542136\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-26ca38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2542136,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"49324e125f276158c60d0addcb9e0243","sha1":"013f65334288f3e4f6e3869f89a0ff24dd29b7ce","sha256":"1525a2e744956ef80ac9cbe46f6ecee25b1952cb57872a4f7b9e10d6561bcf2d","sha512":"935d2fcb2fe76468406dcdd3806decb99d8b123fd174a19b0764e99b2ff23a53b6d2b0591206eea8737f6018518b5f6f97d67b12626fa5fcebb2fa0df4ccbb58","ssdeep":"24576:F4zepSrrlF0n0e6B0ICLgbUTrNq/GzlbsIjrXM/2czl26CUpy21/6:F4zs/6TCLggTrxR3jrM/JVm4/6","tlshash":"fd25234ebbfd4d43cdb6d3b00384da44e2704c409e2e6bd718a5ba8bf8ba6c9d454578","first_seen":"2025-10-22T08:40:34.968708Z","last_seen":"2025-10-22T08:40:34.968708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":509,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:40:06.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:40:06 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 3230968\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-314cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3230968,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"3fc7b498b073ab845efefeb26f564baa","sha1":"83e0d81938c8d2aead545325ea9a4201c13b24f0","sha256":"e84edc0e6fd74291b4945a6326794179a391e4fa0629c0f2d553de26e15361c8","sha512":"c8c4a981b3ffe3c9d266bf9e392a7df125cc033087fab9813dd199887a869636ffc1b5850002e8fe1e475d902116c8142fd3bdb11275d3d248109e11b5abbf06","ssdeep":"24576:/PXevNE6XFRKURm2mrlbL8W0VfNkGWogBpGX8KBxNc0Kjdd48wPEAc:/mVDHm2IxoFk9h2X8WNFE48wpc","tlshash":"ee25232e32d4ee55ce2061b22a0cdba1c0f54d2866849f7b4257f919faff6d0c5244fa","first_seen":"2025-10-22T08:40:34.99877Z","last_seen":"2025-10-22T08:40:34.99877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":655,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/js/dnsads.js","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:47.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ag2m4.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 08:09:31 GMT","end":"Sat, 03 Jan 2026 09:07:57 GMT"},"fingerprint":{"sha1":"66:C3:2A:1C:63:DB:29:46:CF:58:47:B8:E2:7F:9B:F8:16:55:B5:DC","sha256":"BD:F3:FA:89:8F:37:6D:EE:3B:05:B4:3B:A7:B7:AD:E7:DD:8F:1A:AA:86:46:2C:36:D4:13:A4:EA:25:45:98:0E"}}},"request":{"raw":"GET /js/dnsads.js HTTP/1.1\r\nHost: x.ag2m4.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/embed-0z6utgknx8ew.html\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 08:39:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Sep 2021 15:50:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 26 Oct 2025 12:01:26 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 247100\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gzWGpGavF89mAEbQPGrLG2o3de%2BiWXbj4r1JCvb74%2F8%2Fk7UFxOAH3GvFe9dLFde%2Fc2s0Znqt%2BUfNEBWCQKhwMsunIcS5eYP9aA%3D%3D\"}]}\r\netag: W/\"613f7336-26\"\r\ncontent-encoding: br\r\ncf-ray: 9927afa7cc7fb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"99eccae6afa72c589ae54b5c3890282a","sha1":"0f102f8f5b556635de65d16cf70fa8269c6761b4","sha256":"b74a58316385de04b054737776e71c160cd60d2d01b5440b32c21651fb0ab8d3","sha512":"01bc413c1695c125b8ab111c60974da99989b618fb674631d998db519996966c569503efb97a3c760b50069e87b6b42891985b00c64810a43935ada075a19d24","ssdeep":"","tlshash":"eb8000ee08e2bcbec02c0000000e02a802b00c00a023ac20a00e8e0233e2e20c228c3a","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-01T22:14:46.458669Z","times_seen":2580,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"x.ag2m4.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/player/pjs/playerjs.js","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:47.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ag2m4.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 08:09:31 GMT","end":"Sat, 03 Jan 2026 09:07:57 GMT"},"fingerprint":{"sha1":"66:C3:2A:1C:63:DB:29:46:CF:58:47:B8:E2:7F:9B:F8:16:55:B5:DC","sha256":"BD:F3:FA:89:8F:37:6D:EE:3B:05:B4:3B:A7:B7:AD:E7:DD:8F:1A:AA:86:46:2C:36:D4:13:A4:EA:25:45:98:0E"}}},"request":{"raw":"GET /player/pjs/playerjs.js HTTP/1.1\r\nHost: x.ag2m4.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/embed-0z6utgknx8ew.html\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 08:39:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 05 Oct 2025 09:36:52 GMT\r\netag: \"e0c52-64066132df5a8\"\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 5597\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fmx5zu8Fv2lE7at71MWkitCfSbaEL4ZjX2F3aSAySIn4rA1O7WGUFdbi4%2BdXnMn%2FPZm%2FKYC88yz6sCYAE84TsKZx9UwyWUQ6Lw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9927afa7cc7cb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":920658,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65448)","md5":"754aaea4f0a5130da856bd4d6be1bda4","sha1":"4820938cbe75d8475088cf7f8025caf0b7663918","sha256":"0402d2acb737545b06f9ce6f881f86cdb24b219f225a92da9ab2c378a5eedbb2","sha512":"ed587e6038788d2abd8216ca0ea253dc7fc6b201503746467e540edd6b7b87047a6f61ea950715c72482014a25a5e146e6e33a91129ed523bcadc824f4e7bcf0","ssdeep":"12288:5yon8bUJpDDtp3KemFvbVjGRmMlTLQYMUOvBvMUo2dSvRz8qPGZRqKxyXZ0EPi:7mG3l8ARz8qUqKxU0EPi","tlshash":"4e157dea37a0601757dab069643f851a2b3a240a184bc06cfd2edcc75d75548e87bf3b","first_seen":"2025-10-12T23:22:51.943786Z","last_seen":"2025-10-25T19:50:15.069349Z","times_seen":15,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"x.ag2m4.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lups1.site/betoffice.gif","fqdn":"lups1.site","domain":"lups1.site","tld":"site"},"ip":{"addr":"104.21.79.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:47.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lups1.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 09:59:38 GMT","end":"Thu, 01 Jan 2026 10:57:50 GMT"},"fingerprint":{"sha1":"29:B2:A3:57:82:0E:91:94:3C:E4:35:E8:86:44:3B:85:67:40:0A:AF","sha256":"55:7A:01:7B:61:F0:79:50:BB:69:AC:EA:07:AE:AD:F7:49:AC:3B:70:2A:C2:0F:00:77:89:CF:88:55:9E:21:7B"}}},"request":{"raw":"GET /betoffice.gif HTTP/1.1\r\nHost: lups1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 08:39:47 GMT\r\ncontent-type: image/gif\r\ncontent-length: 532734\r\nserver: cloudflare\r\nlast-modified: Thu, 12 Jun 2025 17:43:14 GMT\r\netag: \"684b11b2-820fe\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nage: 1097\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9wtZuiRLQhIUUw7e5H3enVwKCOMiT7ftCeNu9iPYvClOwZidmJyzXR3dqJgvxSDcpj63Fg9Eu3S2HeE53AIC2cy3tbAxItF0\"}]}\r\ncf-ray: 9927afab5f457129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":532734,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 728 x 90","md5":"3c427d417b2b45a58e89cc7ffb460fcb","sha1":"509dda7399f4b5c85e667d87715ea1b0fff5af9c","sha256":"a6e2d9978877f9d439b9c89d0b0818fceb07e32ee53f821ef2a6ec84e0c242b2","sha512":"f29486349278bbd98fb27fc5a5c45f07b029b010166f63f3982222e15371c3dd72f44b3f4e192e1eaeedb8744c636703737bd7d3b2efc468263d6141f95de1e0","ssdeep":"12288:vLB1S9+N9Vy+No0Wqu26s6DzX1cDM7m0f9AwobvUUWRY:XPzNo0W9DJ4w2vUUWK","tlshash":"25b4239e09eec32403e3a77f1a6ffe890a3d19e2083c1e076ed7d26956471af90e5500","first_seen":"2025-06-22T10:13:07.566083Z","last_seen":"2025-11-18T05:21:35.257733Z","times_seen":24,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":104,"dns":0,"connect":1,"send":0,"wait":10,"receive":33,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"lups1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/index-v1-a1.m3u8?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:47.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/index-v1-a1.m3u8?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:47 GMT\r\nContent-Type: application/vnd.apple.mpegurl\r\nLast-Modified: Wed, 22 Oct 2025 08:39:47 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Tue, 27 Jan 2026 11:24:45 GMT\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77506,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"8a3238640561362db8dccc7843485d62","sha1":"2a3c9d82f271e227fbd86c5a033ee0d8278e4480","sha256":"69849751089dc5d7c343d9e4eab603e7d19ddb148f24967ba10f0aaecc5af581","sha512":"ae47b73b8a91cecd9611a8c0adc1f2fb377d321a721def35082cb41536cd9ac4bc5e8ffe6a809937e5f7c420bb54717fd3781d8439e0ab1f486543997acda90c","ssdeep":"96:Tf/EQ7E1E0ELEaEpE4EPELE0EpEaEnEwE1EGEzES7EYEvEuEdE8ETECExEQEHEN8:TVmH53tk77U1vm","tlshash":"2873c7968886a6d7243c98c90fc0b1595ef02c8b7ebc3ab8542c3245bf64c557eef785","first_seen":"2025-10-22T08:40:35.114551Z","last_seen":"2025-10-22T08:40:35.114551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:48.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:48 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 3230968\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-314cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3230968,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"3fc7b498b073ab845efefeb26f564baa","sha1":"83e0d81938c8d2aead545325ea9a4201c13b24f0","sha256":"e84edc0e6fd74291b4945a6326794179a391e4fa0629c0f2d553de26e15361c8","sha512":"c8c4a981b3ffe3c9d266bf9e392a7df125cc033087fab9813dd199887a869636ffc1b5850002e8fe1e475d902116c8142fd3bdb11275d3d248109e11b5abbf06","ssdeep":"24576:/PXevNE6XFRKURm2mrlbL8W0VfNkGWogBpGX8KBxNc0Kjdd48wPEAc:/mVDHm2IxoFk9h2X8WNFE48wpc","tlshash":"ee25232e32d4ee55ce2061b22a0cdba1c0f54d2866849f7b4257f919faff6d0c5244fa","first_seen":"2025-10-22T08:40:34.99877Z","last_seen":"2025-10-22T08:40:34.99877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":654,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:40:01.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:40:01 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 2542136\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-26ca38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2542136,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"49324e125f276158c60d0addcb9e0243","sha1":"013f65334288f3e4f6e3869f89a0ff24dd29b7ce","sha256":"1525a2e744956ef80ac9cbe46f6ecee25b1952cb57872a4f7b9e10d6561bcf2d","sha512":"935d2fcb2fe76468406dcdd3806decb99d8b123fd174a19b0764e99b2ff23a53b6d2b0591206eea8737f6018518b5f6f97d67b12626fa5fcebb2fa0df4ccbb58","ssdeep":"24576:F4zepSrrlF0n0e6B0ICLgbUTrNq/GzlbsIjrXM/2czl26CUpy21/6:F4zs/6TCLggTrxR3jrM/JVm4/6","tlshash":"fd25234ebbfd4d43cdb6d3b00384da44e2704c409e2e6bd718a5ba8bf8ba6c9d454578","first_seen":"2025-10-22T08:40:34.968708Z","last_seen":"2025-10-22T08:40:34.968708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":506,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:40:04.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:40:04 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 3230968\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-314cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3230968,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"3fc7b498b073ab845efefeb26f564baa","sha1":"83e0d81938c8d2aead545325ea9a4201c13b24f0","sha256":"e84edc0e6fd74291b4945a6326794179a391e4fa0629c0f2d553de26e15361c8","sha512":"c8c4a981b3ffe3c9d266bf9e392a7df125cc033087fab9813dd199887a869636ffc1b5850002e8fe1e475d902116c8142fd3bdb11275d3d248109e11b5abbf06","ssdeep":"24576:/PXevNE6XFRKURm2mrlbL8W0VfNkGWogBpGX8KBxNc0Kjdd48wPEAc:/mVDHm2IxoFk9h2X8WNFE48wpc","tlshash":"ee25232e32d4ee55ce2061b22a0cdba1c0f54d2866849f7b4257f919faff6d0c5244fa","first_seen":"2025-10-22T08:40:34.99877Z","last_seen":"2025-10-22T08:40:34.99877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":642,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:40:06.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:40:06 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 171832\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-29f38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171832,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"a10e7741ca561df0d3a66bb066b424b0","sha1":"17078a0d445f0f57c9a3ceb6dd701a6d3d7e36ce","sha256":"d375c83912d6a91c32361316098fb5db913e830dcb2d726128aeea06fe7f9bd3","sha512":"622ae7f1a1c1e6ef62c6d10956ce0bd0e88209c523e3203486cf77e95de368aa2b95e1408b285706a8805e0de381438661a74de48abebbe3111851875a99a67e","ssdeep":"3072:+3hvHGSl3qSH/7FmfpNZo9NIi5OR+ssYl0CFiQj4KObDiDAZz:+35R3qY/ePo3IiOMY7kmVOniDA9","tlshash":"4bf3021ff2e4a84bc787c27093c6c2ebdab34d95e24217094636bd7170bd6e6e50471a","first_seen":"2025-10-22T08:40:34.938189Z","last_seen":"2025-10-22T08:40:34.938189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/i/?l=https%3A%2F%2Fx.ag2m4.cfd%2Fembed-0z6utgknx8ew.html\u0026j=","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"172.67.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:47.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtscout.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 12:11:28 GMT","end":"Sat, 29 Nov 2025 13:05:40 GMT"},"fingerprint":{"sha1":"8C:1A:8B:5A:0D:05:D0:E1:27:9B:25:7F:4F:AD:2F:0D:B4:F7:E5:14","sha256":"6E:3E:4E:99:17:89:21:6A:AA:63:31:A7:CE:8D:C6:4C:29:96:63:AE:64:9F:42:19:D7:28:92:10:03:EE:8D:75"}}},"request":{"raw":"GET /i/?l=https%3A%2F%2Fx.ag2m4.cfd%2Fembed-0z6utgknx8ew.html\u0026j= HTTP/1.1\r\nHost: t.dtscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 08:39:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-s: mtl2\r\nx-t: 0.528\r\nexpires: Wed, 22 Oct 2025 08:39:46 GMT\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d9YYWrZmH39MHHswex66Pnb5xCE2d5q9wXaSYpC%2FZ%2BeKfT2APDANM1Liv934tlXQbWF867zMOT1SNJXLTwuFlort7VotV%2Fb1JvBo%2BA%3D%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: df=1761122387; SameSite=None; Secure; Path=/; Domain=dtscout.com; Max-Age=8640000; Expires=Fri, 30 Jan 2026 08:39:47 GMT\r\ncf-ray: 9927afa8bc4ac759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2079,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2077)","md5":"51bd741af3fcc4984d1a753eebfa1141","sha1":"534664acf69cbbb5c9b97c96b63dd37bdc580da2","sha256":"3e9c8e5dcf3cbff9e1b7211551a31fe388f1b8e607fd78a0a34855be65da721c","sha512":"14958b02aed15cfa48facbdd8e8752ac7d1220631fb6af7658bcd5b804c0be52f9555a1d0ebe0bd68ee3a5f60164d97cbf020884d8757afaa3297d0768ab8886","ssdeep":"","tlshash":"0441a70bb5e9347813a2007a55ff235fb2324928ac1788c08196d804bc785faa1b6ea6","first_seen":"2023-03-07T01:03:00Z","last_seen":"2025-11-28T22:34:42.368027Z","times_seen":7807,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":38,"dns":21,"connect":1,"send":0,"wait":225,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.cdn77s.com/0z6utgknx8ew.jpg","fqdn":"img.cdn77s.com","domain":"cdn77s.com","tld":"com"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:47.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn77s.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 21:47:02 GMT","end":"Sun, 11 Jan 2026 22:45:44 GMT"},"fingerprint":{"sha1":"33:10:20:ED:93:74:93:F0:49:BF:13:78:05:5C:15:89:08:E3:7D:8D","sha256":"8D:93:E0:AF:7B:33:03:89:F0:E5:A8:3F:21:61:FA:AE:1F:62:27:0D:A0:88:CE:7A:7A:D9:0A:96:85:62:06:59"}}},"request":{"raw":"GET /0z6utgknx8ew.jpg HTTP/1.1\r\nHost: img.cdn77s.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 08:39:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27680\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 17 Sep 2023 09:48:22 GMT\r\netag: \"6506cb66-6c20\"\r\nexpires: Sun, 26 Oct 2025 11:24:46 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RMZ032lFdrVBvSHRhtjOHuCZJHf2D0ryEd9SknpU5EC9hIHU9gv4jio4zAValWQ704MDiW2KbPqsSje%2BXu5rJQ2F8BAeOhVTLjVpZA%3D%3D\"}]}\r\ncf-ray: 9927afaab9490b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27680,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc60.6.101\", baseline, precision 8, 720x405, components 3","md5":"42f023c7ef6026efb9970d40369c1a6e","sha1":"99993ee1e56e151e7316470dd8a4b61d763af19d","sha256":"f4ef8d6f456163d5ad0992f8050e8512b7057fc1e4b8fec79f92a55aea7aa8b3","sha512":"76839698887b6ce526607390639b57ac884b06d86b156d259bf5bda353028da3160fe96b83be6bdc5fc3410bdcc21d962e62af843bb6da3b0ab519e2b2c77d66","ssdeep":"768:i8MMgmO9Wwl56HOOzPzb3+YbBPFGpDKdQS:i8QdlloPzjZbBqDKB","tlshash":"57c2d09bc9a38835be58dab964fda4a783844b834391078cd40d3272fd5e412671f6fe","first_seen":"2025-10-22T08:40:35.11728Z","last_seen":"2025-10-22T08:40:35.11728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":41,"dns":23,"connect":1,"send":0,"wait":469,"receive":2,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/jzym3h","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:48.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"HEAD /jzym3h HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://x.ag2m4.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 404 Not Found\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ndate: Wed, 22 Oct 2025 08:39:48 GMT\r\nserver: sffe\r\ncontent-length: 1567\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T16:31:03.652024Z","times_seen":13295266,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":90,"dns":0,"connect":7,"send":0,"wait":16,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:51.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:51 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 171832\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-29f38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171832,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"a10e7741ca561df0d3a66bb066b424b0","sha1":"17078a0d445f0f57c9a3ceb6dd701a6d3d7e36ce","sha256":"d375c83912d6a91c32361316098fb5db913e830dcb2d726128aeea06fe7f9bd3","sha512":"622ae7f1a1c1e6ef62c6d10956ce0bd0e88209c523e3203486cf77e95de368aa2b95e1408b285706a8805e0de381438661a74de48abebbe3111851875a99a67e","ssdeep":"3072:+3hvHGSl3qSH/7FmfpNZo9NIi5OR+ssYl0CFiQj4KObDiDAZz:+35R3qY/ePo3IiOMY7kmVOniDA9","tlshash":"4bf3021ff2e4a84bc787c27093c6c2ebdab34d95e24217094636bd7170bd6e6e50471a","first_seen":"2025-10-22T08:40:34.938189Z","last_seen":"2025-10-22T08:40:34.938189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:51.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:51 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 3230968\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-314cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3230968,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"3fc7b498b073ab845efefeb26f564baa","sha1":"83e0d81938c8d2aead545325ea9a4201c13b24f0","sha256":"e84edc0e6fd74291b4945a6326794179a391e4fa0629c0f2d553de26e15361c8","sha512":"c8c4a981b3ffe3c9d266bf9e392a7df125cc033087fab9813dd199887a869636ffc1b5850002e8fe1e475d902116c8142fd3bdb11275d3d248109e11b5abbf06","ssdeep":"24576:/PXevNE6XFRKURm2mrlbL8W0VfNkGWogBpGX8KBxNc0Kjdd48wPEAc:/mVDHm2IxoFk9h2X8WNFE48wpc","tlshash":"ee25232e32d4ee55ce2061b22a0cdba1c0f54d2866849f7b4257f919faff6d0c5244fa","first_seen":"2025-10-22T08:40:34.99877Z","last_seen":"2025-10-22T08:40:34.99877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":652,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:40:00.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-v1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:40:00 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 3230968\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-314cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3230968,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"3fc7b498b073ab845efefeb26f564baa","sha1":"83e0d81938c8d2aead545325ea9a4201c13b24f0","sha256":"e84edc0e6fd74291b4945a6326794179a391e4fa0629c0f2d553de26e15361c8","sha512":"c8c4a981b3ffe3c9d266bf9e392a7df125cc033087fab9813dd199887a869636ffc1b5850002e8fe1e475d902116c8142fd3bdb11275d3d248109e11b5abbf06","ssdeep":"24576:/PXevNE6XFRKURm2mrlbL8W0VfNkGWogBpGX8KBxNc0Kjdd48wPEAc:/mVDHm2IxoFk9h2X8WNFE48wpc","tlshash":"ee25232e32d4ee55ce2061b22a0cdba1c0f54d2866849f7b4257f919faff6d0c5244fa","first_seen":"2025-10-22T08:40:34.99877Z","last_seen":"2025-10-22T08:40:34.99877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":674,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:40:03.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:40:03 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 171832\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-29f38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171832,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"a10e7741ca561df0d3a66bb066b424b0","sha1":"17078a0d445f0f57c9a3ceb6dd701a6d3d7e36ce","sha256":"d375c83912d6a91c32361316098fb5db913e830dcb2d726128aeea06fe7f9bd3","sha512":"622ae7f1a1c1e6ef62c6d10956ce0bd0e88209c523e3203486cf77e95de368aa2b95e1408b285706a8805e0de381438661a74de48abebbe3111851875a99a67e","ssdeep":"3072:+3hvHGSl3qSH/7FmfpNZo9NIi5OR+ssYl0CFiQj4KObDiDAZz:+35R3qY/ePo3IiOMY7kmVOniDA9","tlshash":"4bf3021ff2e4a84bc787c27093c6c2ebdab34d95e24217094636bd7170bd6e6e50471a","first_seen":"2025-10-22T08:40:34.938189Z","last_seen":"2025-10-22T08:40:34.938189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/pv/?_a=v\u0026_h=x.ag2m4.cfd\u0026_ss=59snl4wur5\u0026_pv=1\u0026_ls=0\u0026_u1=1\u0026_u3=1\u0026_cc=no\u0026_pl=d\u0026_cbid=4a60\u0026_cb=_dtspv.c","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"172.67.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:47.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtscout.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 12:11:28 GMT","end":"Sat, 29 Nov 2025 13:05:40 GMT"},"fingerprint":{"sha1":"8C:1A:8B:5A:0D:05:D0:E1:27:9B:25:7F:4F:AD:2F:0D:B4:F7:E5:14","sha256":"6E:3E:4E:99:17:89:21:6A:AA:63:31:A7:CE:8D:C6:4C:29:96:63:AE:64:9F:42:19:D7:28:92:10:03:EE:8D:75"}}},"request":{"raw":"GET /pv/?_a=v\u0026_h=x.ag2m4.cfd\u0026_ss=59snl4wur5\u0026_pv=1\u0026_ls=0\u0026_u1=1\u0026_u3=1\u0026_cc=no\u0026_pl=d\u0026_cbid=4a60\u0026_cb=_dtspv.c HTTP/1.1\r\nHost: t.dtscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nCookie: df=1761122387\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 08:39:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-t: 0.157\r\nx-c: 0\r\nexpires: Wed, 22 Oct 2025 08:39:46 GMT\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mpbsz29CtLjO3VeTBvi6%2B3ElzA8S%2BHxIQYPknRWJvqx%2BGg5iAYu0yKDQkgkxxN7xTK6wlyn1rUnNVRYPrZwYqfJhOh7YKcvhFbz%2FgQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9927afab5af1c759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"81c6f487bc5a3593762b5dca885d5383","sha1":"1b2b680f981cbcc3615b987d149def4914a00fa7","sha256":"9ac4068f903004725c3cbfd071c7372431e36b0f42a593af282203125144f04c","sha512":"48920735ade63e21092015bc0cf908237ff6760bb82155466f9b5e9726e043bc1d2d1b38663f708de92fcb174a319c82f05663bf7d72a0ef22bc8fc98294c9be","ssdeep":"","tlshash":"cd90021868e180201ad9d740145716444171679015c45595d63155641a49b809b5b9bc","first_seen":"2025-10-22T08:40:35.128725Z","last_seen":"2025-10-22T08:40:35.128725Z","times_seen":1,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:50.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:50 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 150776\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-24cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150776,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"ab54c542f613153835bf358e2405b353","sha1":"42c0e82be5a24088b0901e5abe0be2965bf6b45c","sha256":"b00ae34af063d637384529a141d1dfafeade733650b993c2e2a0d2497ddd9173","sha512":"37b953223fdfa35dcf6076513417485c11e75bde8cadf1d9736d98433003841867b92c6e2e756a36089771415592356bbca6785127e44d960b79b4490de2bc56","ssdeep":"3072:IDCHOPdcpY+NzQcvJIMPCCJMUCK6eKnt9JU6Od/KuMCu7EM38s1QDHhfkE7R:aKpYyQcBIPolh2XuMCuzQhkEV","tlshash":"d3e301ae1aa2990fcbd325305349c093e1b70ed5ba9363654bf13f96b6b2253e4fc500","first_seen":"2025-10-22T08:40:34.948219Z","last_seen":"2025-10-22T08:40:34.948219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:55.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-1-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:55 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 150776\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:46 GMT\r\nETag: \"5f693e80-24cf8\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150776,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"ab54c542f613153835bf358e2405b353","sha1":"42c0e82be5a24088b0901e5abe0be2965bf6b45c","sha256":"b00ae34af063d637384529a141d1dfafeade733650b993c2e2a0d2497ddd9173","sha512":"37b953223fdfa35dcf6076513417485c11e75bde8cadf1d9736d98433003841867b92c6e2e756a36089771415592356bbca6785127e44d960b79b4490de2bc56","ssdeep":"3072:IDCHOPdcpY+NzQcvJIMPCCJMUCK6eKnt9JU6Od/KuMCu7EM38s1QDHhfkE7R:aKpYyQcBIPolh2XuMCuzQhkEV","tlshash":"d3e301ae1aa2990fcbd325305349c093e1b70ed5ba9363654bf13f96b6b2253e4fc500","first_seen":"2025-10-22T08:40:34.948219Z","last_seen":"2025-10-22T08:40:34.948219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.ag2m4.cfd/js/jquery.cookie.js","fqdn":"x.ag2m4.cfd","domain":"ag2m4.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:47.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ag2m4.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 08:09:31 GMT","end":"Sat, 03 Jan 2026 09:07:57 GMT"},"fingerprint":{"sha1":"66:C3:2A:1C:63:DB:29:46:CF:58:47:B8:E2:7F:9B:F8:16:55:B5:DC","sha256":"BD:F3:FA:89:8F:37:6D:EE:3B:05:B4:3B:A7:B7:AD:E7:DD:8F:1A:AA:86:46:2C:36:D4:13:A4:EA:25:45:98:0E"}}},"request":{"raw":"GET /js/jquery.cookie.js HTTP/1.1\r\nHost: x.ag2m4.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/embed-0z6utgknx8ew.html\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Oct 2025 08:39:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 31 May 2011 12:53:56 GMT\r\netag: \"4de4e4e4-10eb\"\r\nexpires: Sun, 26 Oct 2025 12:01:25 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 247101\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lcv283UOUcTU6nwaDjEqg3WjnybmemsLn%2FFEnzd%2F0fzWS3hZuKy9f%2FyukRwpnaoKCboZb9b7Q8qnvaTTa06DffJbxU2ArLoXpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9927afa7cc79b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4331,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"ae0c2c5d8f01f7d35bb698bb618a62f7","sha1":"63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20","sha256":"75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc","sha512":"eac94ca9d884692af8bdf12aa6e902a3be4eed0772ad8f2932ac1c3328b83a7351cdf743a409bbc0a3cd385956c08d3203d51c572bb1680489e37330fe27a2bb","ssdeep":"96:L4BZxb64Ng7V8cNwpGylRCsKZcj1JXulL6M/aGByLskPSP4lBCClf1wgCyC:LQnb6eg7DgCsk8fgZJkPSPa+gCyC","tlshash":"2e91fd293a0d231d149353f57aee10c8a930d632216ad46c744cb6b06f00c63ddfbbea","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-02T14:58:36.908103Z","times_seen":4342,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"x.ag2m4.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:48.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /cv/js/sender/v1/cast_sender.js?loadCastFramework=1 HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cloudview\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"cloudview\"\r\nreport-to: {\"group\":\"cloudview\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/cloudview\"}]}\r\ncontent-length: 2007\r\ndate: Wed, 22 Oct 2025 08:39:48 GMT\r\nexpires: Wed, 22 Oct 2025 08:39:48 GMT\r\ncache-control: private, max-age=3000\r\nlast-modified: Tue, 16 Feb 2021 23:57:06 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4272,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1143)","md5":"b427175fa1078775eb792756e7b6d1e7","sha1":"4c55c0233d3d9002b3449c025f97821f8bb8900d","sha256":"ee147e859ad0f09aa50367974e38ab53e7c7054c4a51d400a7f45b0eb251454f","sha512":"af8d384188363378bc99c2e51523e74e1d18ba77d51bff7647a377a117499421f9e94477e09907925e46dad0a908b799a616d0b4855ffff064ba6350815063d3","ssdeep":"96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2","tlshash":"d191c68d7a70f4328aa138b6283f964ae37b50b5f4d4f0d5508ccce45a78e4a4726f6d","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-04-03T16:48:30.843704Z","times_seen":8664,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":147,"dns":7,"connect":21,"send":0,"wait":64,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:50.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:50 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 171832\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-29f38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171832,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"a10e7741ca561df0d3a66bb066b424b0","sha1":"17078a0d445f0f57c9a3ceb6dd701a6d3d7e36ce","sha256":"d375c83912d6a91c32361316098fb5db913e830dcb2d726128aeea06fe7f9bd3","sha512":"622ae7f1a1c1e6ef62c6d10956ce0bd0e88209c523e3203486cf77e95de368aa2b95e1408b285706a8805e0de381438661a74de48abebbe3111851875a99a67e","ssdeep":"3072:+3hvHGSl3qSH/7FmfpNZo9NIi5OR+ssYl0CFiQj4KObDiDAZz:+35R3qY/ePo3IiOMY7kmVOniDA9","tlshash":"4bf3021ff2e4a84bc787c27093c6c2ebdab34d95e24217094636bd7170bd6e6e50471a","first_seen":"2025-10-22T08:40:34.938189Z","last_seen":"2025-10-22T08:40:34.938189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kde2.uk-traffic-076.com/hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2","fqdn":"kde2.uk-traffic-076.com","domain":"uk-traffic-076.com","tld":"com"},"ip":{"addr":"57.129.131.59","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.ag2m4.cfd/embed-0z6utgknx8ew.html","date":"2025-10-22T08:39:53.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kde2.uk-traffic-076.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 23:29:52 GMT","end":"Fri, 21 Nov 2025 23:29:51 GMT"},"fingerprint":{"sha1":"9F:99:A4:6A:40:49:55:46:28:A0:3C:24:EC:FB:A0:8D:91:A3:46:BB","sha256":"FB:30:5A:00:BE:93:F6:29:D0:4E:BC:D0:EB:CA:00:BF:BD:0C:EE:ED:46:6E:6B:76:33:35:EE:3D:BC:3A:D5:3D"}}},"request":{"raw":"GET /hls2/02/00004/0z6utgknx8ew_n/seg-2-a1.ts?t=Nc9VaW7uXpAHo03j1G7fCVCr8Z3Yh20G3FJFvFqVkkA\u0026s=1761122386\u0026e=43200\u0026f=21684\u0026srv=x2\u0026i=0.0\u0026sp=5000\u0026fr=0z6utgknx8ew\u0026p1=kde2\u0026p2=kde2 HTTP/1.1\r\nHost: kde2.uk-traffic-076.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.ag2m4.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.ag2m4.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Oct 2025 08:39:53 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 171832\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 27 Jan 2026 11:24:47 GMT\r\nETag: \"5f693e80-29f38\"\r\nCache-Control: max-age=8640000, public, no-transform\r\nAccess-Control-Allow-Origin: *\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171832,"size_decoded":0,"mime_type":"video/mp2t","magic":"MPEG transport stream data","md5":"a10e7741ca561df0d3a66bb066b424b0","sha1":"17078a0d445f0f57c9a3ceb6dd701a6d3d7e36ce","sha256":"d375c83912d6a91c32361316098fb5db913e830dcb2d726128aeea06fe7f9bd3","sha512":"622ae7f1a1c1e6ef62c6d10956ce0bd0e88209c523e3203486cf77e95de368aa2b95e1408b285706a8805e0de381438661a74de48abebbe3111851875a99a67e","ssdeep":"3072:+3hvHGSl3qSH/7FmfpNZo9NIi5OR+ssYl0CFiQj4KObDiDAZz:+35R3qY/ePo3IiOMY7kmVOniDA9","tlshash":"4bf3021ff2e4a84bc787c27093c6c2ebdab34d95e24217094636bd7170bd6e6e50471a","first_seen":"2025-10-22T08:40:34.938189Z","last_seen":"2025-10-22T08:40:34.938189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
