{"report_id":"ce5f4fb4-9faf-40b7-9922-9197ca89012b","version":6,"status":"done","tags":[],"date":"2026-01-16T22:38:20Z","url":{"schema":"http","addr":"y2matego.com","fqdn":"y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.y2matego.com/en201","fqdn":"www.y2matego.com","domain":"y2matego.com","tld":"com"},"title":"Fast \u0026 Free YouTube Video Downloader - y2mate","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"y2matego.com","fqdn":"y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-20T22:38:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":12}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"promdamagecomplain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"promdamagecomplain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"protrafficinspector.com","ip":{"addr":"18.197.4.117","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-01-14T11:09:46.608479Z","alert_count":0,"request_count":1,"received_data":425,"sent_data":448,"comment":"","tags":null,"fingerprints":null},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-01-11T22:38:37.608027Z","alert_count":0,"request_count":2,"received_data":101957,"sent_data":976,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"y2matego.com","ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-05-25","domain_rank":517841,"first_seen":"2026-01-16T22:38:20.632766Z","last_seen":"2026-01-16T22:38:20.632766Z","alert_count":0,"request_count":1,"received_data":47359,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-01-11T22:28:08.119446Z","alert_count":0,"request_count":2,"received_data":40688,"sent_data":942,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":895,"first_seen":"2020-10-23T05:27:50Z","last_seen":"2026-01-14T11:12:40.63192Z","alert_count":0,"request_count":4,"received_data":1660,"sent_data":2094,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2026-01-14T21:58:02.649075Z","alert_count":2,"request_count":1,"received_data":85956,"sent_data":414,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.y2matego.com","ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-05-25","domain_rank":1020616,"first_seen":"2026-01-16T22:38:20.631477Z","last_seen":"2026-01-16T22:38:20.631477Z","alert_count":0,"request_count":10,"received_data":201056,"sent_data":6644,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2026-01-14T21:43:35.347859Z","alert_count":3,"request_count":1,"received_data":530,"sent_data":768,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"promdamagecomplain.com","ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-02-20","domain_rank":1514403,"first_seen":"2025-04-20T18:03:50.852238Z","last_seen":"2025-04-20T18:03:50.852238Z","alert_count":2,"request_count":1,"received_data":107703,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"wayfarerorthodox.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-08-08T11:06:50.216151Z","last_seen":"2026-01-14T11:09:45.363098Z","alert_count":6,"request_count":2,"received_data":7818,"sent_data":954,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2026-01-15T09:04:14.180209Z","alert_count":2,"request_count":1,"received_data":377,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"promdamagecomplain.com/1c/75/5a/1c755ae288cf77acfe873bf08cfc2107.js","fqdn":"promdamagecomplain.com","domain":"promdamagecomplain.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"668390940c88c6ae9e54d7ca0c9bbf91","sha1":"4589ce33ab0e6774a7e5d51f4c4b8dad5efdebd1","sha256":"eeded90641363bb3cc08e7f72f3053e4e29f0ac27ea4c94ee8c39a14a87ebfc2","sha512":"0b1d11a3b79c66049f8389695d32484f730c2e63948cf7bf02bf83d18a16c36a55894feaada4d5586feeef5f947bb1d3078bd375964275f4665fa2a7509e4474","ssdeep":"3072:Ezz17aMWZ44SXdVY4lDKVVbZ4i3/9j9y1UglGewsB:Ezzw194LwsB","tlshash":"01a3c788bfd0f06d129a6473223f950ff11a4e42505ce558e907f8e66abc32af47db64","size":106855,"data":"","first_seen":"2026-01-16T22:38:23.970708Z","last_seen":"2026-01-16T22:38:23.970708Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-06-22T02:01:28.341978Z","times_seen":19322,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-21T19:09:43.310241Z","times_seen":337427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2matego.com/en201","fqdn":"www.y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a3157df84574c7db4e6452e8d99d3f6","sha1":"4cc8720cfd1f4cab01724b5c0002060659d50f72","sha256":"7ced21ea74954a0e9018eb4492acf135ca5ef6224b817c5f0812532786eeb565","sha512":"ca011e41ef89fd9eb643fa891e3f5419e2d753fbaaa30b03c1a686d4ff582a8b5da9a16a83267c4f36dfdea1dfe4cf02a122ba15b337d1e8d3de0c139c4749da","ssdeep":"","tlshash":"3f8000a82000a08000332c30233baa083ba2020230c3380b0a2c80ea3eb880bc8cbecc","size":34,"data":"","first_seen":"2024-07-11T09:37:32Z","last_seen":"2026-06-22T01:03:19.448534Z","times_seen":21238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2matego.com/cdn-cgi/zaraz/s.js?z=JTdCJTIyZXhlY3V0ZWQlMjIlM0ElNUIlNUQlMkMlMjJ0JTIyJTNBJTIyRmFzdCUyMCUyNiUyMEZyZWUlMjBZb3VUdWJlJTIwVmlkZW8lMjBEb3dubG9hZGVyJTIwLSUyMHkybWF0ZSUyMiUyQyUyMnglMjIlM0EwLjIzODcwNDkwNDU0ODkxMTklMkMlMjJ3JTIyJTNBMTI4MCUyQyUyMmglMjIlM0ExMDI0JTJDJTIyaiUyMiUzQTEwMjQlMkMlMjJlJTIyJTNBMTI4MCUyQyUyMmwlMjIlM0ElMjJodHRwcyUzQSUyRiUyRnd3dy55Mm1hdGVnby5jb20lMkZlbjIwMSUyMiUyQyUyMnIlMjIlM0ElMjIlMjIlMkMlMjJrJTIyJTNBMjQlMkMlMjJuJTIyJTNBJTIyVVRGLTglMjIlMkMlMjJvJTIyJTNBMCUyQyUyMnElMjIlM0ElNUIlNUQlN0Q=","fqdn":"www.y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"014a14b6b48e02ccf653889ce0249eac","sha1":"e1083fb9075658af9f32a8817cc8f8fcd9101316","sha256":"dee6583663d07718a00855f0576bdd1c22d83ed6c1b887a0739fda0f9c554c11","sha512":"b1470db2ac209b8cce3276fe0844f82d61d5dd33cbe90cd18a460063aec27e7aae24ddaaee782b3b8117c7020116d18439247010de6d397a1ed8bd3dd8c33b06","ssdeep":"96:WFAhDcNVQEg7KmVx/VjO+8lT2AgpN558589pTEMgSmM8GFY9a/aFUGYjPvsbS3UI:gAhGQ1VxtjO+8lT2AgH88xEMgSn8GCxK","tlshash":"90c1c5182ea5107954df63bfb03e53c0e9bda134f0a26000dc4558c9aeedf7b26d69ca","size":5666,"data":"","first_seen":"2026-01-16T22:38:23.967027Z","last_seen":"2026-01-16T22:38:23.967027Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2matego.com/en201","fqdn":"www.y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"893f0c70aec08944f4772af2a8073460","sha1":"33c3f1c60c7336ac6cb1455aa06952f02273dc0a","sha256":"d7a404ccc381e98239889ea73e251bd3b6022d39fbf116a9689fa34107dba798","sha512":"5285db8cc85ddb8b368051a70f057a65e0f68f536ab25cd784f924c398077e5bf22a50d419ae9c438f9f0352880e2137def4273632bad218d990c8cce674df0b","ssdeep":"","tlshash":"41a022ac000020ac002b2cb0223be88833f30203a2c380028208c0b02c38e2fc808aec","size":73,"data":"","first_seen":"2024-10-12T13:56:10.735543Z","last_seen":"2026-06-22T01:01:30.090743Z","times_seen":18325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a7db0e0bae22d940e720d06abf548f7","sha1":"e68beaeb9b7b3aa74a922a3df2d7294811b62e72","sha256":"1d8e9927430ea86701daa3074746758677a012f2ee4196ce60438b4a526ac10f","sha512":"d7106b476dc2ca5f6f5fcf79fe9e69d72d27b12decbac13cf20bbec28fd7c5e72a920802eea9b15e41803252471548290533da353eec5e66ce9211854bb72083","ssdeep":"768:/Cofu2DMaHL9VAQepxn2tSv+1odY+0rOF8msKULg49Tr7+CuAUyG13PE0okbsO10:Q2gaHL9VAQepFbZdYlrNRg4t","tlshash":"37332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","size":50453,"data":"","first_seen":"2026-01-15T11:24:19.542226Z","last_seen":"2026-02-12T13:18:09.210194Z","times_seen":38367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","size":6454,"data":"","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2matego.com/en201","fqdn":"www.y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"893f0c70aec08944f4772af2a8073460","sha1":"33c3f1c60c7336ac6cb1455aa06952f02273dc0a","sha256":"d7a404ccc381e98239889ea73e251bd3b6022d39fbf116a9689fa34107dba798","sha512":"5285db8cc85ddb8b368051a70f057a65e0f68f536ab25cd784f924c398077e5bf22a50d419ae9c438f9f0352880e2137def4273632bad218d990c8cce674df0b","ssdeep":"","tlshash":"41a022ac000020ac002b2cb0223be88833f30203a2c380028208c0b02c38e2fc808aec","size":73,"data":"","first_seen":"2024-10-12T13:56:10.735543Z","last_seen":"2026-06-22T01:01:30.090743Z","times_seen":18325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2matego.com/en201","fqdn":"www.y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ec5b06515b036808bd48873dc4f9fca","sha1":"e6978a636eed1fd74104c39009302294b36c797f","sha256":"a33b8ba6c6c46204a3af1e2cf247d6db4189dc930045cacf3911c80a74f4d11a","sha512":"5243fdd6dbcedd7a3d9e2321ff58bab197250d127ced9321db6ff23954d61fe8a663033f464ed25c7382e0e8a26f1d6b5313bb2dffff3ef6e42e50d3316a33d9","ssdeep":"","tlshash":"d8c08ca4a80420525827df223337ba002e60224160431403432c81c12af4a26c82a8cc","size":146,"data":"","first_seen":"2026-01-16T22:38:23.981571Z","last_seen":"2026-01-16T22:38:23.981571Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2matego.com/en201","fqdn":"www.y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7fdc0e5bed23de60f17f9bd0a160906","sha1":"77a591ea41f07bfbfbf33b02fcd44a78720af39c","sha256":"a25d0dd9660c9319fb14b1caf29f012c6afce72d70df4be30d2bdcec468de7f0","sha512":"41965d708720ebe71ed6c22ad3a2da123454da57d186c7d81fa2407778728100fe07cba501203096f04d3cb13b663aab672efcb40cdfe544f532fc95dca32732","ssdeep":"","tlshash":"f941da241cd124f909ce04ec2736939af372301c3853a111b922a4d917a6fcee9e27c9","size":2070,"data":"","first_seen":"2026-01-16T22:38:23.982466Z","last_seen":"2026-01-16T22:38:23.982466Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2matego.com/en201","fqdn":"www.y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a3157df84574c7db4e6452e8d99d3f6","sha1":"4cc8720cfd1f4cab01724b5c0002060659d50f72","sha256":"7ced21ea74954a0e9018eb4492acf135ca5ef6224b817c5f0812532786eeb565","sha512":"ca011e41ef89fd9eb643fa891e3f5419e2d753fbaaa30b03c1a686d4ff582a8b5da9a16a83267c4f36dfdea1dfe4cf02a122ba15b337d1e8d3de0c139c4749da","ssdeep":"","tlshash":"3f8000a82000a08000332c30233baa083ba2020230c3380b0a2c80ea3eb880bc8cbecc","size":34,"data":"","first_seen":"2024-07-11T09:37:32Z","last_seen":"2026-06-22T01:03:19.448534Z","times_seen":21238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2matego.com/js/header.js","fqdn":"www.y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"796e647fa72ba9485a124a8259fccd28","sha1":"cfa990422a209d6f573b5f61a1fe559cb44b10a4","sha256":"11bc238ee7dd3a75f92db82bf2b1eed2fdc533efd29d87781d0a0eb0fe35e1c5","sha512":"d1d05b7dbf2dd068b9fe5f83a5fa47c200f1683c82186478f7584529a159bb51f92836dfd80af099215d1dafe5e824806f47647cde6579b1594f88b11315907d","ssdeep":"","tlshash":"c541599ab62d553a90731fce76c1ff997e0921e7a1c83c773aa8c94902c30c458a539e","size":2318,"data":"","first_seen":"2026-01-16T22:38:23.973323Z","last_seen":"2026-01-16T22:38:23.973323Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2matego.com/js/app.js?v=0.0.3","fqdn":"www.y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44ceb5389f016b03a289de90a917a1c5","sha1":"62d3f6788768d3358bd24aabcc3ebf7dac721295","sha256":"5988e89444ea4788e71076f63620e0fc773fcb70716d9a213e7234d189044fd1","sha512":"3355f119274a38601207d78cb4f714e710e658a5685da067e4f18b81a8f4d50450a658d096f8cd7997e6f90ebdafd5a6d7230bee502468e44f411beab1ccb600","ssdeep":"384:a1XAXkXwOyKpbJsSmgmJV5U1Aes8FPB8ZcBy6BHW3UT+NO90ccnMYdJn5xPi/HC:aBAXkDP/mgmtYFPB8ZcBXBNT+60ccnMy","tlshash":"4ab2628bf73d8539c97720caec4851ca1e7431bbbc485c5abc6ee80868d6cd1a4657e3","size":24087,"data":"","first_seen":"2026-01-16T22:38:23.974363Z","last_seen":"2026-01-16T22:38:23.974363Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-21T19:09:43.310241Z","times_seen":337427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.y2matego.com/img/ic.svg","fqdn":"www.y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:58.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.y2matego.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 23:25:51 GMT","end":"Mon, 02 Mar 2026 00:25:42 GMT"},"fingerprint":{"sha1":"13:DE:FB:D2:ED:86:B6:DE:05:2F:90:0C:C9:83:F0:DD:C3:A9:A9:84","sha256":"C6:50:72:67:13:E2:D2:D6:E3:B9:FC:40:F8:F6:51:6F:73:C3:94:03:0D:58:9B:D0:87:13:C2:34:DC:FE:AF:29"}}},"request":{"raw":"GET /img/ic.svg HTTP/1.1\r\nHost: www.y2matego.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2matego.com/en201\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 16 Jan 2026 22:37:58 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CHDaIyN2XqRJTidmERTxYrlhpfNvDHTD6pZYu75dio0gow4MdoA1MNxFmldDbF6qqQNqHg3Mo%2Fuf7yWLY75HJztIK6%2BpUp9fJIUqsYvIGCPQ0t7zmyIRutsx\"}]}\r\netag: W/\"0ab62320c2d2d53ae296a09353bc9c15\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nage: 8047\r\ncf-ray: 9bf119b78dcc56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10668,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e4a86eb20e24518ed27bcc1c6f6f9679","sha1":"2cc1dc79af21330f2f385eef6e483fe1600958c9","sha256":"cf35cfc67ffe1114c57b5711f155cd1c767eac70f4015334cd3908fef53a2bed","sha512":"025f04083a759a665293e4f12132a26b4c9ab4bc5b86226b85dd3b2f8e9959ebffb5e5d14718ea63efada7e2ede9d106af4bca1a0db03cd5b4ae14b13cb5b32f","ssdeep":"192:jc5KvNMHrFEgnIreNvai+XPvEX1yfaFw2ws5wlu:j9CHDIrKaD8l8au7Of","tlshash":"0722563f0234576a95884bdc8ea4605924b4f8def0f410d0b7161f44de0eaf7b8b9ba1","first_seen":"2026-01-16T22:38:23.965398Z","last_seen":"2026-01-16T22:38:23.965398Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2matego.com/cdn-cgi/zaraz/s.js?z=JTdCJTIyZXhlY3V0ZWQlMjIlM0ElNUIlNUQlMkMlMjJ0JTIyJTNBJTIyRmFzdCUyMCUyNiUyMEZyZWUlMjBZb3VUdWJlJTIwVmlkZW8lMjBEb3dubG9hZGVyJTIwLSUyMHkybWF0ZSUyMiUyQyUyMnglMjIlM0EwLjIzODcwNDkwNDU0ODkxMTklMkMlMjJ3JTIyJTNBMTI4MCUyQyUyMmglMjIlM0ExMDI0JTJDJTIyaiUyMiUzQTEwMjQlMkMlMjJlJTIyJTNBMTI4MCUyQyUyMmwlMjIlM0ElMjJodHRwcyUzQSUyRiUyRnd3dy55Mm1hdGVnby5jb20lMkZlbjIwMSUyMiUyQyUyMnIlMjIlM0ElMjIlMjIlMkMlMjJrJTIyJTNBMjQlMkMlMjJuJTIyJTNBJTIyVVRGLTglMjIlMkMlMjJvJTIyJTNBMCUyQyUyMnElMjIlM0ElNUIlNUQlN0Q=","fqdn":"www.y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:58.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.y2matego.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 23:25:51 GMT","end":"Mon, 02 Mar 2026 00:25:42 GMT"},"fingerprint":{"sha1":"13:DE:FB:D2:ED:86:B6:DE:05:2F:90:0C:C9:83:F0:DD:C3:A9:A9:84","sha256":"C6:50:72:67:13:E2:D2:D6:E3:B9:FC:40:F8:F6:51:6F:73:C3:94:03:0D:58:9B:D0:87:13:C2:34:DC:FE:AF:29"}}},"request":{"raw":"GET /cdn-cgi/zaraz/s.js?z=JTdCJTIyZXhlY3V0ZWQlMjIlM0ElNUIlNUQlMkMlMjJ0JTIyJTNBJTIyRmFzdCUyMCUyNiUyMEZyZWUlMjBZb3VUdWJlJTIwVmlkZW8lMjBEb3dubG9hZGVyJTIwLSUyMHkybWF0ZSUyMiUyQyUyMnglMjIlM0EwLjIzODcwNDkwNDU0ODkxMTklMkMlMjJ3JTIyJTNBMTI4MCUyQyUyMmglMjIlM0ExMDI0JTJDJTIyaiUyMiUzQTEwMjQlMkMlMjJlJTIyJTNBMTI4MCUyQyUyMmwlMjIlM0ElMjJodHRwcyUzQSUyRiUyRnd3dy55Mm1hdGVnby5jb20lMkZlbjIwMSUyMiUyQyUyMnIlMjIlM0ElMjIlMjIlMkMlMjJrJTIyJTNBMjQlMkMlMjJuJTIyJTNBJTIyVVRGLTglMjIlMkMlMjJvJTIyJTNBMCUyQyUyMnElMjIlM0ElNUIlNUQlN0Q= HTTP/1.1\r\nHost: www.y2matego.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2matego.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 16 Jan 2026 22:37:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://www.y2matego.com\r\nset-cookie: cfzs_google-analytics_v4=%7B%22VAIU_pageviewCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; Domain=y2matego.com; Path=/; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_VAIU__pageviewCounter=; Domain=y2matego.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_VAIU__engagementDuration=; Domain=y2matego.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_VAIU__engagementStart=; Domain=y2matego.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_VAIU__counter=; Domain=y2matego.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_VAIU__ga4sid=; Domain=y2matego.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_VAIU__session_counter=; Domain=y2matego.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_VAIU__ga4=; Domain=y2matego.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_VAIU__let=; Domain=y2matego.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ncfz_google-analytics_v4=%7B%22VAIU_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1800139078394%7D%2C%22VAIU_engagementStart%22%3A%7B%22v%22%3A%221768603078394%22%2C%22e%22%3A1800139078394%7D%2C%22VAIU_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1800139078394%7D%2C%22VAIU_ga4sid%22%3A%7B%22v%22%3A%221319663648%22%2C%22e%22%3A1768604878394%7D%2C%22VAIU_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1800139078394%7D%2C%22VAIU_ga4%22%3A%7B%22v%22%3A%22426230ab-3fa5-47ea-b45f-0650357c736c%22%2C%22e%22%3A1800139078394%7D%2C%22VAIU_let%22%3A%7B%22v%22%3A%221768603078394%22%2C%22e%22%3A1800139078394%7D%7D; Domain=y2matego.com; Path=/; Max-Age=31536000; HttpOnly; Secure; SameSite=Lax\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Set-Cookie, Cache-Control\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-max-age: 600\r\nx-robots-tag: none\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B1AVaxznVgRRSuoxz2h0Xtv9DcnsgLUD%2FAE%2FO0yaMsIl9tNyU1ymoQQP1QbtlRzHTVLTZmyrEbitDE0cGrNnGwI0m3o2PjHF47TBCryi\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bf119b7edce56c6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5666,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3291)","md5":"014a14b6b48e02ccf653889ce0249eac","sha1":"e1083fb9075658af9f32a8817cc8f8fcd9101316","sha256":"dee6583663d07718a00855f0576bdd1c22d83ed6c1b887a0739fda0f9c554c11","sha512":"b1470db2ac209b8cce3276fe0844f82d61d5dd33cbe90cd18a460063aec27e7aae24ddaaee782b3b8117c7020116d18439247010de6d397a1ed8bd3dd8c33b06","ssdeep":"96:WFAhDcNVQEg7KmVx/VjO+8lT2AgpN558589pTEMgSmM8GFY9a/aFUGYjPvsbS3UI:gAhGQ1VxtjO+8lT2AgH88xEMgSn8GCxK","tlshash":"90c1c5182ea5107954df63bfb03e53c0e9bda134f0a26000dc4558c9aeedf7b26d69ca","first_seen":"2026-01-16T22:38:23.967027Z","last_seen":"2026-01-16T22:38:23.967027Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/d251aa49a8a3/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:58.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/b/d251aa49a8a3/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2matego.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=feWxKolF3Oj2Q901DdjonyuveThixXEoedd6JVAB.tc-1768603078429-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 16 Jan 2026 22:37:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Wed, 14 Jan 2026 16:37:41 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9bf119b858fa35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50453,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50452)","md5":"8a7db0e0bae22d940e720d06abf548f7","sha1":"e68beaeb9b7b3aa74a922a3df2d7294811b62e72","sha256":"1d8e9927430ea86701daa3074746758677a012f2ee4196ce60438b4a526ac10f","sha512":"d7106b476dc2ca5f6f5fcf79fe9e69d72d27b12decbac13cf20bbec28fd7c5e72a920802eea9b15e41803252471548290533da353eec5e66ce9211854bb72083","ssdeep":"768:/Cofu2DMaHL9VAQepxn2tSv+1odY+0rOF8msKULg49Tr7+CuAUyG13PE0okbsO10:Q2gaHL9VAQepFbZdYlrNRg4t","tlshash":"37332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","first_seen":"2026-01-15T11:24:19.542226Z","last_seen":"2026-02-12T13:18:09.210194Z","times_seen":38367,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=d6858a13-b3e4-4291-abd4-ba1fbafd3168\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=1c755ae288cf77acfe873bf08cfc2107\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=22","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:59.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 22:13:33 GMT","end":"Sat, 28 Mar 2026 22:13:32 GMT"},"fingerprint":{"sha1":"A3:08:82:4A:9A:ED:6E:4C:29:FC:10:0D:1D:8F:8B:68:0E:D0:49:72","sha256":"B4:01:36:5D:F9:70:75:BF:F6:56:67:76:BB:CC:A2:D3:BA:69:61:33:56:FC:C7:21:69:6E:04:BE:95:D7:B2:F5"}}},"request":{"raw":"GET /pxf.gif?uuid=d6858a13-b3e4-4291-abd4-ba1fbafd3168\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=1c755ae288cf77acfe873bf08cfc2107\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=22 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2matego.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 16 Jan 2026 22:37:59 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 0\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6d91f358a200e469de7de04ba980215c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T02:29:52.920518Z","times_seen":16623839,"resource_available":true,"data":null}},"time_used":659,"timings":{"blocked":281,"dns":1,"connect":91,"send":0,"wait":96,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y2matego.com/","fqdn":"y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-16T22:37:57.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2matego.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 05:13:40 GMT","end":"Tue, 03 Mar 2026 06:11:29 GMT"},"fingerprint":{"sha1":"54:1F:B9:65:CD:8F:41:86:1B:25:B8:30:64:1F:46:48:4B:F5:C2:93","sha256":"7B:82:32:90:AB:E3:19:82:86:70:ED:BE:66:BD:5E:25:F3:B7:CB:04:F0:BA:37:9E:C4:1E:19:76:A0:4C:51:C7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: y2matego.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 16 Jan 2026 22:37:57 GMT\r\ncontent-length: 0\r\nlocation: https://www.y2matego.com/\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=St3kOzYkzSg1sBDNVDl1cuyGpJCvl%2FpXVzpQK4BUY4nthej%2FUd5soJcP75YhYGg2u4jOHgPVLrivk9%2FyIX%2BKi9PShC4L6woKEbo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9bf119b15d46568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46848,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T02:29:52.920518Z","times_seen":16623839,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":4,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2matego.com/img/y2mategoicon.svg","fqdn":"www.y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:57.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2matego.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 05:13:40 GMT","end":"Tue, 03 Mar 2026 06:11:29 GMT"},"fingerprint":{"sha1":"54:1F:B9:65:CD:8F:41:86:1B:25:B8:30:64:1F:46:48:4B:F5:C2:93","sha256":"7B:82:32:90:AB:E3:19:82:86:70:ED:BE:66:BD:5E:25:F3:B7:CB:04:F0:BA:37:9E:C4:1E:19:76:A0:4C:51:C7"}}},"request":{"raw":"GET /img/y2mategoicon.svg HTTP/1.1\r\nHost: www.y2matego.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2matego.com/en201\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 16 Jan 2026 22:37:57 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=32WZaxjxVUUffTY95PfiqFctZtx9tZmbb1nT6EH4TVrbHRhU2%2FjicMDbv1PRCFw31OJ38oKchXg47834kHCPW9dzgARRSIWLMLSKMKIo%2FErFug3QRl0JrA%2BN%2FVE%3D\"}]}\r\netag: W/\"8c78f917e40f2aa65d48b616b5024f7c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nage: 8047\r\ncf-ray: 9bf119b3af51568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1588,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e7d3e0d095951f675b1ab6b9c6d097d8","sha1":"163116d019c0e7235ebeee98f7f1e1150c3b46aa","sha256":"8194637e338e1fd584492a13185ccecf553c3ad969a1b68ef5eeedab7e97349f","sha512":"90a9e4a417db454d964cb387de49ef3db37f6d7114642201ce923cc207b24f2e1073d063d4ec428f10acdf5eef23baadf94e2015efab95246327a4c60971585f","ssdeep":"","tlshash":"3d3150fb2239c2bada94d79583b4ecc93fb0a893796141c5939f1d490e1a4a7073de30","first_seen":"2026-01-16T22:38:23.969514Z","last_seen":"2026-01-16T22:38:23.969514Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promdamagecomplain.com/1c/75/5a/1c755ae288cf77acfe873bf08cfc2107.js","fqdn":"promdamagecomplain.com","domain":"promdamagecomplain.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:57.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"promdamagecomplain.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 22:11:30 GMT","end":"Tue, 17 Mar 2026 22:11:29 GMT"},"fingerprint":{"sha1":"3E:F5:8C:00:97:8B:FD:97:09:73:09:32:5C:FB:00:98:5F:13:03:C7","sha256":"70:08:7D:A8:A4:AC:1A:6D:FB:23:C9:44:6F:6F:C5:D8:BA:DF:39:C4:86:35:31:67:FD:A7:39:D2:39:F2:B3:D4"}}},"request":{"raw":"GET /1c/75/5a/1c755ae288cf77acfe873bf08cfc2107.js HTTP/1.1\r\nHost: promdamagecomplain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2matego.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 16 Jan 2026 22:37:58 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 38110\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 9\r\nHost: promdamagecomplain.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9d63084105fae9e0822d059ddefdb033\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106855,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"668390940c88c6ae9e54d7ca0c9bbf91","sha1":"4589ce33ab0e6774a7e5d51f4c4b8dad5efdebd1","sha256":"eeded90641363bb3cc08e7f72f3053e4e29f0ac27ea4c94ee8c39a14a87ebfc2","sha512":"0b1d11a3b79c66049f8389695d32484f730c2e63948cf7bf02bf83d18a16c36a55894feaada4d5586feeef5f947bb1d3078bd375964275f4665fa2a7509e4474","ssdeep":"3072:Ezz17aMWZ44SXdVY4lDKVVbZ4i3/9j9y1UglGewsB:Ezzw194LwsB","tlshash":"01a3c788bfd0f06d129a6473223f950ff11a4e42505ce558e907f8e66abc32af47db64","first_seen":"2026-01-16T22:38:23.970708Z","last_seen":"2026-01-16T22:38:23.970708Z","times_seen":1,"resource_available":true,"data":null}},"time_used":840,"timings":{"blocked":315,"dns":40,"connect":93,"send":0,"wait":105,"receive":94,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"promdamagecomplain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"promdamagecomplain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:58.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:50:13 GMT","end":"Sun, 29 Mar 2026 00:50:12 GMT"},"fingerprint":{"sha1":"B6:89:38:EE:EF:1E:F1:A0:93:51:BB:7A:F2:13:F5:DF:8C:9B:8F:F7","sha256":"74:22:2C:3F:1E:A6:04:C8:AD:7C:D8:B4:13:57:A5:95:EF:83:FA:28:18:BC:F3:BD:38:93:CB:DA:4B:30:3F:8A"}}},"request":{"raw":"GET /9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2matego.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 16 Jan 2026 22:37:58 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3403\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: ffcd92cb5af1066b34a8d33f10f2482f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6454,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6454), with no line terminators","md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"resource_available":true,"data":null}},"time_used":671,"timings":{"blocked":285,"dns":3,"connect":95,"send":0,"wait":95,"receive":1,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.y2matego.com/favicon.ico","fqdn":"www.y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:58.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.y2matego.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 23:25:51 GMT","end":"Mon, 02 Mar 2026 00:25:42 GMT"},"fingerprint":{"sha1":"13:DE:FB:D2:ED:86:B6:DE:05:2F:90:0C:C9:83:F0:DD:C3:A9:A9:84","sha256":"C6:50:72:67:13:E2:D2:D6:E3:B9:FC:40:F8:F6:51:6F:73:C3:94:03:0D:58:9B:D0:87:13:C2:34:DC:FE:AF:29"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.y2matego.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2matego.com/en201\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cfzs_google-analytics_v4=%7B%22VAIU_pageviewCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_google-analytics_v4=%7B%22VAIU_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1800139078394%7D%2C%22VAIU_engagementStart%22%3A%7B%22v%22%3A%221768603078394%22%2C%22e%22%3A1800139078394%7D%2C%22VAIU_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1800139078394%7D%2C%22VAIU_ga4sid%22%3A%7B%22v%22%3A%221319663648%22%2C%22e%22%3A1768604878394%7D%2C%22VAIU_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1800139078394%7D%2C%22VAIU_ga4%22%3A%7B%22v%22%3A%22426230ab-3fa5-47ea-b45f-0650357c736c%22%2C%22e%22%3A1800139078394%7D%2C%22VAIU_let%22%3A%7B%22v%22%3A%221768603078394%22%2C%22e%22%3A1800139078394%7D%7D; dom3ic8zudi28v8lr6fgphwffqoz0j6c=d6858a13-b3e4-4291-abd4-ba1fbafd3168%3A2%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 16 Jan 2026 22:37:58 GMT\r\npriority: u=6,i=?0\r\ncontent-type: image/vnd.microsoft.icon\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qFWKXqJpIkuS3vfgMd1OZ3wGf%2BZww9N8vxM3uo7YFopXbHlWK7tS1TrrqE3kYx18t6AgR3bF4a5jVQuxum2WNHw6hxl7fJG0HAT3tkLPoQcQog9OHw2QJrl7\"}]}\r\netag: W/\"eef17aef6ad0c45a2d0aec27cb4c5c56\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nage: 8047\r\ncf-ray: 9bf119ba9df156c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"c93c9991f30e76d660ef68615b0ed3b8","sha1":"2fb5ee3803efd7aa8c4f0e54cc8fa5fe488ac219","sha256":"bd9247d0ec5c78e3d2a31f8a33d081b04429da3c7ac7abcc7533aba2dc9b0bae","sha512":"d55778cde494b2cc4b161c054c342840fcd1b14af3ad624ca1a95efc23f6c14010255a495067c9ff0e57b2e62c6773ed69ea7c177ce172376fc9c0c41df04f8b","ssdeep":"","tlshash":"1221d8c7b1c042ace2f121b1d4663a1aa447beafc252a24eb469b084677749f25b1c23","first_seen":"2026-01-16T22:38:23.97228Z","last_seen":"2026-01-16T22:38:23.97228Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2matego.com/js/header.js","fqdn":"www.y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:57.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2matego.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 05:13:40 GMT","end":"Tue, 03 Mar 2026 06:11:29 GMT"},"fingerprint":{"sha1":"54:1F:B9:65:CD:8F:41:86:1B:25:B8:30:64:1F:46:48:4B:F5:C2:93","sha256":"7B:82:32:90:AB:E3:19:82:86:70:ED:BE:66:BD:5E:25:F3:B7:CB:04:F0:BA:37:9E:C4:1E:19:76:A0:4C:51:C7"}}},"request":{"raw":"GET /js/header.js HTTP/1.1\r\nHost: www.y2matego.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2matego.com/en201\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 16 Jan 2026 22:37:57 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hV2jO9dbwnqhbd2hcpQMW3XlDueVu1LmFWQcEk3j%2BnP5B%2FsHlC4BaK4GU79l4tOYjJlqjNW71EDU%2BswQfIwHxYDEPW3myUIP3iKvtjleOxHUin6Eb%2FxWM3ItRHQ%3D\"}]}\r\netag: W/\"0e38484f2ee81652a0d6fb98f95caf9e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nage: 8047\r\ncf-ray: 9bf119b3af54568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2318,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"796e647fa72ba9485a124a8259fccd28","sha1":"cfa990422a209d6f573b5f61a1fe559cb44b10a4","sha256":"11bc238ee7dd3a75f92db82bf2b1eed2fdc533efd29d87781d0a0eb0fe35e1c5","sha512":"d1d05b7dbf2dd068b9fe5f83a5fa47c200f1683c82186478f7584529a159bb51f92836dfd80af099215d1dafe5e824806f47647cde6579b1594f88b11315907d","ssdeep":"","tlshash":"c541599ab62d553a90731fce76c1ff997e0921e7a1c83c773aa8c94902c30c458a539e","first_seen":"2026-01-16T22:38:23.973323Z","last_seen":"2026-01-16T22:38:23.973323Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2matego.com/js/app.js?v=0.0.3","fqdn":"www.y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:57.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2matego.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 05:13:40 GMT","end":"Tue, 03 Mar 2026 06:11:29 GMT"},"fingerprint":{"sha1":"54:1F:B9:65:CD:8F:41:86:1B:25:B8:30:64:1F:46:48:4B:F5:C2:93","sha256":"7B:82:32:90:AB:E3:19:82:86:70:ED:BE:66:BD:5E:25:F3:B7:CB:04:F0:BA:37:9E:C4:1E:19:76:A0:4C:51:C7"}}},"request":{"raw":"GET /js/app.js?v=0.0.3 HTTP/1.1\r\nHost: www.y2matego.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2matego.com/en201\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 16 Jan 2026 22:37:57 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qav8RPuavr%2FzR9OnOLGQJBMY4GLIKYjXjQqHc%2BU4gkdjD5MueJpBqB9H3W1DnOeVXiczbh2mhMQpWtDSLOgd2zhuZTkSxX3Nis3AizX6v89uPBFbQTKr5x%2Bw\"}]}\r\netag: W/\"37401bf8feb61cd32cd584f8737119a5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nage: 8047\r\ncf-ray: 9bf119b3af59568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24087,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"44ceb5389f016b03a289de90a917a1c5","sha1":"62d3f6788768d3358bd24aabcc3ebf7dac721295","sha256":"5988e89444ea4788e71076f63620e0fc773fcb70716d9a213e7234d189044fd1","sha512":"3355f119274a38601207d78cb4f714e710e658a5685da067e4f18b81a8f4d50450a658d096f8cd7997e6f90ebdafd5a6d7230bee502468e44f411beab1ccb600","ssdeep":"384:a1XAXkXwOyKpbJsSmgmJV5U1Aes8FPB8ZcBy6BHW3UT+NO90ccnMYdJn5xPi/HC:aBAXkDP/mgmtYFPB8ZcBXBNT+60ccnMy","tlshash":"4ab2628bf73d8539c97720caec4851ca1e7431bbbc485c5abc6ee80868d6cd1a4657e3","first_seen":"2026-01-16T22:38:23.974363Z","last_seen":"2026-01-16T22:38:23.974363Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:57.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2matego.com/\r\nOrigin: https://www.y2matego.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 16 Jan 2026 22:37:57 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9bf119b3de1032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-21T19:09:43.310241Z","times_seen":337427,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":14,"dns":1,"connect":4,"send":0,"wait":13,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:58.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:51:40 GMT","end":"Sun, 29 Mar 2026 00:51:39 GMT"},"fingerprint":{"sha1":"F3:CE:FF:C9:F8:70:23:18:40:13:70:96:1A:D1:FD:34:D3:CD:66:FC","sha256":"07:8C:A3:3F:1D:F1:E0:75:3D:26:20:F5:D5:75:64:CE:F7:40:6E:B7:BB:B9:EC:79:33:27:5F:51:2E:B0:12:E7"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2matego.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 16 Jan 2026 22:37:58 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 21cacb54ca9ef28462e6f8d6152f8454\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T02:29:52.920518Z","times_seen":16623839,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":73,"dns":1,"connect":25,"send":0,"wait":17,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:58.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2matego.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 16 Jan 2026 22:37:58 GMT\r\ncontent-length: 0\r\ncf-ray: 9bf119b8288635a6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public\r\ncross-origin-resource-policy: cross-origin\r\nlocation: /turnstile/v0/b/d251aa49a8a3/api.js\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=feWxKolF3Oj2Q901DdjonyuveThixXEoedd6JVAB.tc-1768603078429-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50453,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T02:29:52.920518Z","times_seen":16623839,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":37,"dns":1,"connect":1,"send":0,"wait":11,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudflareinsights.com/cdn-cgi/rum","fqdn":"cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:58.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"OPTIONS /cdn-cgi/rum HTTP/1.1\r\nHost: cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.y2matego.com/\r\nOrigin: https://www.y2matego.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 16 Jan 2026 22:37:58 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://www.y2matego.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 9bf119ba4da532fa-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T02:29:52.920518Z","times_seen":16623839,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudflareinsights.com/cdn-cgi/rum","fqdn":"cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:58.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"POST /cdn-cgi/rum HTTP/1.1\r\nHost: cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2matego.com/\r\ncontent-type: application/json\r\nContent-Length: 401\r\nOrigin: https://www.y2matego.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":401,"data":"{\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":1035,\"startTime\":1768603077297,\"versions\":{\"js\":\"2024.6.1\",\"timings\":1},\"pageloadId\":\"8117f568-cf7e-483b-bbe5-17675b6aab28\",\"location\":\"https://www.y2matego.com/en201\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"transferSize\":9779,\"decodedBodySize\":46848},\"siteToken\":\"b443909c68eb4c6f863bd19630cf4a3d\",\"st\":2}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 16 Jan 2026 22:37:58 GMT\r\naccess-control-allow-origin: https://www.y2matego.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 9bf119ba6e0a32fa-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T02:29:52.920518Z","times_seen":16623839,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudflareinsights.com/cdn-cgi/rum","fqdn":"cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:58.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"OPTIONS /cdn-cgi/rum HTTP/1.1\r\nHost: cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.y2matego.com/\r\nOrigin: https://www.y2matego.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 16 Jan 2026 22:37:58 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://www.y2matego.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 9bf119ba7e4632fa-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T02:29:52.920518Z","times_seen":16623839,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2matego.com/","fqdn":"www.y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-16T22:37:57.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2matego.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 05:13:40 GMT","end":"Tue, 03 Mar 2026 06:11:29 GMT"},"fingerprint":{"sha1":"54:1F:B9:65:CD:8F:41:86:1B:25:B8:30:64:1F:46:48:4B:F5:C2:93","sha256":"7B:82:32:90:AB:E3:19:82:86:70:ED:BE:66:BD:5E:25:F3:B7:CB:04:F0:BA:37:9E:C4:1E:19:76:A0:4C:51:C7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.y2matego.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 16 Jan 2026 22:37:57 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 21\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nlocation: /en201\r\nserver-timing: cfCacheStatus;desc=\"MISS\", cfEdge;dur=74,cfOrigin;dur=0\r\ncf-ray: 9bf119b17d66568f-OSL\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xudctgLpJ%2FBK8S6o7qvKfzs6DjdK7lJzVD3ztAp86mvYlLXcw68vq8U%2FF9C62bVOFBlXS%2Fc4C%2FYkuAfB2CWE9wDINbTyC8Y3NiWg1vmsGo01vgZ5%2BQnjacylxSp3WNaoiIqr\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46848,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T02:29:52.920518Z","times_seen":16623839,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2matego.com/css/style.css","fqdn":"www.y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:57.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2matego.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 05:13:40 GMT","end":"Tue, 03 Mar 2026 06:11:29 GMT"},"fingerprint":{"sha1":"54:1F:B9:65:CD:8F:41:86:1B:25:B8:30:64:1F:46:48:4B:F5:C2:93","sha256":"7B:82:32:90:AB:E3:19:82:86:70:ED:BE:66:BD:5E:25:F3:B7:CB:04:F0:BA:37:9E:C4:1E:19:76:A0:4C:51:C7"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: www.y2matego.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2matego.com/en201\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 16 Jan 2026 22:37:57 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pdvOIdgFTgZ4Nn4E2n8iMHKoceryCfV23I0n%2B6rXvqhItK6zssidDt4M1osnSZSoxTDnLbQObyjSL%2BpsRqyQkDQceMeDalGttX4G4jdeCLKpgv9kt5Ygy2eQ\"}]}\r\netag: W/\"170e164aa0cb1eeafce2881266350d11\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nage: 8047\r\ncf-ray: 9bf119b3af50568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50087,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (419)","md5":"39d4784838c6fb095461897a82e2600b","sha1":"de3ff7e5ddb085abf3e0b948696edecf8b114fad","sha256":"68800abb86c60e1c8b44d2310d18cafdc0df3f919bb6edc7756a68f0658c370d","sha512":"b748a60ff5ef91da7384c7c7ff59dbd7e77e4f726b981f1f4ab8de6083864f6bf6899927f6d526128e295be4b810a346f0cfcb5304bdaa1ca3f8cc934b29b642","ssdeep":"384:o7Zcn1j9535QQ/vXPfsXAl7BI9NJDkwQKyB0eO98zK0UY9HBm6l11E:o7Zcn135JHPtlkJemYtBFl11E","tlshash":"6923a61987b1ca683c2ec1f5a10ae085772e61a4deadcfadfcf01014df847a55da3e58","first_seen":"2026-01-16T22:38:23.976107Z","last_seen":"2026-01-16T22:38:23.976107Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:57.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"GET /beacon.min.js HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2matego.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 16 Jan 2026 22:37:57 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9bf119b3de3149c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-21T19:09:43.310241Z","times_seen":337427,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":14,"dns":1,"connect":1,"send":0,"wait":11,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=945\u0026rd=945\u0026fd=573\u0026bv=25.12.4806\u0026tmpl=70","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:58.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:50:13 GMT","end":"Sun, 29 Mar 2026 00:50:12 GMT"},"fingerprint":{"sha1":"B6:89:38:EE:EF:1E:F1:A0:93:51:BB:7A:F2:13:F5:DF:8C:9B:8F:F7","sha256":"74:22:2C:3F:1E:A6:04:C8:AD:7C:D8:B4:13:57:A5:95:EF:83:FA:28:18:BC:F3:BD:38:93:CB:DA:4B:30:3F:8A"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=945\u0026rd=945\u0026fd=573\u0026bv=25.12.4806\u0026tmpl=70 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2matego.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 16 Jan 2026 22:37:58 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T02:29:52.920518Z","times_seen":16623839,"resource_available":true,"data":null}},"time_used":684,"timings":{"blocked":292,"dns":4,"connect":95,"send":0,"wait":96,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:58.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 23:36:36 GMT","end":"Sat, 28 Mar 2026 23:36:35 GMT"},"fingerprint":{"sha1":"0E:EE:1D:ED:80:5A:CA:0C:1E:93:89:94:78:B7:34:91:38:D4:89:51","sha256":"CF:77:1B:FB:04:67:32:02:DF:D9:38:24:27:3D:A5:98:54:0C:4D:BA:C5:1B:62:FD:C1:E1:17:57:6F:63:B3:BF"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2matego.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 16 Jan 2026 22:37:58 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2b938798e3d233d166fd64bda928a59e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-06-22T02:01:28.341978Z","times_seen":19322,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":59,"dns":1,"connect":17,"send":0,"wait":21,"receive":23,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"18.197.4.117","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:58.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2matego.com/\r\nOrigin: https://www.y2matego.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 16 Jan 2026 22:37:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://www.y2matego.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=d6858a13-b3e4-4291-abd4-ba1fbafd3168:2:1; expires=Mon, 14 Jan 2036 22:37:58 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"a82f0ea3062050d67f84bc59fff08844","sha1":"9cd406ed600a1a735013cc6491dc9ed8d0615526","sha256":"bc98741efbb2b54e216f803142314cbd032cdbee05b1ca80a2299361ca3715b7","sha512":"2395641d6e1fe1b94708faddac288e5f1c2a6adffdf505d0fcbaac47c9c78d7739d3f700ca898decbb79da089e6c1a653e29ec82ff00487d2071172fbf0d64fc","ssdeep":"","tlshash":"2d900444d04370d4100c70c5735503d1f1c34014d3050c553441430cd10d0411d10051","first_seen":"2026-01-16T22:38:23.977699Z","last_seen":"2026-01-16T22:38:23.977699Z","times_seen":1,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":127,"dns":10,"connect":21,"send":0,"wait":22,"receive":1,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudflareinsights.com/cdn-cgi/rum","fqdn":"cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:58.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"POST /cdn-cgi/rum HTTP/1.1\r\nHost: cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2matego.com/\r\ncontent-type: application/json\r\nContent-Length: 401\r\nOrigin: https://www.y2matego.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":401,"data":"{\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":1035,\"startTime\":1768603077297,\"versions\":{\"js\":\"2024.6.1\",\"timings\":1},\"pageloadId\":\"045850e4-5414-4a63-ba65-17fa15b4aa89\",\"location\":\"https://www.y2matego.com/en201\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"transferSize\":9779,\"decodedBodySize\":46848},\"siteToken\":\"b443909c68eb4c6f863bd19630cf4a3d\",\"st\":2}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 16 Jan 2026 22:37:58 GMT\r\naccess-control-allow-origin: https://www.y2matego.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 9bf119ba8ea132fa-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T02:29:52.920518Z","times_seen":16623839,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2matego.com/cdn-cgi/zaraz/t","fqdn":"www.y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.y2matego.com/en201","date":"2026-01-16T22:37:58.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.y2matego.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 23:25:51 GMT","end":"Mon, 02 Mar 2026 00:25:42 GMT"},"fingerprint":{"sha1":"13:DE:FB:D2:ED:86:B6:DE:05:2F:90:0C:C9:83:F0:DD:C3:A9:A9:84","sha256":"C6:50:72:67:13:E2:D2:D6:E3:B9:FC:40:F8:F6:51:6F:73:C3:94:03:0D:58:9B:D0:87:13:C2:34:DC:FE:AF:29"}}},"request":{"raw":"POST /cdn-cgi/zaraz/t HTTP/1.1\r\nHost: www.y2matego.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2matego.com/en201\r\nContent-Type: application/json\r\nContent-Length: 321\r\nOrigin: https://www.y2matego.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cfzs_google-analytics_v4=%7B%22VAIU_pageviewCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_google-analytics_v4=%7B%22VAIU_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1800139078394%7D%2C%22VAIU_engagementStart%22%3A%7B%22v%22%3A%221768603078394%22%2C%22e%22%3A1800139078394%7D%2C%22VAIU_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1800139078394%7D%2C%22VAIU_ga4sid%22%3A%7B%22v%22%3A%221319663648%22%2C%22e%22%3A1768604878394%7D%2C%22VAIU_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1800139078394%7D%2C%22VAIU_ga4%22%3A%7B%22v%22%3A%22426230ab-3fa5-47ea-b45f-0650357c736c%22%2C%22e%22%3A1800139078394%7D%2C%22VAIU_let%22%3A%7B%22v%22%3A%221768603078394%22%2C%22e%22%3A1800139078394%7D%7D; dom3ic8zudi28v8lr6fgphwffqoz0j6c=d6858a13-b3e4-4291-abd4-ba1fbafd3168%3A2%3A1; pp_main_1c755ae288cf77acfe873bf08cfc2107=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":321,"data":"{\"name\":\"__zarazSPA\",\"data\":{\"__zcl_track\":true,\"__zcl_visibilityChange\":true,\"__zarazMCListeners\":{}},\"zarazData\":{\"executed\":[\"Pageview\"],\"t\":\"Fast \u0026 Free YouTube Video Downloader - y2mate\",\"x\":0.2387049045489119,\"w\":1280,\"h\":1024,\"j\":1024,\"e\":1280,\"l\":\"https://www.y2matego.com/en201\",\"r\":\"\",\"k\":24,\"n\":\"UTF-8\",\"o\":0}}"}},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 16 Jan 2026 22:37:58 GMT\r\ncontent-type: application/json\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: https://www.y2matego.com\r\nset-cookie: cfzs_google-analytics_v4=%7B%22VAIU_pageviewCounter%22%3A%7B%22v%22%3A%222%22%7D%7D; Domain=y2matego.com; Path=/; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_VAIU__pageviewCounter=; Domain=y2matego.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_VAIU__engagementDuration=; Domain=y2matego.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_VAIU__engagementStart=; Domain=y2matego.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_VAIU__counter=; Domain=y2matego.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_VAIU__ga4sid=; Domain=y2matego.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_VAIU__session_counter=; Domain=y2matego.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_VAIU__ga4=; Domain=y2matego.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_VAIU__let=; Domain=y2matego.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax\ncfz_google-analytics_v4=%7B%22VAIU_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1800139078903%7D%2C%22VAIU_engagementStart%22%3A%7B%22v%22%3A%221768603078903%22%2C%22e%22%3A1800139078903%7D%2C%22VAIU_counter%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1800139078903%7D%2C%22VAIU_ga4sid%22%3A%7B%22v%22%3A%221319663648%22%2C%22e%22%3A1768604878903%7D%2C%22VAIU_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1800139078903%7D%2C%22VAIU_ga4%22%3A%7B%22v%22%3A%22426230ab-3fa5-47ea-b45f-0650357c736c%22%2C%22e%22%3A1800139078903%7D%2C%22VAIU_let%22%3A%7B%22v%22%3A%221768603078903%22%2C%22e%22%3A1800139078903%7D%7D; Domain=y2matego.com; Path=/; Max-Age=31536000; HttpOnly; Secure; SameSite=Lax\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Set-Cookie, Cache-Control\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-max-age: 600\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BtahdyfoGonEX5z9YCdy8DvfCh2sCOUuMf%2B5gFhoV9jMG2s3RJjhxmCOZ8s8MFJNbn34d9V0rihe8Ryp8FTadcS4KyRmwubimKD4Ne1o\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bf119bb1df956c6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":238,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1268d3be5572bd5b00b2a785e343ea4f","sha1":"66d1cb6c0c2f7d31cd7ca074fe53bc5e2d99e5e4","sha256":"fbdca515ed8fa93a09238d3bfebb78365ee4fae67d5a3868b51a8ff0f4805d02","sha512":"e6b9ace8b6a5759fa3b05fe99e726568212d1ccbff2544132293e77a8146c5acee8774888c94e670de18913087b98f35bc38f3511fbbc036c390cda9be107e30","ssdeep":"","tlshash":"28d0a7bdad08205444676f63733fae543be2210270c35802471c83d56af4e7bc419ccc","first_seen":"2026-01-16T22:38:23.97857Z","last_seen":"2026-01-16T22:38:23.97857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2matego.com/en201","fqdn":"www.y2matego.com","domain":"y2matego.com","tld":"com"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-16T22:37:57.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2matego.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 05:13:40 GMT","end":"Tue, 03 Mar 2026 06:11:29 GMT"},"fingerprint":{"sha1":"54:1F:B9:65:CD:8F:41:86:1B:25:B8:30:64:1F:46:48:4B:F5:C2:93","sha256":"7B:82:32:90:AB:E3:19:82:86:70:ED:BE:66:BD:5E:25:F3:B7:CB:04:F0:BA:37:9E:C4:1E:19:76:A0:4C:51:C7"}}},"request":{"raw":"GET /en201 HTTP/1.1\r\nHost: www.y2matego.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 16 Jan 2026 22:37:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver-timing: cfCacheStatus;desc=\"HIT\", cfEdge;dur=17,cfOrigin;dur=0\r\ncf-ray: 9bf119b20dcc568f-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 8047\r\ncache-control: public, max-age=14400, must-revalidate\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8YWBcPPzZCJLcQ4Y4jYNnRhbefOU54sljl6Vj8%2FCg5uYf3YG%2F3DIcARkA%2FCk%2FtkJzQjekOjb16sVXGSk%2Bm9hVVNRq0UDLg4zsHAS%2FWj4sZ7Oeh8EIfaAmpaMlRsIgI9md5iNo3%2Ftw77URuhpfp4i\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Fri, 16 Jan 2026 20:23:50 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":46848,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2162)","md5":"b50f90e888982b080050927b43ece599","sha1":"ce6bcb351cc0808d70e15a8c2a3528eccf18b36e","sha256":"c3d5eb237301e6195f396b2ed477609fa7faa11155e04f615d27c42d4dd5b132","sha512":"318d56c0bb8d4caf616f9d2d38fdd5b6b4200c6011d40bcc94bb2981eac28505e23157278dc111461571c50c9a2aa708e0c0c60bb0e293f973a422f06e889c0b","ssdeep":"192:b2KVJYJtybuyahHGNe4y9HCOKBCTj82C86C6SCxHCM34CKtqbOy9Onral+e+6wTA:iE3/Soonra0evIwb/F/uHN+WRMqu","tlshash":"c623c85612f109fe010b80f1bd716b2aae85c10fd55b6c4d72be936e2f86d65c88738e","first_seen":"2026-01-16T22:38:23.979505Z","last_seen":"2026-01-16T22:38:23.979505Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}