{"report_id":"cfed1cbd-61bb-43d5-832d-f547ccb489fa","version":6,"status":"done","tags":[],"date":"2025-07-01T23:46:15Z","url":{"schema":"http","addr":"stfly.vip/MEUPACKZIiiNN","fqdn":"stfly.vip","domain":"stfly.vip","tld":"vip"},"ip":{"addr":"104.21.32.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"stfly.vip/MEUPACKZIiiNN","fqdn":"stfly.vip","domain":"stfly.vip","tld":"vip"},"title":"Stfly"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-09T23:46:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-06-25T15:13:02.145307Z","alert_count":0,"request_count":1,"received_data":4741,"sent_data":485,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ccg90.com","ip":{"addr":"139.45.197.106","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-03-14","domain_rank":0,"first_seen":"2025-04-24T08:34:43.7153Z","last_seen":"2025-06-29T08:03:49.677311Z","alert_count":0,"request_count":3,"received_data":114945,"sent_data":2050,"comment":"","tags":null,"fingerprints":null},{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":9054,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-06-26T14:06:22.29154Z","alert_count":0,"request_count":1,"received_data":832,"sent_data":436,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-06-25T15:09:27.674037Z","alert_count":0,"request_count":2,"received_data":126909,"sent_data":1129,"comment":"","tags":null,"fingerprints":null},{"fqdn":"push-sdk.com","ip":{"addr":"157.90.33.72","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2022-10-25","domain_rank":0,"first_seen":"2022-12-23T14:43:48Z","last_seen":"2025-07-01T22:59:57.29046Z","alert_count":0,"request_count":2,"received_data":55812,"sent_data":796,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dsnijkqq.com","ip":{"addr":"139.45.197.110","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2025-06-30","domain_rank":0,"first_seen":"2025-07-01T23:46:16.14487Z","last_seen":"2025-07-01T23:46:16.14487Z","alert_count":2,"request_count":2,"received_data":1223,"sent_data":879,"comment":"","tags":null,"fingerprints":null},{"fqdn":"shrtfly.vip","ip":{"addr":"172.67.134.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-12-13","domain_rank":0,"first_seen":"2021-02-11T16:12:03Z","last_seen":"2025-07-01T07:14:15.05594Z","alert_count":0,"request_count":1,"received_data":20786,"sent_data":415,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-06-25T15:09:40.381554Z","alert_count":0,"request_count":3,"received_data":959755,"sent_data":1507,"comment":"","tags":null,"fingerprints":null},{"fqdn":"0019x.com","ip":{"addr":"139.45.197.247","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2020-03-19","domain_rank":0,"first_seen":"2025-04-26T17:00:45.991867Z","last_seen":"2025-06-29T08:03:50.164809Z","alert_count":0,"request_count":1,"received_data":3463,"sent_data":1090,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stfly.vip","ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-09","domain_rank":0,"first_seen":"2023-06-09T16:23:32Z","last_seen":"2025-03-01T07:49:56.231723Z","alert_count":0,"request_count":6,"received_data":192208,"sent_data":3524,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-06-25T15:17:31.124867Z","alert_count":0,"request_count":1,"received_data":90523,"sent_data":410,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-01","alert":"Sinkholed","trigger":"dsnijkqq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-04T15:49:11.986924Z","times_seen":770786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stfly.vip/MEUPACKZIiiNN","fqdn":"stfly.vip","domain":"stfly.vip","tld":"vip"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7d6f1db13dabce4d191fa96cda860bb","sha1":"3558951400bc3338af9a584afbef8833c23eae6f","sha256":"9ec4b80068b51b8e02426bc905eeddb2a3cd811e89154cd3f4ca46b1f603a3f5","sha512":"9c1a00f134d0fcb2ed10ce3a4b5da35fc6cf48732248d90e4a541d7c658a0bdb651a629b72756b8efc3aa0e440fe5a888fdcb08630fd0f6c2b91c28ddaf7a3c1","ssdeep":"","tlshash":"bc71b63820b706249417d6b9917f24007a14d0b3d40799f8f99d40a78fd68ecded3ead","size":3622,"data":"","first_seen":"2024-06-15T09:59:41Z","last_seen":"2026-03-26T08:00:09.45322Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stfly.vip/MEUPACKZIiiNN","fqdn":"stfly.vip","domain":"stfly.vip","tld":"vip"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b35fab64d44d6bb782f4fba1595dab40","sha1":"6ce2990040b834f884991e2839ade45012e9ce5e","sha256":"110f2d2efa48ef1417cb70500c96094d27f8d0477a7cd6ad1d81656ac78dc21a","sha512":"f0f8653dde8647b5471350845714067ae137a608606d6246b5931e33d912f941bd0a87ed3e662736bc4ca9765b2ae752dcf679c0d98251258edc8fd67e226227","ssdeep":"384:+v0a/K7iYFRdYtgD50Qen9tO69aI8tAUeNDaUGRQ2t4PpBahqoo+KXnS7YhfGMOY:+K72gDiQ80GaIoQPzahq/AMOY","tlshash":"bfd2e5a7321eb91a8719626150ef2e85a1cc48c4708f1f78e724e53678db53485ebef8","size":28441,"data":"","first_seen":"2025-04-14T03:19:03.221749Z","last_seen":"2025-12-05T08:08:18.203737Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stfly.vip/MEUPACKZIiiNN","fqdn":"stfly.vip","domain":"stfly.vip","tld":"vip"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"896c9a55ba6c6119f31c9c5c06fcd79b","sha1":"8ec469494baa6b23e7a9b1a4578a1707d46b3139","sha256":"141b67f81e42319fb83de74e7dd72a21c6590c8699c35adda3b4037b3e146d11","sha512":"e8d3c8121be0f40da0b68a299e0bf301a0d1a9409f97c022f1d339070b083f89892150b345044ceec71aaa1043594f67b80ed080cc055cc04edb45630d2f9952","ssdeep":"","tlshash":"f8f0305f334619317adf357fa512439ca43048461c05d445792cd9618f2ea83ed26b9c","size":449,"data":"","first_seen":"2024-06-15T09:59:42Z","last_seen":"2026-03-26T08:00:09.45903Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-108199505-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a17572fbe6559696e27529c1c36f1fa","sha1":"ddef8cef02fe67a478f5f44d4d22aed075ca926a","sha256":"d6d2ee863dd33b310adab48a310161a4a6d567f7d3479a47fa5b82bcef2a4bd6","sha512":"5ec88507eee0bb992e3e01469c03b17e68279ef24513ee48db29809edfc22c049d626c066c811c98bf89280a8ac063a9321bb248f192270a0595c1a4e4b77ffc","ssdeep":"3072:GQbuhMa2GTfFk2m8s0AHFQwvOtKpgudFE6bEPTiIkfUgw3cb1K/0hIUimaL7:HutT9k2QFwKpw6QPzgw3cb1KchIUimy","tlshash":"ca54f8cd73d6702693a3a474503f014bb23b69a2f84cd894f186d8d82d74aaa4277f7d","size":286462,"data":"","first_seen":"2025-07-01T23:46:18.107734Z","last_seen":"2025-07-01T23:46:18.107734Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stfly.vip/sandbox%20eval%20code","fqdn":"stfly.vip","domain":"stfly.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-04T15:49:11.879704Z","times_seen":772334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-354543616\u0026cx=c\u0026gtm=457e56u2za200\u0026tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104573694~104684208~104684211~104718208~104839054~104839056","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aaea30e57d32fd16a4a6bef5ca77f168","sha1":"db4f78c4988d54c4215d36fcd29a6222c483612b","sha256":"547573ead1c4cc32acc8023cba41c9d4c6bba1824341f4aa99ee91fe88e38746","sha512":"ae038d2aae04202828620947947aac6621896495c67b2a8f7baac1e50bd4ccf8e55aaf6019e2265d64f9f89cca312d43f6d3da721651c94f073b9dfbf4555a36","ssdeep":"3072:LJuhMa2GTfS2mZs09HVQwvOtKpgudFE6bfziIkfUgw3cb1K/0GIUiCkL7:9utTq2gFwKpw6rTgw3cb1KcGIUiCM","tlshash":"4f44f8c873d6b42683a36478503f114bb23b7a92f84cd894f182d8d92d74aa94277f7d","size":266498,"data":"","first_seen":"2025-07-01T23:46:18.106252Z","last_seen":"2025-07-01T23:46:18.106252Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stfly.vip/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"stfly.vip","domain":"stfly.vip","tld":"vip"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T15:48:54.538757Z","times_seen":292239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stfly.vip/MEUPACKZIiiNN","fqdn":"stfly.vip","domain":"stfly.vip","tld":"vip"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"59ebe0b9de3964823af9e47ca93a4955","sha1":"f8bc090309fd3f812825b06ac082ea98cd27a8f7","sha256":"fcb5a666860ca97d0ad3ed1a21203060b8fc1ac42a73b4cf628f8044698d8a2a","sha512":"32316b687527afe0d5dfbfbdd97945dd7af32795cc4ec7830cfc1c64cccc745b86dbf5d6132e5a0f9bec001cda900adb08fc4d5b0e641fecafbee4802bf0f27c","ssdeep":"","tlshash":"f5c02bc8210a0c7195f72b028b3ffb00f4023314d4e09d32880e73084d20f03d764804","size":155,"data":"","first_seen":"2023-03-07T15:18:16Z","last_seen":"2026-03-26T08:00:09.467826Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stfly.vip/MEUPACKZIiiNN","fqdn":"stfly.vip","domain":"stfly.vip","tld":"vip"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"beb77df1fb69a94904b70ecd590ad14a","sha1":"01bbf7153c796c4d065e281d8d17264b44d7c790","sha256":"cfdc1a382906354bf481864b46da43a0539fed3952bf86a41b6cca99d0554287","sha512":"0150702f9aea4d03d01dfdfa65f5780cea80ab649917a704f8f97fbeeaba13214711128e81ca8059735a1ff1d9a5d0adc62f132ccf31e04bc57f113fbd0bd80d","ssdeep":"","tlshash":"e5017d1e2313b335517b31caab17910c14718053a280c09cb78c572a8f7afafd6df689","size":715,"data":"","first_seen":"2025-05-30T05:08:47.309282Z","last_seen":"2025-09-03T22:27:18.083064Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stfly.vip/sandbox%20eval%20code","fqdn":"stfly.vip","domain":"stfly.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-04T15:49:11.879704Z","times_seen":772334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stfly.vip/MEUPACKZIiiNN","fqdn":"stfly.vip","domain":"stfly.vip","tld":"vip"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ffe03f4b1da00f7b2e1ff94807855e4","sha1":"55a2a43090792593a26b208ca28b1e010538ca5b","sha256":"1b0053c480c75aaaf58f6c28d5d791f90dd1f3fff3311507fbb0090e9c74bf75","sha512":"7d1264f0229d5936127f4d3849b5d24d9d8bce09d0966b3163e1ccd7dfe2d450d24d3440f9b59b0f1449090f75e248f5832bf9ab3b9a6958d79b4d5c88995501","ssdeep":"","tlshash":"7f41a06a3293213105d760fe873fe64d392078cf2811b805796c75c08f649da3aea2a6","size":2365,"data":"","first_seen":"2025-07-01T23:46:18.120541Z","last_seen":"2025-07-01T23:46:18.120541Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PDV6XHL2ZF\u0026cx=c\u0026gtm=457e56u2za200\u0026tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104573694~104684208~104684211~104718208~104839054~104839056","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fb730ba61a82327dac9b154110d9020","sha1":"7050ba144ea6111a93aa055bed7d0cac5e5eeacf","sha256":"0cd7c8fa78981f11e89edcf4c74736a166a05ae7db1f0f02ebfb94869901037e","sha512":"2fa3dfe377dfd084ded9caf3e6aca1c8d5fd4cc562804f79c95959a3497678e1cf0ec3c4d12ffe6660903c846688a154543438403978a0bb3eea4169d7c9d188","ssdeep":"6144:PutTJ3k2+sFwKpw6gaaLgw3cb1KcCLxPjr:Od3v+NKpaQk/","tlshash":"4e8408ce73d670269396f478503f018ba57b29a2b45cc89af189cce42d74a9a4137f7c","size":403787,"data":"","first_seen":"2025-07-01T23:46:18.109058Z","last_seen":"2025-07-01T23:46:18.109058Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-04T15:47:50.301033Z","times_seen":444894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"push-sdk.com/f/sdk.js?z=1558819","fqdn":"push-sdk.com","domain":"push-sdk.com","tld":"com"},"ip":{"addr":"157.90.33.72","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4d87b22393ed5eef57d01d86c6a88f6","sha1":"5e1aaee78cd735c23cc423fc863decca30aee219","sha256":"91cf9b34af48f3b62d706127b1140c89d8bb3a5455120acd2cfcfc41ab4ad5ee","sha512":"bba6ac4eafefb3415063cea1a572f7b56625300e5e671bedeb71eee84b72c532bd7815491602cc3a7059a2bfc1ace5a35ff6065709b60bbf9891e3849c82767c","ssdeep":"1536:/7LMSZcnLitlCr8WoeisV69SDG3nY+kH+sYK:/7L1Y2NViBYK","tlshash":"a933818877c6713412a7a4ac056f50daeb2b3c34944e890adc53f3a2297576eef23d74","size":54787,"data":"","first_seen":"2025-04-01T19:54:23.10118Z","last_seen":"2026-04-04T06:10:58.823222Z","times_seen":7949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-04T15:49:11.986924Z","times_seen":770786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stfly.vip/MEUPACKZIiiNN","fqdn":"stfly.vip","domain":"stfly.vip","tld":"vip"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbe4da85fda962f177f0aafb84fdf2cd","sha1":"24ac278ef5dd8359ba4145650d30f98fd91a450c","sha256":"228409e789f6c05453df3d017a5bcd49657b5da6d96ddae4706500ed885b352f","sha512":"5a9a5f5c50aa3dfa408ae7a644ab4e6d2ff88aa0ebfaf657143cbb4d1ad450be9d6d2a20d3e59e7fc81cf546b6be132ba804289e180675b5004d268b2b982850","ssdeep":"","tlshash":"8cc01284ada41fb014e950c227062945f59916954ff420f3d608144eeaa758786551a2","size":172,"data":"","first_seen":"2025-07-01T23:46:18.121239Z","last_seen":"2025-07-01T23:46:18.121239Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ccg90.com/5/7704232","fqdn":"ccg90.com","domain":"ccg90.com","tld":"com"},"ip":{"addr":"139.45.197.106","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e99e79278a1b3a9f5f66ddc684ac675","sha1":"8d1b7edf6758979712bbfd9094cba3a4b8761a12","sha256":"911ede2c878dc59d2fff32df837cc7e18fe9fc7c6ebdb06a5618de54694bd61c","sha512":"b97d7c8c34b55d61eccfc7e704de58785e9225c8dbf408a8de7553d1ce96d2a16ea600cf4b00fd52bafdeb9eec2046972a5c961c3f7dbaad5cafc720e9a7d489","ssdeep":"3072:l6bmFoOO2CDq51owa4fJ86DA0SN6atF8vE91qk:gKFoOO2YaSwa4fbVSztFt","tlshash":"34b34aca328a7459167b8430486bdc1e63aa4e51144dc97ce1f1f8b63c78b14a3b7fe9","size":112095,"data":"","first_seen":"2025-07-01T23:46:18.109682Z","last_seen":"2025-07-01T23:46:18.109682Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"0019x.com/?rb=pn6O8RVb5wo6gmaYCUfFaqclL3CLcqQnr69ceuForDs2_SheKhs9-LTDVrpusaNXNrFs-DxPncn1czwea4Y33ewyzJJXjzgwldDU6fk1BjW1ApH-viqDog2hLPUbI1c3GWl9LzBva5konC_dn1agtgtFLC6Om_YwmtR33MWIY9mx9KmvYYy2-0FgAD5hCrbtKU4mDDvT4HSVnDKT_vuzRW8jUBv1QW-MBUhnjxqjSaaZbAQRtMN7hzEAaOqn0VyKz6UNkmtUod4%3D\u0026request_ab2=0\u0026zoneid=7704232\u0026js_build=iclick-v1.1473.0\u0026jsp=1\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026wih=1024\u0026wiw=1280\u0026ww=1280\u0026wh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026cw=1280\u0026wfc=1\u0026pl=https%3A%2F%2Fstfly.vip%2FMEUPACKZIiiNN\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026btz=UTC\u0026bto=0\u0026tt=4\u0026wgl=llvmpipe\u0026js_build=iclick-v1.1473.0\u0026navlng=en-US\u0026vsbl=true\u0026pnt=0\u0026pnrc=0\u0026wasm=-1\u0026bs=3119e191-1987-4089-ae43-1838605e47b7\u0026userId=0081f90360124978ec8107f1e18fead7\u0026m=link","fqdn":"0019x.com","domain":"0019x.com","tld":"com"},"ip":{"addr":"139.45.197.247","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:55.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"0019x.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Apr 2025 13:50:28 GMT","end":"Mon, 21 Jul 2025 13:50:27 GMT"},"fingerprint":{"sha1":"1A:74:70:52:50:28:3C:32:E8:00:D5:10:3B:27:73:E4:1B:54:93:CE","sha256":"DF:08:4A:2B:C1:DF:6A:9A:CB:68:CB:2C:89:88:52:77:88:A1:48:08:AC:7B:23:CC:A6:3D:08:0E:DE:B5:C4:06"}}},"request":{"raw":"GET /?rb=pn6O8RVb5wo6gmaYCUfFaqclL3CLcqQnr69ceuForDs2_SheKhs9-LTDVrpusaNXNrFs-DxPncn1czwea4Y33ewyzJJXjzgwldDU6fk1BjW1ApH-viqDog2hLPUbI1c3GWl9LzBva5konC_dn1agtgtFLC6Om_YwmtR33MWIY9mx9KmvYYy2-0FgAD5hCrbtKU4mDDvT4HSVnDKT_vuzRW8jUBv1QW-MBUhnjxqjSaaZbAQRtMN7hzEAaOqn0VyKz6UNkmtUod4%3D\u0026request_ab2=0\u0026zoneid=7704232\u0026js_build=iclick-v1.1473.0\u0026jsp=1\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026wih=1024\u0026wiw=1280\u0026ww=1280\u0026wh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026cw=1280\u0026wfc=1\u0026pl=https%3A%2F%2Fstfly.vip%2FMEUPACKZIiiNN\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026btz=UTC\u0026bto=0\u0026tt=4\u0026wgl=llvmpipe\u0026js_build=iclick-v1.1473.0\u0026navlng=en-US\u0026vsbl=true\u0026pnt=0\u0026pnrc=0\u0026wasm=-1\u0026bs=3119e191-1987-4089-ae43-1838605e47b7\u0026userId=0081f90360124978ec8107f1e18fead7\u0026m=link HTTP/1.1\r\nHost: 0019x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://stfly.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 01 Jul 2025 23:45:55 GMT\r\ncontent-type: application/json\r\nx-trace-id: de9b3fb631d7d3e19d280e5096dff4e8\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://stfly.vip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nset-cookie: OAID=0081f90360124978ec8107f1e18fead7; expires=Wed, 01 Jul 2026 23:45:55 GMT; path=/; secure; SameSite=None\noaidts=1751413555; expires=Wed, 01 Jul 2026 23:45:55 GMT; path=/; secure; SameSite=None\nsyncedCookie=true; expires=Tue, 08 Jul 2025 23:45:55 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2263,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"78fed95042f08e77d2264b84681a133d","sha1":"bc8b332369e73ff49a6c21df7c1852663f776536","sha256":"10011fe525c28157e8d1760cae762c3979e60f09529b7bdf184a4d75e50d4236","sha512":"6b5bfe28bc474d11f221ff8bb1bfb14cfc536acecc3c0bbb1e2d6554a2b393de25a130de27e7f6b4140930e3287557bbb18ef519d3c4641a302ea28347f7ea45","ssdeep":"","tlshash":"2b411b6245c4d0236b256afb2ced668ff3b816322861480ce51f248d973e392086c6e0","first_seen":"2025-07-01T23:46:18.091201Z","last_seen":"2025-07-01T23:46:18.091201Z","times_seen":1,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":183,"dns":9,"connect":29,"send":0,"wait":46,"receive":0,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stfly.vip/wp-content/plugins/api-blueprint/assets/style.css?v=1.0.6a","fqdn":"stfly.vip","domain":"stfly.vip","tld":"vip"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:53.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stfly.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 May 2025 14:00:37 GMT","end":"Fri, 15 Aug 2025 14:57:59 GMT"},"fingerprint":{"sha1":"E7:C4:E1:06:48:DD:4F:F1:53:49:1D:F0:8E:78:41:4D:22:EE:D4:22","sha256":"D6:9A:2F:39:E3:83:0E:C8:C8:82:03:9B:36:8E:8E:CE:8F:1A:E4:02:97:5D:E8:27:5C:DB:70:94:9E:5D:89:78"}}},"request":{"raw":"GET /wp-content/plugins/api-blueprint/assets/style.css?v=1.0.6a HTTP/1.1\r\nHost: stfly.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://stfly.vip/MEUPACKZIiiNN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: 5eb651a0125ff327424813a82a6d8060=UUhCXK8nsDohxikYRU24kpvMTOnF8ShvChWa9qe8IupVla3kTG-2PvZ3uu_G4xCH2IlRaNBZBlQi-ifrnVqxQg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 01 Jul 2025 23:45:53 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 17 Apr 2025 17:56:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"680140b0-1e4fd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\ncontent-encoding: br\r\nage: 1460856\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2U3X5qIIPcoZoYCX909PyuyUsRvUlfNpifaI6tcJrmO2czauMNJebpoZ60VoLtpxd4e%2F3wCoxJNZaDfPjEB%2FNwRTVEqRDR8%3D\"}]}\r\ncf-ray: 9589c7934df2b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":124157,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fecee00f27b98f2325707b0c1834938f","sha1":"b715fb788d1f022f748e75b96e13f539c4478c08","sha256":"b71515fb130226188620cdd236c56a9e69bf699518336d6610f858d989126866","sha512":"cb608651d9039ef07be3f2578f1159b22247a046c3b821e57e704ee1a8ce8924f40b4cabe94905188459687a248bbf8d8bc056beff749f11d74ed9bcf1a71bf2","ssdeep":"768:kbZfn135JIkiA+PMnH/DQ91/5YtB9ojj+KsqCxi2sCmmzpL:k1fn135JqEnHU91/5QoiL","tlshash":"6fc36929c6f3dab8387ed360914d90493a3966a2d5ed8fbaf4f05610cfc4fa50a57c24","first_seen":"2024-06-15T09:59:42Z","last_seen":"2026-03-26T08:00:09.39598Z","times_seen":151,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:53.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7","sha256":"94:9A:1A:D4:CD:CE:19:77:99:6C:C9:14:BB:6E:F6:23:C5:40:A9:70:50:E6:B6:CC:DD:B0:18:CE:3F:DB:E7:A1"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://stfly.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Jun 2025 17:15:04 GMT\r\nexpires: Fri, 26 Jun 2026 17:15:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 455449\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-04T15:49:29.305287Z","times_seen":133206,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":154,"dns":1,"connect":14,"send":0,"wait":15,"receive":24,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"push-sdk.com/event?z=1558819","fqdn":"push-sdk.com","domain":"push-sdk.com","tld":"com"},"ip":{"addr":"157.90.33.72","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:53.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"push-sdk.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Jun 2025 03:47:05 GMT","end":"Wed, 03 Sep 2025 03:47:04 GMT"},"fingerprint":{"sha1":"2E:9A:67:76:0E:42:81:D5:30:A2:76:47:85:CA:6C:D7:FD:FF:38:9C","sha256":"0A:D3:9C:34:9D:46:8A:FF:D7:B8:F6:65:98:72:8A:8C:3F:40:10:BE:3D:B4:55:B5:58:5E:4D:8F:52:36:57:FD"}}},"request":{"raw":"POST /event?z=1558819 HTTP/1.1\r\nHost: push-sdk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 83\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Tue, 01 Jul 2025 23:45:53 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: null\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\ncache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 00:00:00 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsnijkqq.com/","fqdn":"dsnijkqq.com","domain":"dsnijkqq.com","tld":"com"},"ip":{"addr":"139.45.197.110","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:53.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dsnijkqq.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 10:53:13 GMT","end":"Sun, 28 Sep 2025 10:53:12 GMT"},"fingerprint":{"sha1":"35:D6:AE:0D:96:69:93:15:16:B1:B3:1A:D5:83:0F:12:E8:2A:9F:C0","sha256":"EC:B7:0C:FB:85:C8:FE:5A:6E:B3:19:62:6A:14:38:57:C4:74:32:4C:70:7E:21:0E:18:9C:35:1A:08:7B:9B:9B"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: dsnijkqq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: HEAD\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://stfly.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 01 Jul 2025 23:45:54 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\naccess-control-allow-origin: https://stfly.vip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid\r\naccess-control-max-age: 86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":98,"dns":2,"connect":26,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-01","alert":"Sinkholed","trigger":"dsnijkqq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsnijkqq.com/","fqdn":"dsnijkqq.com","domain":"dsnijkqq.com","tld":"com"},"ip":{"addr":"139.45.197.110","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:54.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dsnijkqq.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 10:53:13 GMT","end":"Sun, 28 Sep 2025 10:53:12 GMT"},"fingerprint":{"sha1":"35:D6:AE:0D:96:69:93:15:16:B1:B3:1A:D5:83:0F:12:E8:2A:9F:C0","sha256":"EC:B7:0C:FB:85:C8:FE:5A:6E:B3:19:62:6A:14:38:57:C4:74:32:4C:70:7E:21:0E:18:9C:35:1A:08:7B:9B:9B"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: dsnijkqq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/html\r\nOrigin: https://stfly.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 01 Jul 2025 23:45:54 GMT\r\ncontent-type: text/html\r\nx-t86r19a94c7e35-64i64d55: 00000000000000000000000000000000\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: https://stfly.vip\r\naccess-control-expose-headers: Link, X-Application-Token, X-Application-Key, X-Tag, X-Auth-Token, X-DirectionPartner-Id, X-ZoneType-Id, X-Hostname\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\ntiming-allow-origin: *\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\nx-application-key: qmc3qOqyiKd8tqlmvqtg8\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-01","alert":"Sinkholed","trigger":"dsnijkqq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stfly.vip/wp-content/uploads/2023/06/favicon.png","fqdn":"stfly.vip","domain":"stfly.vip","tld":"vip"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:54.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stfly.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 May 2025 14:00:37 GMT","end":"Fri, 15 Aug 2025 14:57:59 GMT"},"fingerprint":{"sha1":"E7:C4:E1:06:48:DD:4F:F1:53:49:1D:F0:8E:78:41:4D:22:EE:D4:22","sha256":"D6:9A:2F:39:E3:83:0E:C8:C8:82:03:9B:36:8E:8E:CE:8F:1A:E4:02:97:5D:E8:27:5C:DB:70:94:9E:5D:89:78"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/favicon.png HTTP/1.1\r\nHost: stfly.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://stfly.vip/MEUPACKZIiiNN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: 5eb651a0125ff327424813a82a6d8060=MhiVOmz8ZHznJf2mm1Cxlye22791bYAyrQ1m_wWI8yu05dOz7Rb3a9AHf02Ke45F3ZSIxfFX8FH6tStBeP8hDw; _ga_PDV6XHL2ZF=GS2.1.s1751413554$o1$g0$t1751413554$j60$l0$h0; _ga=GA1.1.711077968.1751413554\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 01 Jul 2025 23:45:54 GMT\r\ncontent-type: image/png\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sxldaDiLSPtwYe3TuAajWJq0J%2FzpD7yczMJSsd8gN8wif1bYLtkBIrzf%2B7RTL2fxKV49px9G%2BGcVhOF1jXzXyeaf44JXiJjpP8AV8m0fjcIo200U%2F0ILEL9XQKY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 20 Jun 2023 14:18:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6491b53a-4f9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nage: 1301270\r\ncf-cache-status: HIT\r\ncf-ray: 9589c79a0b3b568d-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3685\u0026min_rtt=604\u0026rtt_var=3133\u0026sent=138\u0026recv=205\u0026lost=0\u0026retrans=0\u0026sent_bytes=12869\u0026recv_bytes=11905\u0026delivery_rate=569137\u0026ss_exit_cwnd=14898\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=79cc6a6488517c23\u0026ts=1300\u0026inflight_dur=87\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"77004a5b31f1c5ab30755cad675630cb","sha1":"9ff49298b2f92e7895b7d47a115b2473fe3d35e1","sha256":"f75a1c9fe89949bcaa5941eb8f583e9df82b4b07da88162fdb552660b7909b60","sha512":"2badc54128c62dbc866cb0ee5281a128e2955c88ca04b54bff2c5c0b7dc2bfba347312e97a8f70b76d5edba1126d17a1e95e00f88d6df8be78e451e939d110e6","ssdeep":"","tlshash":"fa21e7ffe68017a0d63afc76d6f1d08466a43cb6955398c06bf448820c696c41f275bf","first_seen":"2023-05-09T23:52:27Z","last_seen":"2025-11-20T13:18:47.414767Z","times_seen":131,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:53.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 May 2025 14:38:44 GMT","end":"Wed, 20 Aug 2025 15:38:38 GMT"},"fingerprint":{"sha1":"4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77","sha256":"92:B0:F4:51:5C:E9:3A:03:19:F4:50:36:49:FA:A1:01:1D:F0:A1:91:F7:A3:53:E6:19:AA:C4:FA:3D:C4:31:6E"}}},"request":{"raw":"GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 01 Jul 2025 23:45:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27938\r\ncf-ray: 9589c7938f1f56c1-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"603e8adc-15d9d\"\r\nlast-modified: Tue, 02 Mar 2021 18:58:36 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 436645\r\nexpires: Sun, 21 Jun 2026 23:45:53 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2ByAGkMLd%2F3Nz%2Fq%2FAUnlN6sGMDhEWRVY7g0gj%2BhSoXAneIbVPeTwS32X2RJuAuETb0r9VYlH2DUubEIXwsfZwv8YLdfM8jSLImXsp3okB54ZffyODsTniCcRiOPmOtFfa0c0lLbsN\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-04T15:47:50.301033Z","times_seen":444894,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":37,"dns":1,"connect":1,"send":0,"wait":13,"receive":3,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Bricolage+Grotesque:opsz,wght@12..96,200..800\u0026family=Inter:wght@100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:53.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86","sha256":"89:68:57:F4:FD:04:C3:94:84:10:59:C7:94:CB:87:1D:7C:07:51:29:D1:25:C6:75:F4:33:16:EE:2D:9F:60:3B"}}},"request":{"raw":"GET /css2?family=Bricolage+Grotesque:opsz,wght@12..96,200..800\u0026family=Inter:wght@100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 01 Jul 2025 23:45:53 GMT\r\ndate: Tue, 01 Jul 2025 23:45:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4055,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c9f6a45a2a14d02a3541a1353aeb14d2","sha1":"f9701501760cd4e6813d672fb73a7ca5c7139608","sha256":"c9a1fa60eb7df47c3edd61c002806df25d2e7e6f6e956670dcece52fd207181c","sha512":"7775bdb3280f080d88bb0523f9e3a5d7d93b6bb38fdf6632d7331a8d38db507e204e6bdc44f4174e3463d90e0fec6b599c370314f04ec2dceaf31cb09244dd77","ssdeep":"","tlshash":"2081fc81402b9500ab974cc233cf7e36ee9e60906485e2b87ffe1cd99ceac26536575d","first_seen":"2025-05-30T05:08:47.278869Z","last_seen":"2025-09-03T22:27:18.071578Z","times_seen":39,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":196,"dns":0,"connect":12,"send":0,"wait":17,"receive":0,"ssl":181},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stfly.vip/wp-content/uploads/2024/06/logo_dark.png","fqdn":"stfly.vip","domain":"stfly.vip","tld":"vip"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:53.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stfly.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 May 2025 14:00:37 GMT","end":"Fri, 15 Aug 2025 14:57:59 GMT"},"fingerprint":{"sha1":"E7:C4:E1:06:48:DD:4F:F1:53:49:1D:F0:8E:78:41:4D:22:EE:D4:22","sha256":"D6:9A:2F:39:E3:83:0E:C8:C8:82:03:9B:36:8E:8E:CE:8F:1A:E4:02:97:5D:E8:27:5C:DB:70:94:9E:5D:89:78"}}},"request":{"raw":"GET /wp-content/uploads/2024/06/logo_dark.png HTTP/1.1\r\nHost: stfly.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://stfly.vip/MEUPACKZIiiNN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: 5eb651a0125ff327424813a82a6d8060=UUhCXK8nsDohxikYRU24kpvMTOnF8ShvChWa9qe8IupVla3kTG-2PvZ3uu_G4xCH2IlRaNBZBlQi-ifrnVqxQg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 01 Jul 2025 23:45:53 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Jun 2024 18:02:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6668912d-3072\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\ncontent-encoding: br\r\nage: 1178904\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IANisJiTLF%2BnM2w1DKHty4BQMSOpoRMxlUqAMKyVhGB%2BJEwxvd0w4Df5ogPD1HYdQ2ntf50Jgrsz16Fmr%2B6huuodkZnST1c%3D\"}]}\r\ncf-ray: 9589c7934df3b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 684 x 230, 8-bit colormap, non-interlaced","md5":"09bae29b50ce7910314ded2a5d6481ea","sha1":"26074d868508b6a4ebac91afbea1b0888f4a948a","sha256":"1fdf97d7e41f1a6dea5ea8dbccfe97ae4b2804a40b9e9b7dfeb500926e923dd7","sha512":"2e5a9b2435db39fdef896244380da52648a4d40ac2b03df1fc1c709ecdb0ee57a9d58dc833c15178b813632cc8643206ba13fd135d9e939b34ee9eac0620a668","ssdeep":"384:BijTbLtD+c4UL5jJkV2hQ+e9Z8RxiHhqkY9K6:Aj/p1DjJkQK7ORUEX","tlshash":"f842c00c09775bc6167a8032d0ab0cbfb57345719db61abc6a8c3aa794cd0f5c6ce60b","first_seen":"2024-06-15T11:02:40Z","last_seen":"2026-03-26T08:00:09.376342Z","times_seen":126,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrtfly.vip/img/Join-Telegram-Channel.png","fqdn":"shrtfly.vip","domain":"shrtfly.vip","tld":"vip"},"ip":{"addr":"172.67.134.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:53.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrtfly.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Jun 2025 19:00:05 GMT","end":"Sat, 20 Sep 2025 19:58:32 GMT"},"fingerprint":{"sha1":"1A:36:28:78:93:89:7D:9B:62:F6:65:7F:C8:73:E0:8B:56:EC:0E:6F","sha256":"31:A2:0B:5E:B2:13:39:16:78:E3:DF:4E:39:C9:4B:EC:4E:80:D8:FF:C9:6D:DF:E0:F3:4A:31:97:72:E3:59:5B"}}},"request":{"raw":"GET /img/Join-Telegram-Channel.png HTTP/1.1\r\nHost: shrtfly.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 01 Jul 2025 23:45:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 20023\r\nserver: cloudflare\r\nlast-modified: Thu, 16 May 2024 06:19:23 GMT\r\netag: \"6645a56b-4e37\"\r\nexpires: Mon, 21 Jul 2025 22:19:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 869209\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X4HSMsQF0Pbtlra66UNSc9L97G142t4rFQEN%2BRk%2FLLFHeN8wbIlCUCgWAt8hfb0cUPR0ljSwjaEakOJmHl%2BFWMJ%2BqsoTc6c71w%3D%3D\"}]}\r\ncf-ray: 9589c793bb92568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20023,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 768 x 245, 8-bit colormap, non-interlaced","md5":"06ac021d13ac2211cfac5de3f4c0cab6","sha1":"45496ca6056a32e5cf396fa657960020df4ccb13","sha256":"cc860eff23be351ffc4a3249e2365f3271f162295e944ba4c1de8c37ee9e8141","sha512":"d84d0229ec464bf264b6337fab0e08a1a416f79d0164036b383bc5bddb23b4b9e684cf8cd8cf665a6e995af690dc0cb3c9306764685a59c1caeb333f0809e057","ssdeep":"384:D7w8l7GGkirwI5JXm1JyemxcgP7pHCFvWvZNINJMCAHoNoRwdy2gCu/Ptw1SfWoa:D7lSGkgX+yHxcglHCvWB2NHAHoNowdyq","tlshash":"f792d06181109f34e64325b1e0b53becd2add6db7564ad22851b895fbada323b8e30c0","first_seen":"2024-06-02T21:58:41Z","last_seen":"2026-03-26T08:00:09.394165Z","times_seen":155,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":60,"dns":13,"connect":1,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stfly.vip/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"stfly.vip","domain":"stfly.vip","tld":"vip"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:53.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stfly.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 May 2025 14:00:37 GMT","end":"Fri, 15 Aug 2025 14:57:59 GMT"},"fingerprint":{"sha1":"E7:C4:E1:06:48:DD:4F:F1:53:49:1D:F0:8E:78:41:4D:22:EE:D4:22","sha256":"D6:9A:2F:39:E3:83:0E:C8:C8:82:03:9B:36:8E:8E:CE:8F:1A:E4:02:97:5D:E8:27:5C:DB:70:94:9E:5D:89:78"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: stfly.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://stfly.vip/MEUPACKZIiiNN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: 5eb651a0125ff327424813a82a6d8060=UUhCXK8nsDohxikYRU24kpvMTOnF8ShvChWa9qe8IupVla3kTG-2PvZ3uu_G4xCH2IlRaNBZBlQi-ifrnVqxQg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 01 Jul 2025 23:45:53 GMT\r\ncontent-type: application/javascript\r\nexpires: Wed, 02 Jul 2025 00:33:53 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hKir%2Bv3A0qtldcVOSgIBh%2BMYOgQYfBiYKcRnhNdMPv4pA4nEdld%2BADBVrxjhPr3evOHBqVQF9cBVTdjccwufBPaz34gfMm0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9589c7934df4b4eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T15:48:54.538757Z","times_seen":292239,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stfly.vip/MEUPACKZIiiNN","fqdn":"stfly.vip","domain":"stfly.vip","tld":"vip"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:53.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stfly.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 May 2025 14:00:37 GMT","end":"Fri, 15 Aug 2025 14:57:59 GMT"},"fingerprint":{"sha1":"E7:C4:E1:06:48:DD:4F:F1:53:49:1D:F0:8E:78:41:4D:22:EE:D4:22","sha256":"D6:9A:2F:39:E3:83:0E:C8:C8:82:03:9B:36:8E:8E:CE:8F:1A:E4:02:97:5D:E8:27:5C:DB:70:94:9E:5D:89:78"}}},"request":{"raw":"HEAD /MEUPACKZIiiNN HTTP/1.1\r\nHost: stfly.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://stfly.vip/MEUPACKZIiiNN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: 5eb651a0125ff327424813a82a6d8060=UUhCXK8nsDohxikYRU24kpvMTOnF8ShvChWa9qe8IupVla3kTG-2PvZ3uu_G4xCH2IlRaNBZBlQi-ifrnVqxQg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 01 Jul 2025 23:45:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=O64d30LVpF3JTe%2B70hJ9HSRXZtlgKquzOp6iGDpCx6brpDpb2qojdTFeKP9WVpfGGwhFLrrRT2piQNt%2FhlfxZaYIk2cPiuJL6K59btK6yAjjef3f%2FQ0KbcRytH4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nset-cookie: 5eb651a0125ff327424813a82a6d8060=MhiVOmz8ZHznJf2mm1Cxlye22791bYAyrQ1m_wWI8yu05dOz7Rb3a9AHf02Ke45F3ZSIxfFX8FH6tStBeP8hDw; expires=Wed, 02-Jul-2025 23:45:53 GMT; Max-Age=86400; path=/; domain=stfly.vip; HttpOnly; SameSite=Lax\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9589c7959b23568d-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2809\u0026min_rtt=604\u0026rtt_var=1842\u0026sent=136\u0026recv=203\u0026lost=0\u0026retrans=0\u0026sent_bytes=11860\u0026recv_bytes=11390\u0026delivery_rate=569137\u0026ss_exit_cwnd=14898\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=79cc6a6488517c23\u0026ts=643\u0026inflight_dur=57\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/bricolagegrotesque/v8/3y9K6as8bTXq_nANBjzKo3IeZx8z6up5BeSl9D4dj_x9PpZBMlGIInHWUSNIpvI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:53.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7","sha256":"94:9A:1A:D4:CD:CE:19:77:99:6C:C9:14:BB:6E:F6:23:C5:40:A9:70:50:E6:B6:CC:DD:B0:18:CE:3F:DB:E7:A1"}}},"request":{"raw":"GET /s/bricolagegrotesque/v8/3y9K6as8bTXq_nANBjzKo3IeZx8z6up5BeSl9D4dj_x9PpZBMlGIInHWUSNIpvI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://stfly.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 76708\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 30 Jun 2025 23:44:56 GMT\r\nexpires: Tue, 30 Jun 2026 23:44:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 86457\r\nlast-modified: Tue, 11 Mar 2025 01:16:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76708,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76708, version 1.0","md5":"e4fb7cb2cabbdbaeb698e9107c10995b","sha1":"6fcd8fb90adf70483ab37cd1055dd21f577c2ddf","sha256":"37d43e1615cd7f5c6e41d0da9a45253b89c06837026ff7caed07519bf9493e05","sha512":"7e2523e867c79af7dc8e6e87d5f9479acd9bacac87d793bacd23303a5d7d5815ef5162346858504f0767289fab6f70215ddd831552a53e6d1c16937c9a829256","ssdeep":"1536:gVJjNzmEcEb3votzMp0Rbd6nKqo9ZJxiYjrPaB86zyU49Xg:yj1mEcAAF7RbNqyJsuPz6zi9Q","tlshash":"117313a8ae33dfa890acfa7ca15846598385e815c9e99711ccdd5d7c2833f8d14fbc80","first_seen":"2025-03-13T21:45:43.00591Z","last_seen":"2026-04-03T12:56:43.930628Z","times_seen":738,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":160,"dns":8,"connect":16,"send":0,"wait":37,"receive":12,"ssl":135},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-354543616\u0026cx=c\u0026gtm=457e56u2za200\u0026tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104573694~104684208~104684211~104718208~104839054~104839056","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:53.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:35:30 GMT","end":"Mon, 25 Aug 2025 08:35:29 GMT"},"fingerprint":{"sha1":"79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA","sha256":"F5:17:47:03:4B:39:BD:9F:79:87:88:F4:F3:FF:C3:7D:05:5D:EB:4D:D3:F5:02:E8:2B:96:3B:BA:AA:97:0D:B3"}}},"request":{"raw":"GET /gtag/js?id=UA-354543616\u0026cx=c\u0026gtm=457e56u2za200\u0026tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104573694~104684208~104684211~104718208~104839054~104839056 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 01 Jul 2025 23:45:53 GMT\r\nexpires: Tue, 01 Jul 2025 23:45:53 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 01 Jul 2025 22:12:41 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0\r\nreport-to: {\"group\":\"ascgcycc:1077:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 94776\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":266498,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2069)","md5":"aaea30e57d32fd16a4a6bef5ca77f168","sha1":"db4f78c4988d54c4215d36fcd29a6222c483612b","sha256":"547573ead1c4cc32acc8023cba41c9d4c6bba1824341f4aa99ee91fe88e38746","sha512":"ae038d2aae04202828620947947aac6621896495c67b2a8f7baac1e50bd4ccf8e55aaf6019e2265d64f9f89cca312d43f6d3da721651c94f073b9dfbf4555a36","ssdeep":"3072:LJuhMa2GTfS2mZs09HVQwvOtKpgudFE6bfziIkfUgw3cb1K/0GIUiCkL7:9utTq2gFwKpw6rTgw3cb1KcGIUiCM","tlshash":"4f44f8c873d6b42683a36478503f114bb23b7a92f84cd894f182d8d92d74aa94277f7d","first_seen":"2025-07-01T23:46:18.106252Z","last_seen":"2025-07-01T23:46:18.106252Z","times_seen":1,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ccg90.com/wrr?z=7704232\u0026p_rid=3119e191-1987-4089-ae43-1838605e47b7\u0026rb=pn6O8RVb5wo6gmaYCUfFaqclL3CLcqQnr69ceuForDs2_SheKhs9-LTDVrpusaNXNrFs-DxPncn1czwea4Y33ewyzJJXjzgwldDU6fk1BjW1ApH-viqDog2hLPUbI1c3GWl9LzBva5konC_dn1agtgtFLC6Om_YwmtR33MWIY9mx9KmvYYy2-0FgAD5hCrbtKU4mDDvT4HSVnDKT_vuzRW8jUBv1QW-MBUhnjxqjSaaZbAQRtMN7hzEAaOqn0VyKz6UNkmtUod4=\u0026dmn=ccg90.com\u0026userId=0081f90360124978ec8107f1e18fead7","fqdn":"ccg90.com","domain":"ccg90.com","tld":"com"},"ip":{"addr":"139.45.197.106","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:55.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ccg90.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Apr 2025 09:55:55 GMT","end":"Tue, 22 Jul 2025 09:55:54 GMT"},"fingerprint":{"sha1":"56:09:8B:A2:B0:CC:2D:94:BB:34:A2:E9:A2:FD:C7:53:D9:F4:20:83","sha256":"A8:5A:AC:F2:5D:5C:A1:05:5C:81:17:D6:35:88:39:FF:88:AA:6D:40:81:D3:2C:6D:4B:08:F7:11:CD:F0:90:65"}}},"request":{"raw":"OPTIONS /wrr?z=7704232\u0026p_rid=3119e191-1987-4089-ae43-1838605e47b7\u0026rb=pn6O8RVb5wo6gmaYCUfFaqclL3CLcqQnr69ceuForDs2_SheKhs9-LTDVrpusaNXNrFs-DxPncn1czwea4Y33ewyzJJXjzgwldDU6fk1BjW1ApH-viqDog2hLPUbI1c3GWl9LzBva5konC_dn1agtgtFLC6Om_YwmtR33MWIY9mx9KmvYYy2-0FgAD5hCrbtKU4mDDvT4HSVnDKT_vuzRW8jUBv1QW-MBUhnjxqjSaaZbAQRtMN7hzEAaOqn0VyKz6UNkmtUod4=\u0026dmn=ccg90.com\u0026userId=0081f90360124978ec8107f1e18fead7 HTTP/1.1\r\nHost: ccg90.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://stfly.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Tue, 01 Jul 2025 23:45:55 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://stfly.vip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":99,"dns":5,"connect":26,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ccg90.com/wrr?z=7704232\u0026p_rid=3119e191-1987-4089-ae43-1838605e47b7\u0026rb=pn6O8RVb5wo6gmaYCUfFaqclL3CLcqQnr69ceuForDs2_SheKhs9-LTDVrpusaNXNrFs-DxPncn1czwea4Y33ewyzJJXjzgwldDU6fk1BjW1ApH-viqDog2hLPUbI1c3GWl9LzBva5konC_dn1agtgtFLC6Om_YwmtR33MWIY9mx9KmvYYy2-0FgAD5hCrbtKU4mDDvT4HSVnDKT_vuzRW8jUBv1QW-MBUhnjxqjSaaZbAQRtMN7hzEAaOqn0VyKz6UNkmtUod4=\u0026dmn=ccg90.com\u0026userId=0081f90360124978ec8107f1e18fead7","fqdn":"ccg90.com","domain":"ccg90.com","tld":"com"},"ip":{"addr":"139.45.197.106","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:55.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ccg90.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Apr 2025 09:55:55 GMT","end":"Tue, 22 Jul 2025 09:55:54 GMT"},"fingerprint":{"sha1":"56:09:8B:A2:B0:CC:2D:94:BB:34:A2:E9:A2:FD:C7:53:D9:F4:20:83","sha256":"A8:5A:AC:F2:5D:5C:A1:05:5C:81:17:D6:35:88:39:FF:88:AA:6D:40:81:D3:2C:6D:4B:08:F7:11:CD:F0:90:65"}}},"request":{"raw":"POST /wrr?z=7704232\u0026p_rid=3119e191-1987-4089-ae43-1838605e47b7\u0026rb=pn6O8RVb5wo6gmaYCUfFaqclL3CLcqQnr69ceuForDs2_SheKhs9-LTDVrpusaNXNrFs-DxPncn1czwea4Y33ewyzJJXjzgwldDU6fk1BjW1ApH-viqDog2hLPUbI1c3GWl9LzBva5konC_dn1agtgtFLC6Om_YwmtR33MWIY9mx9KmvYYy2-0FgAD5hCrbtKU4mDDvT4HSVnDKT_vuzRW8jUBv1QW-MBUhnjxqjSaaZbAQRtMN7hzEAaOqn0VyKz6UNkmtUod4=\u0026dmn=ccg90.com\u0026userId=0081f90360124978ec8107f1e18fead7 HTTP/1.1\r\nHost: ccg90.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 2595\r\nOrigin: https://stfly.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Tue, 01 Jul 2025 23:45:55 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://stfly.vip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stfly.vip/MEUPACKZIiiNN","fqdn":"stfly.vip","domain":"stfly.vip","tld":"vip"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-01T23:45:52.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stfly.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 May 2025 14:00:37 GMT","end":"Fri, 15 Aug 2025 14:57:59 GMT"},"fingerprint":{"sha1":"E7:C4:E1:06:48:DD:4F:F1:53:49:1D:F0:8E:78:41:4D:22:EE:D4:22","sha256":"D6:9A:2F:39:E3:83:0E:C8:C8:82:03:9B:36:8E:8E:CE:8F:1A:E4:02:97:5D:E8:27:5C:DB:70:94:9E:5D:89:78"}}},"request":{"raw":"GET /MEUPACKZIiiNN HTTP/1.1\r\nHost: stfly.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 01 Jul 2025 23:45:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZwY%2BDEk8R4tibW2quEmSVdDibch4eEm%2BPaaNli%2FHTwXHJUfVFZELVD8wuuekkSiZ6Ik7I3NyCfV90brrueBGcBwoh623b7Y%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: 5eb651a0125ff327424813a82a6d8060=UUhCXK8nsDohxikYRU24kpvMTOnF8ShvChWa9qe8IupVla3kTG-2PvZ3uu_G4xCH2IlRaNBZBlQi-ifrnVqxQg; HttpOnly; SameSite=Lax; Path=/; Domain=stfly.vip; Max-Age=86400; Expires=Wed, 02 Jul 2025 23:45:52 GMT\r\ncf-ray: 9589c790eca2b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":47233,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28513), with CRLF, LF line terminators","md5":"4ab078f5c646728cabdcfbd1b461982b","sha1":"88246af57bef9cc81b33157d52199b6941c53e93","sha256":"0be1c7a59c8a7392a1c00c2bb8290c0aa0e1a0454886a250c74eb29a86ddeb4d","sha512":"6193b937f41199f95b0fc0b8b1207676f40b7fabf4436ba7de722d357e7b748422004fc3d2b0659f166cb5e0781ca1a84e716a9f6becdc56bc26d5d9c668a79f","ssdeep":"768:7yvyRwBXE1K72gDiQ80GaIoQPzahq/AMOBNWLYAx68/p/WdW:78lBXf720GI7MOBNWL5E8/p/8W","tlshash":"bc231aa6315e79190267517150bf2a89e5cc80c6b10f4a68f76ce1233fe793489e7ef8","first_seen":"2025-07-01T23:46:18.106966Z","last_seen":"2025-07-01T23:46:18.106966Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":24,"dns":1,"connect":1,"send":0,"wait":164,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-108199505-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:53.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:35:30 GMT","end":"Mon, 25 Aug 2025 08:35:29 GMT"},"fingerprint":{"sha1":"79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA","sha256":"F5:17:47:03:4B:39:BD:9F:79:87:88:F4:F3:FF:C3:7D:05:5D:EB:4D:D3:F5:02:E8:2B:96:3B:BA:AA:97:0D:B3"}}},"request":{"raw":"GET /gtag/js?id=UA-108199505-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 01 Jul 2025 23:45:53 GMT\r\nexpires: Tue, 01 Jul 2025 23:45:53 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0\r\nreport-to: {\"group\":\"ascgcycc:1077:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 100806\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":286462,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5913)","md5":"6a17572fbe6559696e27529c1c36f1fa","sha1":"ddef8cef02fe67a478f5f44d4d22aed075ca926a","sha256":"d6d2ee863dd33b310adab48a310161a4a6d567f7d3479a47fa5b82bcef2a4bd6","sha512":"5ec88507eee0bb992e3e01469c03b17e68279ef24513ee48db29809edfc22c049d626c066c811c98bf89280a8ac063a9321bb248f192270a0595c1a4e4b77ffc","ssdeep":"3072:GQbuhMa2GTfFk2m8s0AHFQwvOtKpgudFE6bEPTiIkfUgw3cb1K/0hIUimaL7:HutT9k2QFwKpw6QPzgw3cb1KchIUimy","tlshash":"ca54f8cd73d6702693a3a474503f014bb23b69a2f84cd894f186d8d82d74aaa4277f7d","first_seen":"2025-07-01T23:46:18.107734Z","last_seen":"2025-07-01T23:46:18.107734Z","times_seen":1,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":171,"dns":6,"connect":14,"send":0,"wait":46,"receive":47,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"push-sdk.com/f/sdk.js?z=1558819","fqdn":"push-sdk.com","domain":"push-sdk.com","tld":"com"},"ip":{"addr":"157.90.33.72","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:53.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"push-sdk.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Jun 2025 03:47:05 GMT","end":"Wed, 03 Sep 2025 03:47:04 GMT"},"fingerprint":{"sha1":"2E:9A:67:76:0E:42:81:D5:30:A2:76:47:85:CA:6C:D7:FD:FF:38:9C","sha256":"0A:D3:9C:34:9D:46:8A:FF:D7:B8:F6:65:98:72:8A:8C:3F:40:10:BE:3D:B4:55:B5:58:5E:4D:8F:52:36:57:FD"}}},"request":{"raw":"GET /f/sdk.js?z=1558819 HTTP/1.1\r\nHost: push-sdk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Tue, 01 Jul 2025 23:45:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 15242\r\ncontent-encoding: gzip\r\ncache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54787,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54745), with no line terminators","md5":"f4d87b22393ed5eef57d01d86c6a88f6","sha1":"5e1aaee78cd735c23cc423fc863decca30aee219","sha256":"91cf9b34af48f3b62d706127b1140c89d8bb3a5455120acd2cfcfc41ab4ad5ee","sha512":"bba6ac4eafefb3415063cea1a572f7b56625300e5e671bedeb71eee84b72c532bd7815491602cc3a7059a2bfc1ace5a35ff6065709b60bbf9891e3849c82767c","ssdeep":"1536:/7LMSZcnLitlCr8WoeisV69SDG3nY+kH+sYK:/7L1Y2NViBYK","tlshash":"a933818877c6713412a7a4ac056f50daeb2b3c34944e890adc53f3a2297576eef23d74","first_seen":"2025-04-01T19:54:23.10118Z","last_seen":"2026-04-04T06:10:58.823222Z","times_seen":7949,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":106,"dns":4,"connect":26,"send":0,"wait":28,"receive":2,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PDV6XHL2ZF\u0026cx=c\u0026gtm=457e56u2za200\u0026tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104573694~104684208~104684211~104718208~104839054~104839056","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:53.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:35:30 GMT","end":"Mon, 25 Aug 2025 08:35:29 GMT"},"fingerprint":{"sha1":"79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA","sha256":"F5:17:47:03:4B:39:BD:9F:79:87:88:F4:F3:FF:C3:7D:05:5D:EB:4D:D3:F5:02:E8:2B:96:3B:BA:AA:97:0D:B3"}}},"request":{"raw":"GET /gtag/js?id=G-PDV6XHL2ZF\u0026cx=c\u0026gtm=457e56u2za200\u0026tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104573694~104684208~104684211~104718208~104839054~104839056 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 01 Jul 2025 23:45:53 GMT\r\nexpires: Tue, 01 Jul 2025 23:45:53 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0\r\nreport-to: {\"group\":\"ascgcycc:1077:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 134021\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":403787,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6004)","md5":"7fb730ba61a82327dac9b154110d9020","sha1":"7050ba144ea6111a93aa055bed7d0cac5e5eeacf","sha256":"0cd7c8fa78981f11e89edcf4c74736a166a05ae7db1f0f02ebfb94869901037e","sha512":"2fa3dfe377dfd084ded9caf3e6aca1c8d5fd4cc562804f79c95959a3497678e1cf0ec3c4d12ffe6660903c846688a154543438403978a0bb3eea4169d7c9d188","ssdeep":"6144:PutTJ3k2+sFwKpw6gaaLgw3cb1KcCLxPjr:Od3v+NKpaQk/","tlshash":"4e8408ce73d670269396f478503f018ba57b29a2b45cc89af189cce42d74a9a4137f7c","first_seen":"2025-07-01T23:46:18.109058Z","last_seen":"2025-07-01T23:46:18.109058Z","times_seen":1,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ccg90.com/5/7704232","fqdn":"ccg90.com","domain":"ccg90.com","tld":"com"},"ip":{"addr":"139.45.197.106","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:54.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ccg90.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Apr 2025 09:55:55 GMT","end":"Tue, 22 Jul 2025 09:55:54 GMT"},"fingerprint":{"sha1":"56:09:8B:A2:B0:CC:2D:94:BB:34:A2:E9:A2:FD:C7:53:D9:F4:20:83","sha256":"A8:5A:AC:F2:5D:5C:A1:05:5C:81:17:D6:35:88:39:FF:88:AA:6D:40:81:D3:2C:6D:4B:08:F7:11:CD:F0:90:65"}}},"request":{"raw":"GET /5/7704232 HTTP/1.1\r\nHost: ccg90.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 01 Jul 2025 23:45:54 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: 29f257161d1ad7f0a20eb5ddc7da0ddb\r\nlink: \u003chttps://my.rtmark.net\u003e; rel=\"preconnect dns-prefetch\"\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nset-cookie: OAID=0081f90360124978ec8107f1e18fead7; expires=Wed, 01 Jul 2026 23:45:54 GMT; path=/; secure; SameSite=None\noaidts=1751413554; expires=Wed, 01 Jul 2026 23:45:54 GMT; path=/; secure; SameSite=None\nsyncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":112095,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3e99e79278a1b3a9f5f66ddc684ac675","sha1":"8d1b7edf6758979712bbfd9094cba3a4b8761a12","sha256":"911ede2c878dc59d2fff32df837cc7e18fe9fc7c6ebdb06a5618de54694bd61c","sha512":"b97d7c8c34b55d61eccfc7e704de58785e9225c8dbf408a8de7553d1ce96d2a16ea600cf4b00fd52bafdeb9eec2046972a5c961c3f7dbaad5cafc720e9a7d489","ssdeep":"3072:l6bmFoOO2CDq51owa4fJ86DA0SN6atF8vE91qk:gKFoOO2YaSwa4fbVSztFt","tlshash":"34b34aca328a7459167b8430486bdc1e63aa4e51144dc97ce1f1f8b63c78b14a3b7fe9","first_seen":"2025-07-01T23:46:18.109682Z","last_seen":"2025-07-01T23:46:18.109682Z","times_seen":1,"resource_available":true,"data":null}},"time_used":429,"timings":{"blocked":185,"dns":10,"connect":26,"send":0,"wait":58,"receive":0,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js?userId=0081f90360124978ec8107f1e18fead7","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://stfly.vip/MEUPACKZIiiNN","date":"2025-07-01T23:45:54.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 12:11:05 GMT","end":"Sun, 28 Sep 2025 13:11:03 GMT"},"fingerprint":{"sha1":"89:E0:23:FC:5B:0F:07:0F:7E:EC:B8:4F:B5:1D:3B:1F:6B:5C:22:0B","sha256":"66:DE:FF:43:09:A3:D6:B0:70:4E:47:82:C8:66:35:42:25:2E:23:CA:5A:1A:CF:A3:1E:23:A0:0E:D3:E3:95:95"}}},"request":{"raw":"GET /gid.js?userId=0081f90360124978ec8107f1e18fead7 HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://stfly.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 01 Jul 2025 23:45:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: https://stfly.vip\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=0081f90360124978ec8107f1e18fead7; expires=Wed, 01 Jul 2026 23:45:54 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9589c79dab660b31-OSL\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"80c657efe016c3911d0d0bda251a85f4","sha1":"df752a9316e380d8e862a2fcfbbc1b243bbcb425","sha256":"81dfd0b81bd627d54e8fb6bccadaafed0165e1040c08957f21fc01a3124fd40e","sha512":"94618bdfd10dde39eeb72906ab2cd6d86e35ad87dab274dcaa39df3b6824aa90d6df48421a956522ffa18d509c0443f1a416a45058a1e3a44ff4866af0e53387","ssdeep":"","tlshash":"eda002840a1d45955c0587556d47af39448b74926cf8624d41d44141179a1bccc6e784","first_seen":"2025-07-01T23:46:18.110321Z","last_seen":"2025-07-01T23:46:18.110321Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":32,"dns":5,"connect":1,"send":0,"wait":42,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}