{"report_id":"d4189f62-ccbd-4dd8-9b88-705fb71aac8c","version":6,"status":"done","tags":["netflix","phishing"],"date":"2026-05-04T13:10:48Z","url":{"schema":"http","addr":"notification-nftxupgrad.botmada.live","fqdn":"notification-nftxupgrad.botmada.live","domain":"botmada.live","tld":"live"},"ip":{"addr":"158.69.52.169","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"notification-nftxupgrad.botmada.live/","fqdn":"notification-nftxupgrad.botmada.live","domain":"botmada.live","tld":"live"},"title":"Netflix","dom":{"size":16965,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"1e5750edbee38228caf734fbf5bcd56d","sha1":"15f0792c09b6754b721256eb796c67f064c06781","sha256":"83bb05c18c04380a7b17ff043a1ee5399338f032bbe39fe0fa7882940b95f5a2","sha512":"04c0f2cda2b265fd9ff36a9e54aea968a9854e84864731895dfe006eddc2a644e539cebc9f8c41a1da0efe632c2590496b8f8164eb989cf174603978d8fa236e","ssdeep":"384:YjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/G:YFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+5","tlshash":"1f72fe50041744009b835ce223ce7f34fe4e92517242d0b1abfd9b6beedbda6926939d","dom_hash":"domhash08ae0081c1574fe7e013785c60b9d7d5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"notification-nftxupgrad.botmada.live","fqdn":"notification-nftxupgrad.botmada.live","domain":"botmada.live","tld":"live"},"ip":{"addr":"158.69.52.169","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-08T13:10:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"notification-nftxupgrad.botmada.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"assets.nflxext.com","ip":{"addr":"45.57.90.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"domain_registered":"2011-02-11","domain_rank":22756,"first_seen":"2015-07-22T04:02:07Z","last_seen":"2026-05-03T13:37:42.314534Z","alert_count":0,"request_count":2,"received_data":404351,"sent_data":1078,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-05-03T22:44:42.17747Z","alert_count":0,"request_count":7,"received_data":3679008,"sent_data":3388,"comment":"","tags":null,"fingerprints":null},{"fqdn":"1000logos.net","ip":{"addr":"104.26.8.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-09-07","domain_rank":51487,"first_seen":"2017-01-24T12:12:42Z","last_seen":"2026-04-27T14:01:24.870388Z","alert_count":0,"request_count":1,"received_data":24432,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-05-03T22:38:47.35999Z","alert_count":0,"request_count":4,"received_data":76052,"sent_data":2645,"comment":"","tags":null,"fingerprints":null},{"fqdn":"notification-nftxupgrad.botmada.live","ip":{"addr":"158.69.52.169","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-04T13:10:51.776105Z","last_seen":"2026-05-04T13:10:51.776105Z","alert_count":2,"request_count":1,"received_data":13192,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-03T22:17:40.953609Z","alert_count":0,"request_count":1,"received_data":40963,"sent_data":543,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c00af12b700c7907ecfb00fb82e3046a","sha1":"8e5bd498cd00b4edbfaff131519298a76f76d2ac","sha256":"d44e2e75c188b407f5c797417816193afcd06f36f3498fc092b33e36ae1ef991","sha512":"16c7b6d2b7e212dcf2ab81ffa6c233bb9afe15c75d8881a218596d7008b1ab6c84d7f071001c221aaa8c0e442198da4978695b8853a904e794bdf98fbc387cb3","ssdeep":"","tlshash":"d91154b31a14f0390b3119a1e1ffcbbaf442702cf16889f8a915de886f6acc7cd05945","size":976,"data":"","first_seen":"2026-04-30T21:04:25.107681Z","last_seen":"2026-05-08T07:10:39.426205Z","times_seen":4459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/dNfi_jsbkQb4Hbw7F1b82Uia/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dcdb4e3bca35a7aa8b1d867dfff12f72","sha1":"ab7452aedcdfd7c78cd87d613b6bd3c97c24ab21","sha256":"95a83c64d43fae8d54a9e0a8f53e32d77cc3e86f0f78260daf059373f41a1bfe","sha512":"0d7d222602d10678b7c2fb6462a5f70a83683899d5eab920ab2dce9e582e76ab0ee883b334a9e36a208a5218dc94ed5d7dec4f88b65daa49e36ed2faeb32cc66","ssdeep":"12288:CeX9TirHnC5srv7UtLjYUxsjxIqQu8mboriBnS+OHJOsHBf:FuCyrAtL0UmxITu8mNnbO4sHBf","tlshash":"cf1527d9b46675614322b9f1142b1089633e9569c8ac685fb6c5c8f23fb040e60faff7","size":876004,"data":"","first_seen":"2026-04-30T21:02:23.372094Z","last_seen":"2026-05-13T20:52:13.708055Z","times_seen":18786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le9fNcsAAAAAORi4t8Z1f4XmTpE6FRcR8uOAOJ8\u0026co=aHR0cHM6Ly9ub3RpZmljYXRpb24tbmZ0eHVwZ3JhZC5ib3RtYWRhLmxpdmU6NDQz\u0026hl=en\u0026v=dNfi_jsbkQb4Hbw7F1b82Uia\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=lg6wfpf8y0wg","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-05-20T13:56:00.731978Z","times_seen":448629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le9fNcsAAAAAORi4t8Z1f4XmTpE6FRcR8uOAOJ8\u0026co=aHR0cHM6Ly9ub3RpZmljYXRpb24tbmZ0eHVwZ3JhZC5ib3RtYWRhLmxpdmU6NDQz\u0026hl=en\u0026v=dNfi_jsbkQb4Hbw7F1b82Uia\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=lg6wfpf8y0wg","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5c41d911ea2fb0e0f88bbe4c8b4f1d5","sha1":"9556ffb483daaa74392ebab49dba1a252e93bafc","sha256":"bb45b18bd43fa05b20e0f47324c1e52637e4a04ac31dc78837d45ab2d81db818","sha512":"d187ead32d60734076c1e005d42fcd366614956664cbf263eab31c7d0a8d62ada9da2850c90f6d004801193707cfd6960173e9c56a69c7c3dae0b8a5da565bb1","ssdeep":"768:H9dJUPKIWRCZ9+55NzBz5cd978uEAGCauBb94WSLORvH6AiWM7iA1I:HJUPKzASllcD2Ata4Z4WSSU8","tlshash":"7ff2af1dec0b34efdebe4be10be867cc21bd465e068a247c20f525835a956cfa5168cc","size":35819,"data":"","first_seen":"2026-05-04T13:10:58.928852Z","last_seen":"2026-05-04T13:10:58.928852Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/dNfi_jsbkQb4Hbw7F1b82Uia/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dcdb4e3bca35a7aa8b1d867dfff12f72","sha1":"ab7452aedcdfd7c78cd87d613b6bd3c97c24ab21","sha256":"95a83c64d43fae8d54a9e0a8f53e32d77cc3e86f0f78260daf059373f41a1bfe","sha512":"0d7d222602d10678b7c2fb6462a5f70a83683899d5eab920ab2dce9e582e76ab0ee883b334a9e36a208a5218dc94ed5d7dec4f88b65daa49e36ed2faeb32cc66","ssdeep":"12288:CeX9TirHnC5srv7UtLjYUxsjxIqQu8mboriBnS+OHJOsHBf:FuCyrAtL0UmxITu8mNnbO4sHBf","tlshash":"cf1527d9b46675614322b9f1142b1089633e9569c8ac685fb6c5c8f23fb040e60faff7","size":876004,"data":"","first_seen":"2026-04-30T21:02:23.372094Z","last_seen":"2026-05-13T20:52:13.708055Z","times_seen":18786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=dNfi_jsbkQb4Hbw7F1b82Uia\u0026k=6Le9fNcsAAAAAORi4t8Z1f4XmTpE6FRcR8uOAOJ8\u0026bft=0dAFcWeA7icmUji-eSnFKieNfPawEawExJWNbIt_GiHVAieauB0YiJF5yVlZwfaQ5pkOao6xshgV2GN25rCKM2Dx35MyimRnbetw","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-05-20T13:56:00.731978Z","times_seen":448629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=dNfi_jsbkQb4Hbw7F1b82Uia\u0026k=6Le9fNcsAAAAAORi4t8Z1f4XmTpE6FRcR8uOAOJ8\u0026bft=0dAFcWeA7icmUji-eSnFKieNfPawEawExJWNbIt_GiHVAieauB0YiJF5yVlZwfaQ5pkOao6xshgV2GN25rCKM2Dx35MyimRnbetw","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c48a7344af5550127b503540695d0efc","sha1":"090c0795a1f97bfe42f169dc3ae937f876849b1d","sha256":"ad0e05122e2cf7504c4be175bed035ca4e04cdf5c702c0ad138ab0dafefe5680","sha512":"97b5e894c066eab41aefdd774802a0339c2c8016e7771eb8a6b36314763d90609a042e6e6476c39b1926e0a63c41c1179aaf9f4a55409e55e8c272f3d7a5e1a9","ssdeep":"","tlshash":"94d0a9a2a3022dfa0c20ac31085a019e1c890a23e01287f87ace7c0a6fa0d097e009b8","size":219,"data":"","first_seen":"2026-05-04T13:10:58.930731Z","last_seen":"2026-05-04T13:57:21.046233Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notification-nftxupgrad.botmada.live/","fqdn":"notification-nftxupgrad.botmada.live","domain":"botmada.live","tld":"live"},"ip":{"addr":"158.69.52.169","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"42cd48d6ed42caa3211fe3f6170738de","sha1":"a78b97c1caf51f6ba0b41cea9c16ac68d618c441","sha256":"1eb97569b66ae5e91366b927d20d02cd416bc813ff75d587f9bfe59b21537468","sha512":"10c12cb59ad29dfacb1d9d0faccbe18586cc21128d954e804e473b11bdf4abe9ebad82f0de0008409bbb0c6fcbed9229e3decf545001e9ad6ecb9676d518bcf8","ssdeep":"","tlshash":"a421523eb6ba28319ab3b0b56fcb2246312250272047cd053e6dd2884f62f200f70f79","size":1398,"data":"","first_seen":"2025-11-12T04:12:41.556214Z","last_seen":"2026-05-04T13:57:21.045336Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/dNfi_jsbkQb4Hbw7F1b82Uia/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dcdb4e3bca35a7aa8b1d867dfff12f72","sha1":"ab7452aedcdfd7c78cd87d613b6bd3c97c24ab21","sha256":"95a83c64d43fae8d54a9e0a8f53e32d77cc3e86f0f78260daf059373f41a1bfe","sha512":"0d7d222602d10678b7c2fb6462a5f70a83683899d5eab920ab2dce9e582e76ab0ee883b334a9e36a208a5218dc94ed5d7dec4f88b65daa49e36ed2faeb32cc66","ssdeep":"12288:CeX9TirHnC5srv7UtLjYUxsjxIqQu8mboriBnS+OHJOsHBf:FuCyrAtL0UmxITu8mNnbO4sHBf","tlshash":"cf1527d9b46675614322b9f1142b1089633e9569c8ac685fb6c5c8f23fb040e60faff7","size":876004,"data":"","first_seen":"2026-04-30T21:02:23.372094Z","last_seen":"2026-05-13T20:52:13.708055Z","times_seen":18786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"assets.nflxext.com/us/ffe/siteui/common/icons/nficon2023.ico","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.90.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://notification-nftxupgrad.botmada.live/","date":"2026-05-04T13:10:26.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Mon, 01 Jun 2026 23:41:12 GMT"},"fingerprint":{"sha1":"04:5C:91:5E:7B:CF:B1:E7:1E:69:60:8C:5F:C0:05:19:D5:DE:58:19","sha256":"9C:8B:2E:85:D2:C7:6B:03:BC:DB:72:B5:18:F4:FC:EB:6A:CE:CA:79:65:0D:E2:AB:53:74:07:7D:E7:59:1A:22"}}},"request":{"raw":"GET /us/ffe/siteui/common/icons/nficon2023.ico HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://notification-nftxupgrad.botmada.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Mon, 04 May 2026 13:10:26 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 9854\r\nConnection: keep-alive\r\nContent-MD5: WPVNnqFRdmcYAr6+7k2kyw==\r\nLast-Modified: Thu, 31 Aug 2023 18:57:29 GMT\r\nCache-Control: max-age=604801\r\nExpires: Mon, 11 May 2026 13:10:27 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9854,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"58f54d9ea15176671802bebeee4da4cb","sha1":"4ba1cb97814772435962f3ac25af0def81851735","sha256":"9c5f7722c5df8eb24dda20ecc01c9f73e3103e10052fd980da4e7d9f753a97d3","sha512":"32e6c1ac6220b03bafb9215e4db4cf91352573c34a82accc893b4c7d4d3194d495e241c2f814372930a988688492926fe1d9a5576d2e46378c9f6d1e927c71db","ssdeep":"48:5uZhmwr2VEbaA+8H3J7HZqH0S/DHDHp8HfH5gAaqHwMqHBVqH/6BqHAtvqHAAcqK:shm0AN6YHEOFtwVPmyqPmorAtAco","tlshash":"8a12a02710c35d6cfe016eb8d297ec3a517d40ddeefe82e79a81bd390612146a5cb8e4","first_seen":"2023-09-08T13:51:14Z","last_seen":"2026-05-20T12:58:40.518732Z","times_seen":2066,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":1,"connect":23,"send":0,"wait":25,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/dNfi_jsbkQb4Hbw7F1b82Uia/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le9fNcsAAAAAORi4t8Z1f4XmTpE6FRcR8uOAOJ8\u0026co=aHR0cHM6Ly9ub3RpZmljYXRpb24tbmZ0eHVwZ3JhZC5ib3RtYWRhLmxpdmU6NDQz\u0026hl=en\u0026v=dNfi_jsbkQb4Hbw7F1b82Uia\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=lg6wfpf8y0wg","date":"2026-05-04T13:10:27.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /recaptcha/releases/dNfi_jsbkQb4Hbw7F1b82Uia/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 372582\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 03 May 2026 09:08:27 GMT\r\nexpires: Mon, 03 May 2027 09:08:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 27 Apr 2026 02:01:15 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 100920\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":876004,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (681)","md5":"dcdb4e3bca35a7aa8b1d867dfff12f72","sha1":"ab7452aedcdfd7c78cd87d613b6bd3c97c24ab21","sha256":"95a83c64d43fae8d54a9e0a8f53e32d77cc3e86f0f78260daf059373f41a1bfe","sha512":"0d7d222602d10678b7c2fb6462a5f70a83683899d5eab920ab2dce9e582e76ab0ee883b334a9e36a208a5218dc94ed5d7dec4f88b65daa49e36ed2faeb32cc66","ssdeep":"12288:CeX9TirHnC5srv7UtLjYUxsjxIqQu8mboriBnS+OHJOsHBf:FuCyrAtL0UmxITu8mNnbO4sHBf","tlshash":"cf1527d9b46675614322b9f1142b1089633e9569c8ac685fb6c5c8f23fb040e60faff7","first_seen":"2026-04-30T21:02:23.372094Z","last_seen":"2026-05-13T20:52:13.708055Z","times_seen":18786,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/dNfi_jsbkQb4Hbw7F1b82Uia/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=dNfi_jsbkQb4Hbw7F1b82Uia\u0026k=6Le9fNcsAAAAAORi4t8Z1f4XmTpE6FRcR8uOAOJ8\u0026bft=0dAFcWeA7icmUji-eSnFKieNfPawEawExJWNbIt_GiHVAieauB0YiJF5yVlZwfaQ5pkOao6xshgV2GN25rCKM2Dx35MyimRnbetw","date":"2026-05-04T13:10:28.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /recaptcha/releases/dNfi_jsbkQb4Hbw7F1b82Uia/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42543\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 04 May 2026 08:12:49 GMT\r\nexpires: Tue, 04 May 2027 08:12:49 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 27 Apr 2026 02:01:15 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 17859\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"69c86bd71b535988863fb40b8282d15a","sha1":"c5ecd6e34a83d64c2b50703e99dcd2c2bce6ce62","sha256":"471bde804dee50aeb05f26bb784d889885c790245c529104af5625b7d1f9522a","sha512":"54b738cfa9fea9295a3133ee58015ace6e74587db3755266249e24282fcdd39617b3b2257f60879b5cc0f00aeeb9219a9f45532dee65482fe4c50fa2c989d32a","ssdeep":"1536:+7Rpgh9C9ToL9gTNfWNfK4Rx4D9ZzhXwWxd1bx7:+7ArC9ULiTYNC4Rc9Xt","tlshash":"d8837e7338513a1afc2b8b616196bdfdf11cc923e5515bfaa5497a20c3cb0978223747","first_seen":"2026-04-30T21:02:23.377561Z","last_seen":"2026-05-19T18:37:01.924646Z","times_seen":16290,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1000logos.net/wp-content/uploads/2017/05/Netflix-Logo.png","fqdn":"1000logos.net","domain":"1000logos.net","tld":"net"},"ip":{"addr":"104.26.8.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://notification-nftxupgrad.botmada.live/","date":"2026-05-04T13:10:26.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1000logos.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Apr 2026 05:16:12 GMT","end":"Tue, 30 Jun 2026 06:16:09 GMT"},"fingerprint":{"sha1":"73:38:7C:5D:06:6E:49:43:EC:2B:76:9F:D7:C3:5F:E2:EE:72:62:21","sha256":"DD:8B:0D:4E:24:A9:6D:61:F7:9D:FC:8C:C6:C6:F4:6A:1E:46:44:B5:FE:49:1B:3D:8B:7A:B6:10:D0:6D:8E:2B"}}},"request":{"raw":"GET /wp-content/uploads/2017/05/Netflix-Logo.png HTTP/1.1\r\nHost: 1000logos.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://notification-nftxupgrad.botmada.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 May 2026 13:10:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 23751\r\nserver: cloudflare\r\nlast-modified: Sun, 20 Feb 2022 06:57:21 GMT\r\netag: \"6211e651-5cc7\"\r\nexpires: Wed, 06 May 2026 13:10:26 GMT\r\ncache-control: max-age=172800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R4D0Lh4DgQQhsGPdMx9p0kzDu%2FqMYCEUd2ilnaxQkNuN1qDBHrQdmqUCW11Eyt9j9J8mvYzm2lGXW1O0X58GNwl5qBD6uuab%2BxBfnxMJKipJP4OVwuVb0Dt2vVFa0w4%3D\"}]}\r\ncf-ray: 9f67beddaec5712d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23751,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3840 x 2160, 4-bit colormap, non-interlaced","md5":"05c96bba4090acafe115aad47e66572d","sha1":"ccb085f05fa6879890b7af1d1e82cad729e82400","sha256":"36ba5759a9f1b9ac50fce24b34bb65dfc0d25351bbef2a08670ae28228b88f19","sha512":"d48bbda5f3e45caccdfd0a4f6010f2f58c7fb77918ade9b8ce44052dd2278233a36d57e1601188854a17dd5adb06e401b728e769c0b6dec6318eb9f49547ce60","ssdeep":"384:e3+gER0g1Y2jsvz5FaYQecF/+S6jAQI+zpQRW9cYwcDYtWlqGy2:xt+2jIz7aFlFp60c+4c32","tlshash":"89b2c0ba1642c618fe52223c54798aceb47bb737c4073ceb54650f83d50a815f99d8eb","first_seen":"2023-06-12T13:39:41Z","last_seen":"2026-05-16T19:39:28.588731Z","times_seen":258,"resource_available":false,"data":null}},"time_used":779,"timings":{"blocked":64,"dns":34,"connect":1,"send":0,"wait":644,"receive":2,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/dNfi_jsbkQb4Hbw7F1b82Uia/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le9fNcsAAAAAORi4t8Z1f4XmTpE6FRcR8uOAOJ8\u0026co=aHR0cHM6Ly9ub3RpZmljYXRpb24tbmZ0eHVwZ3JhZC5ib3RtYWRhLmxpdmU6NDQz\u0026hl=en\u0026v=dNfi_jsbkQb4Hbw7F1b82Uia\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=lg6wfpf8y0wg","date":"2026-05-04T13:10:27.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /recaptcha/releases/dNfi_jsbkQb4Hbw7F1b82Uia/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42543\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 04 May 2026 08:12:49 GMT\r\nexpires: Tue, 04 May 2027 08:12:49 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 27 Apr 2026 02:01:15 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 17858\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"69c86bd71b535988863fb40b8282d15a","sha1":"c5ecd6e34a83d64c2b50703e99dcd2c2bce6ce62","sha256":"471bde804dee50aeb05f26bb784d889885c790245c529104af5625b7d1f9522a","sha512":"54b738cfa9fea9295a3133ee58015ace6e74587db3755266249e24282fcdd39617b3b2257f60879b5cc0f00aeeb9219a9f45532dee65482fe4c50fa2c989d32a","ssdeep":"1536:+7Rpgh9C9ToL9gTNfWNfK4Rx4D9ZzhXwWxd1bx7:+7ArC9ULiTYNC4Rc9Xt","tlshash":"d8837e7338513a1afc2b8b616196bdfdf11cc923e5515bfaa5497a20c3cb0978223747","first_seen":"2026-04-30T21:02:23.377561Z","last_seen":"2026-05-19T18:37:01.924646Z","times_seen":16290,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le9fNcsAAAAAORi4t8Z1f4XmTpE6FRcR8uOAOJ8\u0026co=aHR0cHM6Ly9ub3RpZmljYXRpb24tbmZ0eHVwZ3JhZC5ib3RtYWRhLmxpdmU6NDQz\u0026hl=en\u0026v=dNfi_jsbkQb4Hbw7F1b82Uia\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=lg6wfpf8y0wg","date":"2026-05-04T13:10:27.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/dNfi_jsbkQb4Hbw7F1b82Uia/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 02 May 2026 18:19:43 GMT\r\nexpires: Sat, 09 May 2026 18:19:43 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nage: 154244\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-05-20T13:56:00.584417Z","times_seen":625525,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=dNfi_jsbkQb4Hbw7F1b82Uia\u0026k=6Le9fNcsAAAAAORi4t8Z1f4XmTpE6FRcR8uOAOJ8\u0026bft=0dAFcWeA7icmUji-eSnFKieNfPawEawExJWNbIt_GiHVAieauB0YiJF5yVlZwfaQ5pkOao6xshgV2GN25rCKM2Dx35MyimRnbetw","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://notification-nftxupgrad.botmada.live/","date":"2026-05-04T13:10:28.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"2F:4C:57:A4:4A:60:44:C4:08:82:D4:9D:9C:A9:1A:8F:89:5F:E8:F0","sha256":"BE:DC:F0:E9:A5:84:8F:67:24:9D:57:FE:79:42:FA:AA:A7:F8:1D:5F:B1:EB:36:BF:36:EE:24:98:71:31:97:4A"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=dNfi_jsbkQb4Hbw7F1b82Uia\u0026k=6Le9fNcsAAAAAORi4t8Z1f4XmTpE6FRcR8uOAOJ8\u0026bft=0dAFcWeA7icmUji-eSnFKieNfPawEawExJWNbIt_GiHVAieauB0YiJF5yVlZwfaQ5pkOao6xshgV2GN25rCKM2Dx35MyimRnbetw HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://notification-nftxupgrad.botmada.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 04 May 2026 13:10:28 GMT\r\ncontent-security-policy: script-src 'nonce-wWyKE-ltb18NBKpAYXLgOg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17035,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"8195be917d242dad344137641f5f8229","sha1":"de7111e7a54c44483c0dbec15a6b83bb071c8656","sha256":"25bff2b609f39ee39295d0c01981834eeb46f333ce8b83b1b5dbce0d505b0a87","sha512":"2e397a9731d860aa96739a645c50ade3fdb1b5c15b7b0e337836e9f2c0beb1412c2f8c9759a4a75fdc9355cd263a5786eff18c5e0e2df412e71ae5f626233cfe","ssdeep":"384:EjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/o:EFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+t","tlshash":"b772fe50041744009b835ce223ce7f34fe4e92517242d0b1abfd9b6beedbda6926939d","first_seen":"2026-05-04T13:10:58.91442Z","last_seen":"2026-05-04T13:10:58.91442Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/dNfi_jsbkQb4Hbw7F1b82Uia/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=dNfi_jsbkQb4Hbw7F1b82Uia\u0026k=6Le9fNcsAAAAAORi4t8Z1f4XmTpE6FRcR8uOAOJ8\u0026bft=0dAFcWeA7icmUji-eSnFKieNfPawEawExJWNbIt_GiHVAieauB0YiJF5yVlZwfaQ5pkOao6xshgV2GN25rCKM2Dx35MyimRnbetw","date":"2026-05-04T13:10:28.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /recaptcha/releases/dNfi_jsbkQb4Hbw7F1b82Uia/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 372582\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 03 May 2026 09:08:27 GMT\r\nexpires: Mon, 03 May 2027 09:08:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 27 Apr 2026 02:01:15 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 100921\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":876004,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (681)","md5":"dcdb4e3bca35a7aa8b1d867dfff12f72","sha1":"ab7452aedcdfd7c78cd87d613b6bd3c97c24ab21","sha256":"95a83c64d43fae8d54a9e0a8f53e32d77cc3e86f0f78260daf059373f41a1bfe","sha512":"0d7d222602d10678b7c2fb6462a5f70a83683899d5eab920ab2dce9e582e76ab0ee883b334a9e36a208a5218dc94ed5d7dec4f88b65daa49e36ed2faeb32cc66","ssdeep":"12288:CeX9TirHnC5srv7UtLjYUxsjxIqQu8mboriBnS+OHJOsHBf:FuCyrAtL0UmxITu8mNnbO4sHBf","tlshash":"cf1527d9b46675614322b9f1142b1089633e9569c8ac685fb6c5c8f23fb040e60faff7","first_seen":"2026-04-30T21:02:23.372094Z","last_seen":"2026-05-13T20:52:13.708055Z","times_seen":18786,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notification-nftxupgrad.botmada.live/","fqdn":"notification-nftxupgrad.botmada.live","domain":"botmada.live","tld":"live"},"ip":{"addr":"158.69.52.169","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-04T13:10:24.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notification-nftxupgrad.botmada.live","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:48:01 GMT","end":"Sat, 01 Aug 2026 17:48:00 GMT"},"fingerprint":{"sha1":"D0:40:22:07:49:D4:49:A9:9E:B4:26:4E:79:57:90:10:6B:9D:2E:2E","sha256":"2E:25:85:75:95:BF:24:66:71:6A:06:B6:86:43:13:85:A4:16:D6:46:65:0C:7A:3F:3D:BB:7F:11:7E:4A:50:CD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: notification-nftxupgrad.botmada.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.1.33\r\nset-cookie: PHPSESSID=re3nh0o88b3m06gvl82r6u600r; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 2819\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 04 May 2026 13:10:25 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12612,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"1369a01e37a51e5379886d6b763fa9d9","sha1":"481d3df87ee38ab67846a8eb24275560bc106592","sha256":"4051f9ff32df74909b398ca2059b04e6728f37d26fd5ac9c2e686929edf4c795","sha512":"e9931f759337167ed5ee3e8907700b35d9e1742c2f4c063f4bff42415d5fd9e0d6169cd7a0cf56e9e18d4a42af04ff3d6d0c4d89612118423a5dbbd65ff85057","ssdeep":"192:BNrP4zntI+FBlfM+TIhKWf1tuAoC8E/yJLsb82w18eu:SFjqfbIk","tlshash":"3c42009a56f71512b913e4bc6bf7574536359003c406cd2c3feca3888f89b909aa3b9c","first_seen":"2026-05-04T13:10:58.916646Z","last_seen":"2026-05-04T13:57:21.042258Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1246,"timings":{"blocked":284,"dns":30,"connect":101,"send":0,"wait":673,"receive":4,"ssl":151},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"notification-nftxupgrad.botmada.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"assets.nflxext.com/ffe/siteui/vlv3/d482944d-eab4-4a64-89c9-a07a508a6e42/web/US-en-20250929-TRIFECTA-perspective_aacb0ca6-a123-4989-8138-ed5181752e30_large.jpg","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.90.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://notification-nftxupgrad.botmada.live/","date":"2026-05-04T13:10:26.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Mon, 01 Jun 2026 23:41:12 GMT"},"fingerprint":{"sha1":"04:5C:91:5E:7B:CF:B1:E7:1E:69:60:8C:5F:C0:05:19:D5:DE:58:19","sha256":"9C:8B:2E:85:D2:C7:6B:03:BC:DB:72:B5:18:F4:FC:EB:6A:CE:CA:79:65:0D:E2:AB:53:74:07:7D:E7:59:1A:22"}}},"request":{"raw":"GET /ffe/siteui/vlv3/d482944d-eab4-4a64-89c9-a07a508a6e42/web/US-en-20250929-TRIFECTA-perspective_aacb0ca6-a123-4989-8138-ed5181752e30_large.jpg HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://notification-nftxupgrad.botmada.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Mon, 04 May 2026 13:10:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 393843\r\nConnection: keep-alive\r\nContent-MD5: OJftybk5E2GLUMAEihSOtw==\r\nLast-Modified: Wed, 01 Oct 2025 14:51:38 GMT\r\nCache-Control: max-age=604801\r\nExpires: Mon, 11 May 2026 13:10:27 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":393843,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2000x1125, components 3","md5":"3897edc9b93913618b50c0048a148eb7","sha1":"238723614f306532d9b7a385cf62bbdeaa1ae152","sha256":"71bea12588f79b5b996fcf84ee3d47730e96273c256cee53691ee5795028cc8b","sha512":"589fdcb45559df57d26328b40f270a2085b0df1b12663ebcafcb1145bde88d816caf76af08983802f7dcd2e9da1d799c7017bf9b4c7a71c9b584b50e4415c532","ssdeep":"6144:arKxzFglJasQYt2Gv5dieN3BDeYDEwkgHQqI8LRHUE2kXUud/GVXjGtSFplGR:+KuJaTWtJ3xekEh/L8F0E2mOVzGaplGR","tlshash":"c184230a5716311aa77594c23fa1f7bbcac9d0f286bf534991620b84fd763b4b6180b8","first_seen":"2025-10-03T13:01:37.85828Z","last_seen":"2026-05-04T13:57:21.024601Z","times_seen":6,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":246,"dns":13,"connect":25,"send":0,"wait":26,"receive":150,"ssl":219},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/dNfi_jsbkQb4Hbw7F1b82Uia/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://notification-nftxupgrad.botmada.live/","date":"2026-05-04T13:10:26.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /recaptcha/releases/dNfi_jsbkQb4Hbw7F1b82Uia/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://notification-nftxupgrad.botmada.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://notification-nftxupgrad.botmada.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 372582\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 03 May 2026 09:08:27 GMT\r\nexpires: Mon, 03 May 2027 09:08:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 27 Apr 2026 02:01:15 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 100919\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":876004,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (681)","md5":"dcdb4e3bca35a7aa8b1d867dfff12f72","sha1":"ab7452aedcdfd7c78cd87d613b6bd3c97c24ab21","sha256":"95a83c64d43fae8d54a9e0a8f53e32d77cc3e86f0f78260daf059373f41a1bfe","sha512":"0d7d222602d10678b7c2fb6462a5f70a83683899d5eab920ab2dce9e582e76ab0ee883b334a9e36a208a5218dc94ed5d7dec4f88b65daa49e36ed2faeb32cc66","ssdeep":"12288:CeX9TirHnC5srv7UtLjYUxsjxIqQu8mboriBnS+OHJOsHBf:FuCyrAtL0UmxITu8mNnbO4sHBf","tlshash":"cf1527d9b46675614322b9f1142b1089633e9569c8ac685fb6c5c8f23fb040e60faff7","first_seen":"2026-04-30T21:02:23.372094Z","last_seen":"2026-05-13T20:52:13.708055Z","times_seen":18786,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":112,"dns":1,"connect":20,"send":0,"wait":30,"receive":91,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le9fNcsAAAAAORi4t8Z1f4XmTpE6FRcR8uOAOJ8\u0026co=aHR0cHM6Ly9ub3RpZmljYXRpb24tbmZ0eHVwZ3JhZC5ib3RtYWRhLmxpdmU6NDQz\u0026hl=en\u0026v=dNfi_jsbkQb4Hbw7F1b82Uia\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=lg6wfpf8y0wg","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://notification-nftxupgrad.botmada.live/","date":"2026-05-04T13:10:26.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"2F:4C:57:A4:4A:60:44:C4:08:82:D4:9D:9C:A9:1A:8F:89:5F:E8:F0","sha256":"BE:DC:F0:E9:A5:84:8F:67:24:9D:57:FE:79:42:FA:AA:A7:F8:1D:5F:B1:EB:36:BF:36:EE:24:98:71:31:97:4A"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6Le9fNcsAAAAAORi4t8Z1f4XmTpE6FRcR8uOAOJ8\u0026co=aHR0cHM6Ly9ub3RpZmljYXRpb24tbmZ0eHVwZ3JhZC5ib3RtYWRhLmxpdmU6NDQz\u0026hl=en\u0026v=dNfi_jsbkQb4Hbw7F1b82Uia\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=lg6wfpf8y0wg HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://notification-nftxupgrad.botmada.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 04 May 2026 13:10:27 GMT\r\ncontent-security-policy: script-src 'nonce-mMWc9Wt-7C06EaHBzrES8A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54272,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (35813)","md5":"e33e8c160405edcc49bdcf8abd248189","sha1":"adcdb827c9acda8d7eddcfb1d0a5f6c6075a7720","sha256":"aa07c7ce46b0b899e02f6eeb2f338640c6a2429f05777681d6a4fd1276da3b0d","sha512":"b85362bfaea37d182b0ae4c66c6368ef81f6ec903d4a44de405124ed90bb1b2b4e98aa33b2790d97c292e61556747314496b1619f546b9580c0dc0d872fb693a","ssdeep":"768:UFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+3/EgZcA9dJUPKIWRCZ9+55NzBz5cd9789:y+kTgeAJUPKzASllcD2Ata4Z4WSSUL","tlshash":"7e338c1408072445dbd74de213cd7f74fa6e8244224690b873fd2797eecbc8b922a29c","first_seen":"2026-05-04T13:10:58.922251Z","last_seen":"2026-05-04T13:10:58.922251Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le9fNcsAAAAAORi4t8Z1f4XmTpE6FRcR8uOAOJ8\u0026co=aHR0cHM6Ly9ub3RpZmljYXRpb24tbmZ0eHVwZ3JhZC5ib3RtYWRhLmxpdmU6NDQz\u0026hl=en\u0026v=dNfi_jsbkQb4Hbw7F1b82Uia\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=lg6wfpf8y0wg","date":"2026-05-04T13:10:27.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 02 May 2026 15:12:13 GMT\r\nexpires: Sun, 02 May 2027 15:12:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 165494\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-20T13:56:00.626314Z","times_seen":840148,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":69,"dns":1,"connect":21,"send":0,"wait":23,"receive":26,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://notification-nftxupgrad.botmada.live/","date":"2026-05-04T13:10:26.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:20:28 GMT","end":"Wed, 01 Jul 2026 05:20:27 GMT"},"fingerprint":{"sha1":"B4:91:17:84:3C:D9:FA:84:A4:40:60:C3:B9:3F:CD:5B:78:3A:50:7A","sha256":"8C:FB:DA:65:E4:DD:E6:17:CA:EA:AE:21:0F:37:5C:D0:D8:A3:71:77:C6:1E:C5:E2:4B:59:EB:19:51:C9:A5:8D"}}},"request":{"raw":"GET /recaptcha/api.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://notification-nftxupgrad.botmada.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Mon, 04 May 2026 13:10:26 GMT\r\ndate: Mon, 04 May 2026 13:10:26 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":976,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (976), with no line terminators","md5":"c00af12b700c7907ecfb00fb82e3046a","sha1":"8e5bd498cd00b4edbfaff131519298a76f76d2ac","sha256":"d44e2e75c188b407f5c797417816193afcd06f36f3498fc092b33e36ae1ef991","sha512":"16c7b6d2b7e212dcf2ab81ffa6c233bb9afe15c75d8881a218596d7008b1ab6c84d7f071001c221aaa8c0e442198da4978695b8853a904e794bdf98fbc387cb3","ssdeep":"","tlshash":"d91154b31a14f0390b3119a1e1ffcbbaf442702cf16889f8a915de886f6acc7cd05945","first_seen":"2026-04-30T21:04:25.107681Z","last_seen":"2026-05-08T07:10:39.426205Z","times_seen":4459,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":128,"dns":1,"connect":21,"send":0,"wait":37,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=dNfi_jsbkQb4Hbw7F1b82Uia","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le9fNcsAAAAAORi4t8Z1f4XmTpE6FRcR8uOAOJ8\u0026co=aHR0cHM6Ly9ub3RpZmljYXRpb24tbmZ0eHVwZ3JhZC5ib3RtYWRhLmxpdmU6NDQz\u0026hl=en\u0026v=dNfi_jsbkQb4Hbw7F1b82Uia\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=lg6wfpf8y0wg","date":"2026-05-04T13:10:27.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"2F:4C:57:A4:4A:60:44:C4:08:82:D4:9D:9C:A9:1A:8F:89:5F:E8:F0","sha256":"BE:DC:F0:E9:A5:84:8F:67:24:9D:57:FE:79:42:FA:AA:A7:F8:1D:5F:B1:EB:36:BF:36:EE:24:98:71:31:97:4A"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=dNfi_jsbkQb4Hbw7F1b82Uia HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le9fNcsAAAAAORi4t8Z1f4XmTpE6FRcR8uOAOJ8\u0026co=aHR0cHM6Ly9ub3RpZmljYXRpb24tbmZ0eHVwZ3JhZC5ib3RtYWRhLmxpdmU6NDQz\u0026hl=en\u0026v=dNfi_jsbkQb4Hbw7F1b82Uia\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=lg6wfpf8y0wg\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Mon, 04 May 2026 13:10:27 GMT\r\ndate: Mon, 04 May 2026 13:10:27 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: same-site\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"4eea3103f85bc12512200a94ecfad330","sha1":"64aa08421a0a47146762300921922d570e99ef60","sha256":"ffc1d24e594bc3418391b671c0b6d1a3f59e757655a8773442c74f276c189239","sha512":"4c3ea1159c22fb7ba1c8aea9e500fe72cd0a92d6884d51f2991f5f40100f418e9f2e0402f6bbfc03628ca99307454ba02b681a292f3df783d0db14ab24596e8c","ssdeep":"","tlshash":"f8b012630924c42c0c000913c53fe7edf4126138faf080f4a1754fddd3120738809400","first_seen":"2026-04-30T21:02:23.383563Z","last_seen":"2026-05-13T20:52:13.605297Z","times_seen":15467,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/dNfi_jsbkQb4Hbw7F1b82Uia/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=dNfi_jsbkQb4Hbw7F1b82Uia","date":"2026-05-04T13:10:27.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /recaptcha/releases/dNfi_jsbkQb4Hbw7F1b82Uia/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 372582\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 03 May 2026 09:08:27 GMT\r\nexpires: Mon, 03 May 2027 09:08:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 27 Apr 2026 02:01:15 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 100920\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":876004,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (681)","md5":"dcdb4e3bca35a7aa8b1d867dfff12f72","sha1":"ab7452aedcdfd7c78cd87d613b6bd3c97c24ab21","sha256":"95a83c64d43fae8d54a9e0a8f53e32d77cc3e86f0f78260daf059373f41a1bfe","sha512":"0d7d222602d10678b7c2fb6462a5f70a83683899d5eab920ab2dce9e582e76ab0ee883b334a9e36a208a5218dc94ed5d7dec4f88b65daa49e36ed2faeb32cc66","ssdeep":"12288:CeX9TirHnC5srv7UtLjYUxsjxIqQu8mboriBnS+OHJOsHBf:FuCyrAtL0UmxITu8mNnbO4sHBf","tlshash":"cf1527d9b46675614322b9f1142b1089633e9569c8ac685fb6c5c8f23fb040e60faff7","first_seen":"2026-04-30T21:02:23.372094Z","last_seen":"2026-05-13T20:52:13.708055Z","times_seen":18786,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}