{"report_id":"dcd749a4-ade8-4362-9f48-a928d2502b50","version":6,"status":"done","tags":[],"date":"2025-12-19T22:27:56Z","url":{"schema":"http","addr":"sportytrend.net/c1-jake-paul-vs-anthony-joshua/","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"172.67.135.211","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sportytrend.net/c1-jake-paul-vs-anthony-joshua/","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"title":"C1 Jake Paul vs Anthony Joshua – SPORTY-TREND","dom":{"size":5544,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4451)","md5":"2d5a0adcc5318c736179071c4c8420b8","sha1":"3e33dcc4770f5e520a13434f0612c8b4b60c2234","sha256":"6042a738fffbe56567a6a93bb02d42a1818fdf47346a6a1e45783e90eaa7fe70","sha512":"c282f36afc029e8ad1f424c58d8dfeed5a7493e6b02152426729938e04be121db91c9e21eb3d442e18dbe4c30ef6f28e0d345f38bcc4dd5e109f30b5d87a9d3f","ssdeep":"96:zkaln3pFm+by3kmJo1gk8s6G84ISTP9J1e+GRJe:zkal3TOo1FC679J8+wJe","tlshash":"afb1fb67f9d220400217819c65a7b7bdbfbe911187054d7a75ad33bcaf8edf704a1288","dom_hash":"domhash5128625ecf67ad91d375a42e49456f5b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sportytrend.net/c1-jake-paul-vs-anthony-joshua/","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"172.67.135.211","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-23T22:27:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-19T22:27:40Z","timestamp":1766183260,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.3","port":54914,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-12-19T22:27:40.226291+0000\",\"flow_id\":201712356580406,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.3\",\"src_port\":54914,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3440,\"start\":\"2025-12-19T22:27:40.220214+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"embedsports.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"bvtpk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"sportytrend.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"bobapsoabauns.com","ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-23","domain_rank":16239,"first_seen":"2025-03-26T18:52:40.148632Z","last_seen":"2025-12-16T13:23:36.572944Z","alert_count":0,"request_count":2,"received_data":18219,"sent_data":913,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sportytrend.net","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-13","domain_rank":0,"first_seen":"2025-12-19T22:28:01.165071Z","last_seen":"2025-12-19T22:28:01.165071Z","alert_count":13,"request_count":13,"received_data":917602,"sent_data":6886,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Chatango","description":"Chatango is a website used for connecting to a large selection of users.","website":"https://chatango.com","common_platform_enumeration":"","icon":"Chatango.png","categories":["Widgets"]},{"name":"Draftpress HFCM","description":"Header Footer Code Manager by Draftpress is a easy interface to add snippets to the header or footer or above or below the content of your page.","website":"https://draftpress.com/products/header-footer-code-manager-pro/","common_platform_enumeration":"","icon":"Draftpress.png","categories":["WordPress plugins"]}]},{"fqdn":"ust.chatango.com","ip":{"addr":"208.93.230.16","port":443,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"domain_registered":"2004-05-23","domain_rank":468722,"first_seen":"2012-12-10T16:31:50Z","last_seen":"2025-12-17T15:20:57.113019Z","alert_count":0,"request_count":1,"received_data":542,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"embedsports.top","ip":{"addr":"104.21.70.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-19","domain_rank":284096,"first_seen":"2025-07-31T17:04:44.910365Z","last_seen":"2025-12-15T20:32:50.392309Z","alert_count":4,"request_count":4,"received_data":1761991,"sent_data":2173,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"st.chatango.com","ip":{"addr":"208.93.230.18","port":443,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"domain_registered":"2004-05-23","domain_rank":442176,"first_seen":"2012-06-04T02:57:52Z","last_seen":"2025-12-17T15:20:57.155308Z","alert_count":0,"request_count":5,"received_data":793072,"sent_data":2421,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dreamytabs.com","ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-17","domain_rank":2144767,"first_seen":"2025-03-16T22:21:45.380289Z","last_seen":"2025-12-19T12:24:45.602552Z","alert_count":0,"request_count":34,"received_data":729495,"sent_data":17747,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"W3 Total Cache","description":"W3 Total Cache (W3TC) improves the SEO and increases website performance and reducing load times by leveraging features like content delivery network (CDN) integration and the latest best practices.","website":"https://www.w3-edge.com/wordpress-plugins/w3-total-cache","common_platform_enumeration":"","icon":"W3 Total Cache.png","categories":["Caching","WordPress plugins"]},{"name":"Elementor:3.19.1","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.6.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"www.tripquestapp.com","ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-02","domain_rank":2719890,"first_seen":"2025-08-12T21:09:11.638182Z","last_seen":"2025-12-18T21:33:35.932398Z","alert_count":0,"request_count":15,"received_data":2226289,"sent_data":8455,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fedoq.com","ip":{"addr":"139.45.197.116","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-07-06","domain_rank":0,"first_seen":"2025-10-14T06:17:47.619418Z","last_seen":"2025-12-16T18:28:01.455123Z","alert_count":0,"request_count":4,"received_data":7737,"sent_data":4027,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dd133.com","ip":{"addr":"172.67.170.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-06-30","domain_rank":0,"first_seen":"2025-09-25T23:17:10.545176Z","last_seen":"2025-12-18T11:35:01.961662Z","alert_count":0,"request_count":1,"received_data":168736,"sent_data":413,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bvtpk.com","ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-16","domain_rank":37068,"first_seen":"2025-05-21T11:34:02.786268Z","last_seen":"2025-12-17T15:50:18.770078Z","alert_count":1,"request_count":1,"received_data":113621,"sent_data":408,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"loijtoottuleringv.info","ip":{"addr":"65.9.46.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2024-07-08","domain_rank":239626,"first_seen":"2024-08-14T23:21:33Z","last_seen":"2025-12-09T07:57:33.438307Z","alert_count":0,"request_count":6,"received_data":6133,"sent_data":3357,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fleraprt.com","ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-01-14","domain_rank":17838,"first_seen":"2022-01-14T22:55:14Z","last_seen":"2025-12-17T20:03:43.991473Z","alert_count":0,"request_count":2,"received_data":908,"sent_data":1171,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tzegilo.com","ip":{"addr":"104.21.11.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-14","domain_rank":18163,"first_seen":"2022-01-14T15:27:15Z","last_seen":"2025-12-16T13:23:36.564437Z","alert_count":0,"request_count":1,"received_data":18657,"sent_data":410,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-12-15T10:45:04.439976Z","alert_count":0,"request_count":1,"received_data":838,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-14T22:13:59.416786Z","alert_count":0,"request_count":2,"received_data":81886,"sent_data":1100,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s53.chatango.com","ip":{"addr":"208.93.230.168","port":8081,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"domain_registered":"2004-05-23","domain_rank":6488325,"first_seen":"2014-02-07T13:43:17Z","last_seen":"2025-11-22T16:51:53.959958Z","alert_count":0,"request_count":1,"received_data":129,"sent_data":559,"comment":"","tags":null,"fingerprints":null},{"fqdn":"b7510.com","ip":{"addr":"139.45.197.115","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-03-21","domain_rank":0,"first_seen":"2025-06-19T09:08:24.947983Z","last_seen":"2025-12-18T01:16:58.05632Z","alert_count":0,"request_count":1,"received_data":830,"sent_data":595,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-14T22:17:06.291076Z","alert_count":0,"request_count":1,"received_data":27601,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-12-15T04:51:24.076024Z","alert_count":0,"request_count":1,"received_data":271,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.17.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9769d1d76fdce5a776506f7a4a4f9183","sha1":"470c161f30226dc142685e233309009496842e11","sha256":"60a6db28503da0b2c2f4e39da485b7649425cd481da5dee9ff33f6c68e9cb480","sha512":"88d90fe7f8a699a376f6d0667301e82bd5a0be23cd4b70b96a252d4272f6bbe1db5490c280eb245a04c5d9fcc355db1dc4e6a6256bf45fbddc2be838801cc97a","ssdeep":"768:Znr9p7+adwdddrdDdVdydOdad1dpdLdFdVdJf2qMnODVwdhd8dHdLdz0Cn9jXUdv:93qaC/dRrIM4D7lv/3Zw7Gd510Cn9jXk","tlshash":"e2f2b76071aaca7841cfc4abf423268fa7219c9cb413f4d776fd8d826564e876390771","size":35674,"data":"","first_seen":"2023-11-01T17:10:30Z","last_seen":"2026-05-27T13:00:04.134925Z","times_seen":1745,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/wp-content/plugins/wp-dark-mode/assets/js/app.min.js?ver=5.2.20","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5dceb2d4539654c5ac62d2feb9da0222","sha1":"42dabbacf383b325223f4266d66c037e14930f68","sha256":"72ba3b88c5a2a7a1ae8b464a9abc31d4e77b0d1f708285e3d2c6b5fff9f7fc91","sha512":"a019b6cab9f5b6cf2f9a379d9a935a82fe1e20e995412ba5861e537f2d555b3b3f89321776062c2209758b39ae87f57894a7e8b6f5317e3ecc9290e01b97b0bd","ssdeep":"1536:2wkiodlECuvlXw1WWccEWRw8h75MdrH8nPdsqzjC4u/5xO:2wkzlECudUcc9RPyKTmR5xO","tlshash":"cc735dd372f56872436309d1e63e4a0af37c0566b8de4498703e4dc92fa5c09bb23e69","size":77867,"data":"","first_seen":"2025-11-25T13:05:38.879642Z","last_seen":"2026-04-29T01:34:18.024586Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.chatango.com/h5/gz/r1214250536/id.html","fqdn":"st.chatango.com","domain":"chatango.com","tld":"com"},"ip":{"addr":"208.93.230.18","port":443,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3243c0841916ec8412445cf28dc213e1","sha1":"e03e2b55026c2d5a48478b494038ac237a570356","sha256":"43809cbb40cf2c409373635a089746ebaf238092ec2dd2c0880e5ff57b729f99","sha512":"a0d730bbc3c90f7292f18725f4de9b9570dcd6ecfa9992120eab10a07bf7c5d40162892477221c2c1ce534912e5936b9733f9d1f26c0d5b3b2fcd6dec2b4c52a","ssdeep":"","tlshash":"e651d95cd27b48ab69253c6027249f1f8f84ccd3b742d05eaade0dcc305ea47b588931","size":2817,"data":"","first_seen":"2023-03-07T01:18:53Z","last_seen":"2026-05-28T10:51:34.731446Z","times_seen":1513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.chatango.com/h5/gz/r1214250536/id.html","fqdn":"st.chatango.com","domain":"chatango.com","tld":"com"},"ip":{"addr":"208.93.230.18","port":443,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"51c06619951fa550760ad54048fa0b98","sha1":"18b18a23e8454584c8468b20608774f3678a5894","sha256":"976e8dfa76f94c12aa882439baebef91bfaf8e6b5940a03f135722a234d119c7","sha512":"834f9973270018b2a16f3979c9d37664b8394744722c13028580f718a486ce6120b33a6dc32e0db20edc4248bd63d4cf677c0ba602a344dd6fe945971bfdc3e8","ssdeep":"","tlshash":"516000033cf0033c00000000cf00000000000003000c0c0c000c3c0000000f00c0003c","size":13,"data":"","first_seen":"2023-03-07T01:29:22Z","last_seen":"2026-05-28T10:51:34.778301Z","times_seen":894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b7493a14ded19a915661fbb8cccbd59","sha1":"314d65a3531d2cda4cc111f0a2e5e487be170603","sha256":"4f12798b6c0f59d7212754117faaf5aa80ab4d954157c4ef2b04c0ea24afed9c","sha512":"9a8344fc4ebd1ae193efdeade005439084d7384afc7eb385ae181cd40ecbfba9283151595e24b6488309f2b19c55d7e40fdbcb2f6f5294856d517214c161dbcc","ssdeep":"","tlshash":"9061a79a37353887317b15d2aa2f0e07eb7658371688d034c9f9b7541cb1463c37ad49","size":3225,"data":"","first_seen":"2025-06-24T20:43:22.451974Z","last_seen":"2025-12-27T17:37:15.695881Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.17.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9769d1d76fdce5a776506f7a4a4f9183","sha1":"470c161f30226dc142685e233309009496842e11","sha256":"60a6db28503da0b2c2f4e39da485b7649425cd481da5dee9ff33f6c68e9cb480","sha512":"88d90fe7f8a699a376f6d0667301e82bd5a0be23cd4b70b96a252d4272f6bbe1db5490c280eb245a04c5d9fcc355db1dc4e6a6256bf45fbddc2be838801cc97a","ssdeep":"768:Znr9p7+adwdddrdDdVdydOdad1dpdLdFdVdJf2qMnODVwdhd8dHdLdz0Cn9jXUdv:93qaC/dRrIM4D7lv/3Zw7Gd510Cn9jXk","tlshash":"e2f2b76071aaca7841cfc4abf423268fa7219c9cb413f4d776fd8d826564e876390771","size":35674,"data":"","first_seen":"2023-11-01T17:10:30Z","last_seen":"2026-05-27T13:00:04.134925Z","times_seen":1745,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.17.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59ab277efa930785720a63e9007677aa","sha1":"144750f1e4d88d5d0bf93704ffebd349dd02e653","sha256":"c7267d9f9b72944e2b3772a521fd1b8882ca17b124de63549fbf591167efbd25","sha512":"153577744897d8e897e0321d562ab727fa71b8be776da89a6e3443618ee58c952e50d23b90b7f0e275bb3626452947b20df4dbbadd82c1fad1c5e23355b90169","ssdeep":"768:gTLX+EV2m6SbdndptaQ9HuGJswyV/pkTAQYtDT6HJiwknOsN7KOljuOzQYqEbzGv:gtV2m6Sb94Q9HuG2iiwkOsN7KOljuOzS","tlshash":"71b2d8063163a87a50cfc157e067420e7b374895740570ed7abc6ceba5b8d9a32eb335","size":24674,"data":"","first_seen":"2023-11-01T17:10:30Z","last_seen":"2026-05-27T13:00:04.101289Z","times_seen":2130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.chatango.com/h5/gz/r1214250536/id.html","fqdn":"st.chatango.com","domain":"chatango.com","tld":"com"},"ip":{"addr":"208.93.230.18","port":443,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"453babfa81aff07f29bb1098e912c767","sha1":"bd8e4ce5666de59e306c6a49ca44c670610ab055","sha256":"6ac8a47779aca0fa994448c16c1f2c13a1cb66924cb25e3649825c08789ae9fe","sha512":"a31c80ee42aac181b22fcc2a113bec4808c20c4a6817ed6755389232874730f821c0d07db8f1f5768cba82b8904d3ae82f5114c685f50535c4493e917cb123c8","ssdeep":"","tlshash":"f251df3f1574313a981810c7b876eacd6f603069a7938898e4ceec9df66cdd21973834","size":2822,"data":"","first_seen":"2025-12-15T18:44:13.11409Z","last_seen":"2026-01-27T10:38:06.817821Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/js-extensions-plugin/js/functions.js?ver=6.6.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0ce4d9bff07bf24421ad8d6991193db","sha1":"54672432fa469b7b566cb3125e1779b07fc8a613","sha256":"9701065a77191b3a4ced86664ef4599ac455b2436f780c2e6d544cd190d3cfc0","sha512":"578f6c70bae67bff28f06c4926aecbb05a7eb6b62106d582ee4750a1593de72647b6a4c61cc2c19e0c57373b5c41e558a3f12d828bdf9a55fe2fc90a12d4daf3","ssdeep":"","tlshash":"1d71100828f7943c069765fc5b2bd7a03a2160177584ce587d4c5b10af56c2fcee5eae","size":3601,"data":"","first_seen":"2024-07-14T22:27:13Z","last_seen":"2025-12-27T17:37:15.607577Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/c1-jake-paul-vs-anthony-joshua/wp-dark-mode-js-extra","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcd5c3e5cfcb1bd0073d079d35baf555","sha1":"4ab3c7938436026b8e6e453d99205e05bb7a34d6","sha256":"6df0602cd0559037661ccb02b3a16707962d375bf2c61602b233270f4158d92f","sha512":"684447e4a3553a15c74713b8fa5ca247db4ef4566a0fc0d88eacf0453cf2cb18f3ef44c784bb2234467b3a2347c1032b1716c75cb26506aa1630bfc8dbff0a67","ssdeep":"1536:iP6ben/sXfJoT2g5hgDyJDTKmPLS4bTKmRhgDyJHVNQ3Ke/Bii+xCTGKkxk:C6ben/sv+JRJJ+/9J1","tlshash":"1293faf693c872e4d147e7b0dc238869755f34fa7fd5c7888668dee4b2510ac8a89c84","size":97149,"data":"","first_seen":"2025-12-19T22:28:12.600219Z","last_seen":"2025-12-19T22:28:12.600219Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver=4.11.17","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3f609a6ebd5b8fede4abc63e105a7b7","sha1":"6cf96160fa67d56a7be3c68b1941d3af0061a69d","sha256":"cb7b88e5a91d97805b4efcbb6d4076cf93a62fcee29a5a363ed66dafca0dec09","sha512":"afd5aca3d8468c121b02d8b93f219bf9157c36f94a1df1511c3803ea70671d872bdb2ff6a04bcaf1110355a10ec5f9f2b2e28f9d50cb3447ee845d6ea00303a4","ssdeep":"384:uOgKnOUyVosSYlDjp1CAWa54XoO4qd7auYk4FozQ5rY3cYaTtlUBETID9g4ST6C7:Ng0OlVosHlDjp1CAWa54XoO4qd7auYkA","tlshash":"07620dc73a4c342246028e88fdab9a1578a60f6e0b2c4758d157b97400b6d571debbff","size":15525,"data":"","first_seen":"2025-10-07T17:03:00.325877Z","last_seen":"2026-05-28T13:10:15.43491Z","times_seen":16713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/chunks/474-8498b525963453b1.js","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"24bf883d59be0dbd3eccaff6d29d631c","sha1":"209b7639a5ddbb82bf316ec348fc4bdaf5f0d54a","sha256":"8d185776ea58b58f59222826aaf25079b6d6f4bb094c5b46e439454f2de4765e","sha512":"de55b58ac12a233c943095d9fd413bbe840cdb1b4bb86ef5e7456dfc6e7876d6491962ff79f23ff28509b4029f767b94600e64ed66a964488b7e53a224568ae9","ssdeep":"192:YUHR7+DmSA2b13976QfAOHW8lZKmNzGd2KL6ImtY1wOc3YXwV9GWlTcbl:YsWmSR3I0NzTbFIXwV9GWlTcB","tlshash":"0e22c8da71d1f8e283bb0061443b100bb27a1d79285e7158f7b49cebb9b046da1a2f5d","size":10280,"data":"","first_seen":"2025-06-17T05:49:33.674087Z","last_seen":"2026-04-12T19:13:08.235654Z","times_seen":132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/firefox-before-you-continue/?clickid=8789876781696250658\u0026utm_source=admaven\u0026utm_term=1045621\u0026campaign_id=AM_1045621","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b7493a14ded19a915661fbb8cccbd59","sha1":"314d65a3531d2cda4cc111f0a2e5e487be170603","sha256":"4f12798b6c0f59d7212754117faaf5aa80ab4d954157c4ef2b04c0ea24afed9c","sha512":"9a8344fc4ebd1ae193efdeade005439084d7384afc7eb385ae181cd40ecbfba9283151595e24b6488309f2b19c55d7e40fdbcb2f6f5294856d517214c161dbcc","ssdeep":"","tlshash":"9061a79a37353887317b15d2aa2f0e07eb7658371688d034c9f9b7541cb1463c37ad49","size":3225,"data":"","first_seen":"2025-06-24T20:43:22.451974Z","last_seen":"2025-12-27T17:37:15.695881Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"092bccc2b0bde6fe547ed6f5805c9de7","sha1":"ea50e69a2489ed8eb1e7c19491ae9623d84d64d9","sha256":"180ab6438ed8c2ed0babc214c9ea71312f4f937bc88a00650245aa4367807c4f","sha512":"23e6c283b6c7335d7ba2f4a62d94331a6fea98e55cd3b4e307a75238a83fcbb914dd72a51e0a1919bbf32a0e1cd9212dfa5203f14996153dc0fe20af49c0455c","ssdeep":"","tlshash":"5c4133d5b73f71392bba61ad696a2fc4887c41f378404867bc4c6e1c0f4990b84aa792","size":2394,"data":"","first_seen":"2025-06-24T20:43:22.453157Z","last_seen":"2025-12-27T17:37:15.716777Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-28T17:37:59.542949Z","times_seen":904186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/firefox-before-you-continue/?clickid=8789876781696250658\u0026utm_source=admaven\u0026utm_term=1045621\u0026campaign_id=AM_1045621","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"092bccc2b0bde6fe547ed6f5805c9de7","sha1":"ea50e69a2489ed8eb1e7c19491ae9623d84d64d9","sha256":"180ab6438ed8c2ed0babc214c9ea71312f4f937bc88a00650245aa4367807c4f","sha512":"23e6c283b6c7335d7ba2f4a62d94331a6fea98e55cd3b4e307a75238a83fcbb914dd72a51e0a1919bbf32a0e1cd9212dfa5203f14996153dc0fe20af49c0455c","ssdeep":"","tlshash":"5c4133d5b73f71392bba61ad696a2fc4887c41f378404867bc4c6e1c0f4990b84aa792","size":2394,"data":"","first_seen":"2025-06-24T20:43:22.453157Z","last_seen":"2025-12-27T17:37:15.716777Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6114c262f353323f61d70c21dab7f84","sha1":"a8854b01fa55d1afdd4b9a5788c178a0f7db7c15","sha256":"c2f116026b7c83329a23adac3a601bf2ac9b47215e51426a2a8a11ea19595889","sha512":"82dea2a034811069e99d52fce862b7bdfa3929ce1fc1b2b090af9b0d59498295e43f1e2275de49b05f3d82154bc69c6b7b6e1ef33189c7c44878cfcc37447510","ssdeep":"","tlshash":"e3f0dce7f1960cb1a59e49f23ab5a1287593320c90190c72febd88282b6664784029dc","size":517,"data":"","first_seen":"2025-08-12T21:09:16.669863Z","last_seen":"2026-04-12T19:13:08.148381Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=3.0.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37a18cd57014e833a5c4a7bfa6eea9b3","sha1":"bdaa4dc40b15d010d66959bfe7a40b10292d1763","sha256":"fad3123058cce0346ee9998342ef09cfa766dc1393ee3b5c2b450a18936c7d1b","sha512":"3d721d447bd732f96bf1b2feae5ef6b6064ec6b2396022f06a0d96f8ca1478f77c8910733bc277ebe414a5e85c77ca80b9d2f9a5f9ae77c7e99884c82f15a9a3","ssdeep":"","tlshash":"e651ba0973db2836406f92bb2f47559e722640cf6405c968786dba5e1f50c7016f2bf6","size":2937,"data":"","first_seen":"2023-12-27T11:44:50Z","last_seen":"2026-05-28T07:04:17.320054Z","times_seen":4568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"79999203130f5cf52c604bd2f53d6c8d","sha1":"d7c5a5d1be7c49c66138942f8f0b705d5dccb9aa","sha256":"3ad170277ff86fe1520944aa483a5011d111f147cc05d6ce48098a66afb22e38","sha512":"24093b5590f2c9f8cfe9615a4559df4146435b9895dbcf4040b7141d920347d3393e0d2a60f44ea7f17f33ff4ffcd08099d8c5d75edfe35ec9737a4b4971ac87","ssdeep":"","tlshash":"09e028d775251c75b0de49f933f4a125b053120c78091c72ddfdc91428247878c1708c","size":346,"data":"","first_seen":"2025-06-24T20:43:22.455106Z","last_seen":"2025-12-27T17:37:15.730751Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","size":12198,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-05-28T17:08:06.243945Z","times_seen":69501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"dreamytabs.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a0f2e0151adacbc69c433c85ff3a2b7","sha1":"ff3ab36971c3c6cfb3619b9a33215142000cf08f","sha256":"59dbae39b5ba5669ab7979bbad52ec5dff69cc9ed41f115007b7473d19dff67f","sha512":"5961504a0a1830d75b6aa5967af837f22c1b25ae47491f209275a4fb7b9d7d530b97c27ecc698c9010b51f58a98822c21ef5ed415a3bb6653caa904e27baed20","ssdeep":"","tlshash":"bb21f0e370a39c9e48df248b34621d57f1574d69b889901ef8aa08db3472e8933a2634","size":1360,"data":"","first_seen":"2024-02-05T22:36:50Z","last_seen":"2026-05-27T18:28:46.141598Z","times_seen":262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/chunks/4bd1b696-9d53a45aeb6e92ca.js","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"134c96f899922d29279b675e9fbee451","sha1":"81a49edacad8533e4a1dc0953c3c41707429645b","sha256":"c03ea96e1936ca94440d2f2b1db6105027ac80129374e2738ec2332769dc2183","sha512":"15c10d98073cae3ca5f670b137ae0218ccb8a6d6c86179233751a58e987efc8de8a8aae5420f3e771f3fa921e0f0bc8a52dac3383895a12a109b785fb50c51f9","ssdeep":"1536:6WSSc/OtXTZdmomUsjbmLCbLcL56jtP3VfHPqmH1c59zhFcavz12smlh77eP9AH1:tc/OjDImScLOTD1sFc0Olhe2WX+","tlshash":"71f3f9ec3999e651aeb302a700df28037378262b240d4d60a614fd9db57845bb17bfde","size":167090,"data":"","first_seen":"2024-12-23T17:43:51.448446Z","last_seen":"2026-05-28T12:02:27.099743Z","times_seen":946,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","size":12198,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-05-28T17:08:06.243945Z","times_seen":69501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KDPV8F77","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1650250d0a774af8d45c395459f80340","sha1":"874b5d8209a9780171ce614f0808d10eef40ce73","sha256":"869f8fe57b0061fed6b3589eacc53282bb767eca46b4289d57a1d7616686a945","sha512":"326181c28cfc331cfee756a4b2a181938b035eef4630ae0231d0f7bf5db0df2922a5a151e551fc6acb489e5ee4e0520265ddb20edf48a45b23966ac36e286207","ssdeep":"6144:tkeJf2bulKYXV1u99Yye5HDmHYmyBFz0nsqufWll+CRaV:S9bu7l1mcAnsLW2Ci","tlshash":"267419cdb3c6746683a3a478403f114ba17b6e91f44cd894f186d8e42e74aaa4277f7c","size":353941,"data":"","first_seen":"2025-12-19T22:28:12.60439Z","last_seen":"2025-12-19T22:28:12.60439Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dd133.com/vignette.min.js","fqdn":"dd133.com","domain":"dd133.com","tld":"com"},"ip":{"addr":"172.67.170.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f622d9ca1af21251c703b33e4928ea1","sha1":"819961a8e0aade299c61a5baaf9b90eca4c1a2b9","sha256":"dc027532dd484828352656b2945591d0ce6267005b1817c1fcbb8911845489b2","sha512":"b9b2c0a702c0cf84ab95e39969a9edf543ce63508d1bda2a498b2027e8c3ff858d4a12b8baef5809d3d0e064bdd511a2bf3b3205f73ef41d145e791edb9799cd","ssdeep":"3072:FPV6Wtgjm0jmyFIJHAFIrD+rUXqEkVTAg4fAut6Aq6/2DRaTIJyk9hc2VzBnqM:VV6pjm0jmy6AsPXqE0hM676/2DRaMAkH","tlshash":"7ef3e988b192b1552d636534322fd14eb59bdb20584e4a80d0dae1b27f370afd377ee8","size":167887,"data":"","first_seen":"2025-12-12T19:09:03.181329Z","last_seen":"2026-01-12T03:14:27.296133Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.chatango.com/h5/gz/r1214250536/id.html","fqdn":"st.chatango.com","domain":"chatango.com","tld":"com"},"ip":{"addr":"208.93.230.18","port":443,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"73497a37c3561adbd8ce84e4f017b368","sha1":"9193ae73cb3dd2833be8c942714d5544bfb628c9","sha256":"9312a1adbbf0a4c05fc296d158ec3bd39acfe50e9e98ff02688139aad6fc3351","sha512":"b265a65f30fa9ffac3fb7ffca07326823466dcd67a238a47091a497c7f2b2d13e09603cbb8e85dce136efeb8bbb9d246e4894d6f672dededc47c88a1a85d9a5b","ssdeep":"","tlshash":"c150000003000003030c0000c000000000000003000030c000c0000000000000000000","size":9,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-05-28T10:51:34.752601Z","times_seen":5569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loijtoottuleringv.info/redirect?tid=1045621\u0026file=Watch_Live","fqdn":"loijtoottuleringv.info","domain":"loijtoottuleringv.info","tld":"info"},"ip":{"addr":"65.9.46.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"07a479af7a634a223f978f5390071279","sha1":"ae9fd4e95d081b1b236168f77e09424ffa31c796","sha256":"e802bceea7d7089e4c97c8bd88a259335e88a4448d22785c4717aa2a6361a46a","sha512":"28e01cb5a47201040c6c1d0fb01eb2dbefeef3d9596f7d709adbe300c6c3ee3c5062c87346f052ec14ad385a2d82dbcf95f73d188f5cc2eb23e46859448d5931","ssdeep":"","tlshash":"b3c080d7044207b916b5307559c332445156179fc8c8955dd1744b7861b439b44c7c57","size":169,"data":"","first_seen":"2025-12-19T22:28:12.606017Z","last_seen":"2025-12-19T22:28:12.606017Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.17.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8027f7d649c8b4b044a03ef82cc7ef68","sha1":"4ba490a1a2544a195e5fba915ac5eb09eaaec5b3","sha256":"d9755b7eff734eeb6267db6515f0267fc66622cd873cd37f65761b3fcc94cac2","sha512":"f372b4f4a838e59a57c7655acd7ac66b4880360d39edc865f4cea1643f5ad9bf47339a7520a2bc4c0e9a040098dd1236d55ee723673ca9daa04e5d2d4b638cd9","ssdeep":"96:BTifnGhUqdL5MGSPhRm0j0DEpre1bNUx4Gk4OlL8GVyeV9WmLttXSc/8k2:JifcUgL5MGSpM04CrI6CGTvG3rXnEk2","tlshash":"f4c145d90a949d5b26e139d9b0975b701e3dd0323c15aa81ea52eddc19f8fc083ea933","size":5801,"data":"","first_seen":"2023-11-01T17:10:30Z","last_seen":"2026-05-27T13:00:04.122863Z","times_seen":2127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-05-28T17:38:01.734258Z","times_seen":870354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/firefox-before-you-continue/?clickid=8789876781696250658\u0026utm_source=admaven\u0026utm_term=1045621\u0026campaign_id=AM_1045621","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"79999203130f5cf52c604bd2f53d6c8d","sha1":"d7c5a5d1be7c49c66138942f8f0b705d5dccb9aa","sha256":"3ad170277ff86fe1520944aa483a5011d111f147cc05d6ce48098a66afb22e38","sha512":"24093b5590f2c9f8cfe9615a4559df4146435b9895dbcf4040b7141d920347d3393e0d2a60f44ea7f17f33ff4ffcd08099d8c5d75edfe35ec9737a4b4971ac87","ssdeep":"","tlshash":"09e028d775251c75b0de49f933f4a125b053120c78091c72ddfdc91428247878c1708c","size":346,"data":"","first_seen":"2025-06-24T20:43:22.455106Z","last_seen":"2025-12-27T17:37:15.730751Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"dreamytabs.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a0f2e0151adacbc69c433c85ff3a2b7","sha1":"ff3ab36971c3c6cfb3619b9a33215142000cf08f","sha256":"59dbae39b5ba5669ab7979bbad52ec5dff69cc9ed41f115007b7473d19dff67f","sha512":"5961504a0a1830d75b6aa5967af837f22c1b25ae47491f209275a4fb7b9d7d530b97c27ecc698c9010b51f58a98822c21ef5ed415a3bb6653caa904e27baed20","ssdeep":"","tlshash":"bb21f0e370a39c9e48df248b34621d57f1574d69b889901ef8aa08db3472e8933a2634","size":1360,"data":"","first_seen":"2024-02-05T22:36:50Z","last_seen":"2026-05-27T18:28:46.141598Z","times_seen":262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loijtoottuleringv.info/redirect?tid=1230072\u0026ref=Watch_Live","fqdn":"loijtoottuleringv.info","domain":"loijtoottuleringv.info","tld":"info"},"ip":{"addr":"65.9.46.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbf3534108926f2978ef23eb110167bd","sha1":"bb8f4cbcdec543112c59be53a9e6e95740026104","sha256":"d16d43e565379868caa8550f7a674f8c632117eebfbdb0c07281cfdb10fd613d","sha512":"cf66e1b467df6e1ff1dbd497480e673d4c447232af95c1046621ba88a6efe9d21970f6c352404addf8c7fff7b05de8ca23221c47ba5cd888100a0be02f7ad250","ssdeep":"","tlshash":"28c08ccb000128a43bb810398a13334820c763af298cd40ac8a0ca30a1153eb04cac6f","size":154,"data":"","first_seen":"2025-12-19T22:28:12.606981Z","last_seen":"2025-12-19T22:28:12.606981Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/wp-includes/js/wp-emoji-loader.min.js","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3bfd1eb18106e8c9a6ba8e884187fd63","sha1":"b836df4b916debe373ac06938e20369fa300e714","sha256":"f39446e0a0f142b04a84d3d178438fa19e12cecd071f07bb5a4d513f5734ed9d","sha512":"ddb80275de4a8b89a54e296b6d4b0ecf561377f5ef9d5c915a9786d46bc27caaacd5c1174b388b3e56877d7c5af2dff12dbd046c89be701979680c48ecc0956f","ssdeep":"","tlshash":"9a61759ae77638dfb2f900f2697e0e47eb614435d6c8d438c9ada3141cb5893c274b46","size":3320,"data":"","first_seen":"2025-12-19T22:28:12.607813Z","last_seen":"2025-12-19T22:28:12.607813Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.chatango.com/h5/gz/r1214250536/id.html","fqdn":"st.chatango.com","domain":"chatango.com","tld":"com"},"ip":{"addr":"208.93.230.18","port":443,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"441a378db25abb5c4db8560de9b87189","sha1":"4801220a00826fb7fb65f2753204881f393e69dd","sha256":"25ebf35db1f4166c31ae3ed946d1c1d436c4d5bbc9e1cdb791d4c892773e7dfe","sha512":"c65e50b9e12b349a60894fc1eedf1b2ca55ced6365cace11675fb8ac52334f577ea691a03776896d99c91832b071870df22b7dce036a89854ed32b9c4d858ec5","ssdeep":"","tlshash":"64a002a9021bd761860204d993447751640c5653936decb778cf2b3c4f40520724a0c5","size":68,"data":"","first_seen":"2023-03-07T01:18:54Z","last_seen":"2026-05-28T10:51:34.752134Z","times_seen":1508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/js-extensions-plugin/js/functions.js?ver=6.6.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0ce4d9bff07bf24421ad8d6991193db","sha1":"54672432fa469b7b566cb3125e1779b07fc8a613","sha256":"9701065a77191b3a4ced86664ef4599ac455b2436f780c2e6d544cd190d3cfc0","sha512":"578f6c70bae67bff28f06c4926aecbb05a7eb6b62106d582ee4750a1593de72647b6a4c61cc2c19e0c57373b5c41e558a3f12d828bdf9a55fe2fc90a12d4daf3","ssdeep":"","tlshash":"1d71100828f7943c069765fc5b2bd7a03a2160177584ce587d4c5b10af56c2fcee5eae","size":3601,"data":"","first_seen":"2024-07-14T22:27:13Z","last_seen":"2025-12-27T17:37:15.607577Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","size":9141,"data":"","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-05-28T17:05:34.395031Z","times_seen":252816,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/firefox-before-you-continue/?clickid=8789876781696250658\u0026utm_source=admaven\u0026utm_term=1045621\u0026campaign_id=AM_1045621","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d30f13da1f424ee0383b76edc55881e1","sha1":"7e348a5f57ab13eedbc4ed917cdeee5bb9f9bd46","sha256":"cf01a621447e67a81629bc28276677c86c48fd72c44cba83a82448574aadfd60","sha512":"06571ea850a1ff105d50dd65340b1109e07dba2915279d549f0880e161c5487e0462e63f5bcf3daa1feb9ebd6fc00f84d552fb806f5f5405ebac203f097b89b8","ssdeep":"","tlshash":"daa0244530471400c04dc1504d13fc00041010c7034fc50435d05d30d550440744331f","size":68,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-05-28T16:03:50.706694Z","times_seen":117809,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/c1-jake-paul-vs-anthony-joshua/","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1cb2eb66a2f1c92862fdcf7ffd522887","sha1":"84d3b905b0fda714c0e8d30dbc70b137a0a4cdaa","sha256":"a50d7073abf86b25f58894bfe1fe5d842bff467feb31bbeb9feeea8f68f53518","sha512":"d29911956d79d0ca49a48d73826894f8f39b66b1c63b5c43c5cb0e55af245cb5d373f59fd5736e4acc49edba9236e4533bc168467a3f357e1973aba57a46b9ff","ssdeep":"1536:KP6ben/sXfJoT2g5hgDyJDTKmPLS4bTKmRhgDyJHVNQ3Ke/Bii+xCTGKkxk:66ben/sv+JRJJ+/9J1","tlshash":"6293faf693c872e4d147e7a0dc238869755f34fa3fd5d7888668dee4b3510ac8a89c84","size":97012,"data":"","first_seen":"2025-12-19T22:28:12.609896Z","last_seen":"2025-12-19T22:28:12.609896Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.chatango.com/h5/gz/r1214250536/id.html","fqdn":"st.chatango.com","domain":"chatango.com","tld":"com"},"ip":{"addr":"208.93.230.18","port":443,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"166a10e72d12181140ec5a7d30738bc1","sha1":"7aababb3204ff6fcdbff8f0fe3557cf1dd606f54","sha256":"d50390f2c3e8d0d83b81a6c468c62131a40d151a17e20f00b533125ed44daec7","sha512":"8ba9f03bc324dc7edb4770c6e7be560e12c23a2ab6029b57ffa4cc79da4c083990e4bbaf3e69184860b415d82317d6e45aeb113b0bdc7dd045a743f45e7d7a63","ssdeep":"768:OlJ2Z0x7RdbE8LeJC4+9CZafnlJSSwt9KrORpgaxb2m8AW9r66X4hKS8FhpCg5Oa:qBDSQP9CQPAt0CRF2ON+h6xXux","tlshash":"e583e8d9766630568262e4f4907f040b627b79aaf4448abc708cecd96d74c6c127bfbc","size":86528,"data":"","first_seen":"2025-12-14T21:16:56.888717Z","last_seen":"2026-01-08T17:48:16.286523Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d30f13da1f424ee0383b76edc55881e1","sha1":"7e348a5f57ab13eedbc4ed917cdeee5bb9f9bd46","sha256":"cf01a621447e67a81629bc28276677c86c48fd72c44cba83a82448574aadfd60","sha512":"06571ea850a1ff105d50dd65340b1109e07dba2915279d549f0880e161c5487e0462e63f5bcf3daa1feb9ebd6fc00f84d552fb806f5f5405ebac203f097b89b8","ssdeep":"","tlshash":"daa0244530471400c04dc1504d13fc00041010c7034fc50435d05d30d550440744331f","size":68,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-05-28T16:03:50.706694Z","times_seen":117809,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/chunks/873-70d5376a1a2f81bf.js","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cadb7c96c6fa26df620cd5758c7ed726","sha1":"540ecc769e09e54b8b58e2925b78a83a8f4afa44","sha256":"2556d7843c19c5506d9c0eda4066470cfcb0df6199348615faef17575b8f5474","sha512":"bcdd0d4d061f1a48723bb402dbe376a182f457c1ba82f934e9c1933a683f6a0b9354ab1cae02fc113795b638f844e34876635c75217da139418bca5003d8e60c","ssdeep":"24576:y/UoOBKnoUI/yMUNF1c1T6mbos4ZbMpE8bkFqjj0VnEmYoP++LSYmTL2VL3m3Vlg:x1IS54l+Io0VEmYodZBW3Vi9M4","tlshash":"7985d0662c4d5b6eb62d0c7efb07613e3ea42cecba8c5dcf649f30e9c99a8545150c90","size":1735848,"data":"","first_seen":"2025-08-12T21:09:16.675747Z","last_seen":"2026-04-11T21:10:00.839403Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/chunks/webpack-9b218dd7273a2a79.js","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3c115a56e5a70e8aefc7eb23aef6062","sha1":"1482f7f8b29c969d134f0de2b2bcfd939b8fddcc","sha256":"712071fcffe88d7ca985992463d328346fc1cab2c3ab25190878143f0578db7a","sha512":"ca114f04f45aaba892bf50b37f3188cecb475c61e0eae0cbcd8382c753f8873d791fbe6003504617b9d00acbc5f6b469cf8ca33da519867479e113b8346d1001","ssdeep":"","tlshash":"4061c5a93625fab556f10885887fc242f619203b152efca0e717dcb9b464ae10562ff3","size":3452,"data":"","first_seen":"2025-08-12T21:09:16.66121Z","last_seen":"2025-12-22T12:53:20.463919Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.19.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e340c7960b814d028961d597494aa566","sha1":"bb4ad494be7f93c6656cace97ec592654e9635cc","sha256":"a685d0414b485e26954f312392f12973a30582e220656d0abb815daa2e41ba9e","sha512":"4946ec14880a9613917033dfbcb1fc544c6acddd96f8b143fee0821b4c9845957c275029d75bea5bf510fa6ea3f8b81e6534e85d069bccd45b4d535eb15ab264","ssdeep":"96:BcsNt0jqf9fzgcf8FD7lCjNVobVDPkqflkxwvT8S2:WsNCjw9fsjFD6N4FPkyXgS2","tlshash":"56a142d41b90fc6735e135c9a11aa731752fc0333d1bb8c1fa22dced98e8a9187a9531","size":4997,"data":"","first_seen":"2024-02-05T23:13:54Z","last_seen":"2026-05-22T22:20:20.727867Z","times_seen":327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.chatango.com/h5/gz/r1214250536/id.html","fqdn":"st.chatango.com","domain":"chatango.com","tld":"com"},"ip":{"addr":"208.93.230.18","port":443,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"27543eb3d80d69bdb014f5a3b4f19963","sha1":"7f8b4b6cdde77f63c0df6676c19a11c480ac90aa","sha256":"9d7bf2516c34273d8809fae0fecf01119b54be83feaf0759fed7116f6d36406b","sha512":"25711f8c535d94df7baeb284847d78c637b6f5c02538e627d35eb07544a055d6c700458853ec9d3d9244b4b35462eab3822901ad02b70326776e4ce97859a5a5","ssdeep":"384:l/YCCywYyufacPsKZOyNxMF0QIZP5qxP5qvCfZdi1jN:N9facPsKZ5xWQHeCtN","tlshash":"3192085bb2623167e262f0f4047f411a1637a549a89582ac349eede45ebdc2c3377f38","size":21140,"data":"","first_seen":"2025-09-20T18:59:54.733769Z","last_seen":"2026-04-05T10:10:49.538656Z","times_seen":222,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fbc22c79d40119dde9a5d16897002b9","sha1":"e9837519aca724457792e2d5ee98a97a0367cdf9","sha256":"7e84c9f8d71bc6eb2dac2fce59a6caea62da51ffa8cf56b41806f59386ab1322","sha512":"3118a198a3710c839c15d6c4b5dc9f9adcd637913af2e26f438b01c80b27281f4937e25aad2817855d8b3eb36207c61ae16d62b17e698799c5316e86f52ac6fc","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhBGX0CiS9rH/OrLrErJ29FkFvd:iS33Z5vK47kv","tlshash":"81a2d94eb246380586f7a2a5402f521fb132e25cb10588ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2024-07-16T20:15:04Z","last_seen":"2026-05-28T16:23:40.250557Z","times_seen":39600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.chatango.com/js/gz/emb.js","fqdn":"st.chatango.com","domain":"chatango.com","tld":"com"},"ip":{"addr":"208.93.230.18","port":443,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"878b535ecd5fa00c9b17da0a55a06dfe","sha1":"e2672cfac6d66b42b820c19dd2442c4a950aaa3b","sha256":"3115c91e28b44cfe62870b716415a37ca55e8acf6d5676dd33e054fec88cca99","sha512":"6499b1e39711762737cc972493388355d3cd2b53a17fe14451cdc7a47f2c35c7233f96f975d860bf925dfccf2b34f610a715b58d9e81b00ee5301582e2f0bf97","ssdeep":"1536:HZ/fvf0QYlkQd39ZQ2xcGpXjYfkHoQ0MMgB6GLwl9Vevk:9f0QYJ4kHoQP6IK9Vevk","tlshash":"e06309c9734274a68262e0f6402f054b7236b469f54885bcb19cdce52c789a9237ff7c","size":69564,"data":"","first_seen":"2025-12-14T21:16:56.852219Z","last_seen":"2026-01-08T17:48:16.267476Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loijtoottuleringv.info/redirect?tid=1045621\u0026ref=Watch_Live","fqdn":"loijtoottuleringv.info","domain":"loijtoottuleringv.info","tld":"info"},"ip":{"addr":"65.9.46.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f8bdd8a66e16b245f3c6883ad5c4616","sha1":"907ebf9b142bbf4135e9217f57eb3c225b439182","sha256":"84c49d6f53e7f6630b09a4feb671140bf4989561661fd0033aade06197579f00","sha512":"2dfa7ea9ded7992644b91d709d315032d4df228780c45695d2e54527ad696db29981693860bcd53ead5270cbc21db28019d26abd77a4a8ba1eb2b3c5ae155c2b","ssdeep":"","tlshash":"b8c08cc7406229a62aa920b9aa93330820c227cf04c8950de4a00a38a0253ab44c7d9b","size":154,"data":"","first_seen":"2025-12-19T22:28:12.612732Z","last_seen":"2025-12-19T22:28:12.612732Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.chatango.com/h5/gz/r1214250536/id.html","fqdn":"st.chatango.com","domain":"chatango.com","tld":"com"},"ip":{"addr":"208.93.230.18","port":443,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"43134df9d2b0b2d3df63b02416ca05ad","sha1":"25bf9c9469fcf6ed451e58e787ee7eace9c2b8f0","sha256":"3730582177d1228ebf17d75a4b4e2638792170c6e7de502a7e10a7a420017f1c","sha512":"57de387c63e09499e1d024a90caa9a51f67024b94c4c30db514f35a2a8f7cee9ba757027cc4e3264e3d10fd120bcbefd353647d304b12053f6aa388a2b5b43e6","ssdeep":"6144:+uFstbyL36x6+RIoPcMxKNAyRiZQWl15rJ/zrcJ3aPQHjCQFr74GzKRfYIJtoSv:+a6x6+P1xhyRifELFr74GQYY/v","tlshash":"cea4e79db7623365d1a3e2f4406b2165723b519caa045a6cb24dcdf4fd3482c227bfb8","size":470865,"data":"","first_seen":"2025-10-03T08:18:10.321086Z","last_seen":"2026-01-08T17:48:16.289218Z","times_seen":282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-05-28T17:35:45.686337Z","times_seen":144150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/chunks/main-app-7467b200585c5dbe.js","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"030cbe6c53b09f53c8584e751e849141","sha1":"b025dee71d5d565c60338dfef2cce6fc071c7110","sha256":"87de38b9038769af2cca6d11420825aae2aca3c70138c42fd0a21a175721a8b6","sha512":"071ca258cd0831d22c43f77583d11cebfb33e54115f08837e70319c3290890c62078e8550f7a0d6c1787be10827c0ac4411379cface094b3ece3d67465a7a657","ssdeep":"","tlshash":"29f0309a4f0cf42f1c266e24fe936ce2285f4535202b4e603901eea12c27facd2a1419","size":463,"data":"","first_seen":"2025-06-17T05:49:33.67305Z","last_seen":"2026-04-04T19:07:32.188429Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"072d3f6e5c446f57d5c544f9931860e2","sha1":"ee6aa3d65b474309376468b24bb6f829a4514809","sha256":"2cb546fbdda7995d374fffa4b2f6530bbcf57d014639ddf76de45df43d593045","sha512":"19ceb31ec694ac5c42a0a7b02cfc1c31ddfc033dd62916a1c55bbbdd2435e21f73127c539687633e96f2706b2d75c37609b44a9c9462b63f9f96795cb4495968","ssdeep":"96:vHyiUGUQs6c7DE/3sc/YrEBAr44BPwKxbqtNMHlWh/C2fWRi+RRmps:fyiUGUQ/cHg3NZBT4JbqtNMHiC/RiLps","tlshash":"6d9133c438927870a2637453f4bf14d57279aab2713ac4c1a24dd4e12db39cee0a7a7d","size":4307,"data":"","first_seen":"2024-04-03T08:25:08Z","last_seen":"2026-05-28T15:39:17.926402Z","times_seen":31576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fbc22c79d40119dde9a5d16897002b9","sha1":"e9837519aca724457792e2d5ee98a97a0367cdf9","sha256":"7e84c9f8d71bc6eb2dac2fce59a6caea62da51ffa8cf56b41806f59386ab1322","sha512":"3118a198a3710c839c15d6c4b5dc9f9adcd637913af2e26f438b01c80b27281f4937e25aad2817855d8b3eb36207c61ae16d62b17e698799c5316e86f52ac6fc","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhBGX0CiS9rH/OrLrErJ29FkFvd:iS33Z5vK47kv","tlshash":"81a2d94eb246380586f7a2a5402f521fb132e25cb10588ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2024-07-16T20:15:04Z","last_seen":"2026-05-28T16:23:40.250557Z","times_seen":39600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"952a6fb16f4b518456f04f090dbf0f34","sha1":"037579b2b8dd00d6e7a4dc8a334cc3a43ea6e689","sha256":"f8abbe8f881f1cb3e55e4aca01e8f6bb5bb1031ad36991a90026298112c6282d","sha512":"d4f49e017fa553174ecee9018494c3e0f9af54b2851f22ade1cef7e9b52012c5b87eef4d2ad30bb3229fd6ff05fd715fa269a3e79b2fe66df92f4dd96515f537","ssdeep":"","tlshash":"e941185fb402f5412cb7cd0f097b2f2980c9d9b62678e05c8a4ed97f0355abd83a8826","size":2030,"data":"","first_seen":"2025-08-12T21:09:16.672134Z","last_seen":"2025-12-22T12:53:20.469246Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-05-28T17:38:01.702356Z","times_seen":247232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/wp-content/plugins/wp-dark-mode/assets/js/dark-mode.js?ver=5.2.20","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"451b0b2a11d4871fa8354048bad72ba8","sha1":"9e3e845afd1b28653b350f68fce313eefdb990c3","sha256":"54a0bcde9445a58fd5802f2a369aeae5132201f747bf8e2077b1835b9ff4f6c1","sha512":"ba8655b947eef6aab57004a35e6a97620e605862f039ff6cd32634f3f861fd15bfb6d9b80bd4bf8cde2f811ec55d33fd776563c8227693451ae138dbe8438e5a","ssdeep":"3072:ORRPABIjxpMIO81R95QMOZlIXMILgaPdnRErKzA:ODjS81R95QMOZlIXMIs+cKzA","tlshash":"40c3f8dc72e7b47613936575406fa20ab33f2c95644c8920e226e9e53c78c4ea277f6c","size":121286,"data":"","first_seen":"2025-09-09T13:22:48.411685Z","last_seen":"2026-05-28T04:09:43.559539Z","times_seen":290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.chatango.com/h5/gz/r1214250536/id.html","fqdn":"st.chatango.com","domain":"chatango.com","tld":"com"},"ip":{"addr":"208.93.230.18","port":443,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"19720c164d56f7e7dfe6748e376f868e","sha1":"0387db7b6a453b71114985d199838b7a3928c76b","sha256":"56e50d855741d508ab6465d3860ef0ad117ab967993b9111caeaec90f64e912b","sha512":"92c957c0af072acc16b029e12b727004dc62c1e88297a9710cb90584299c0158b9033b8d31a44e234488940489c8695dd372cdda93ed83b1dfd062542496a252","ssdeep":"","tlshash":"b07000080000802800228200002ab2a028220008200220020888800080a0800208ac02","size":19,"data":"","first_seen":"2023-03-07T01:18:54Z","last_seen":"2026-05-28T10:51:34.800907Z","times_seen":2077,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.chatango.com/h5/gz/r1214250536/id.html","fqdn":"st.chatango.com","domain":"chatango.com","tld":"com"},"ip":{"addr":"208.93.230.18","port":443,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"730ac0a51c66aeb992bdfb586f80d160","sha1":"dd0f26cd9751ed81cad302a6bfef74780a2cff70","sha256":"dfb96135acf50feee1143143646f40a873661fef765ca5285d22b22a37aa3fee","sha512":"60b9efa3b4273b9296215b21972071d411e893de8087c9fae6b1c457a65a164426f502798b41968f0cbde23aac521a5ddf6f163041ff0c18aa1f2dc1e13f722a","ssdeep":"1536:7KGFkt+5M3PtG13Z31Km0xi/GSqKU8jsYF/u2xPb/vsGBI7p5iE:ZwPtGRdr0xQGSqKU8jsq/u2xPb8","tlshash":"e183f65ff220346a91a3f0f8512f124a5633a55a9981833c798cdce55eb8c1d33bbb78","size":81877,"data":"","first_seen":"2025-11-03T23:42:14.969451Z","last_seen":"2026-01-08T17:48:16.292295Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/chunks/970-471fcb4faa5fd57a.js","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6434b1c374a1b673c2d94bd6287b73ee","sha1":"2b015c34c7f0d2a38526ac899c61fe9fe0aa3288","sha256":"a8cf918f9dc573bf49a2bf490f6ac642ec1de4554bf55a8294dc04c9588354e5","sha512":"04eff6d6380a9414a65de1edcbf05451a93b1244a33a9c832317435f952adba3e30226b333779d7b8f95314e7585dbacac8f8ada0dd00d366f6049919cadf34a","ssdeep":"192:iKrdYcTZpYzm7y2BjTwwfQnd58IdMavNEz+66fRFxYiC4BMqCJ:is5Tn7njw1dD36yu46qQ","tlshash":"cd5209b73690fcd6278b80d5883f000df3655d76632ab04873a5ccd9a6e0595f1a2fba","size":13531,"data":"","first_seen":"2025-06-17T05:49:33.66444Z","last_seen":"2026-05-22T06:34:39.520484Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.19.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"802e7441b394288bafeffc8a53506aa2","sha1":"c89af23e3ab70c9ff6bd2bd8dd1b58e565700cb4","sha256":"c809a90f550b4200b6ca38bdca5d9feb21f8d9f69563643eb8f4fcb650d166b4","sha512":"8b17c16c4a84f1ad91dbdd53124504bd8340934595e9d028b90266d8da5e2d749562e248f264fb558b751c7786f8097581c579f3e36de1df1b38d19deb42237f","ssdeep":"768:vRPzjLRkRevx1QEa/A3JSJGfVebVqJj/Q9KEAzBc5GETSebsvTilauUHTSX5aodX:vRP/LRkRQx1QEa3GfV9JREAzBc53TSe1","tlshash":"8303081271d2d4aa418f48b7b433121cb3664dcdb402b59db2bdace6a4b1e8373b2775","size":40306,"data":"","first_seen":"2024-02-05T23:13:54Z","last_seen":"2026-05-22T22:20:20.621909Z","times_seen":325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.19.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8deaa5cfa493aa543f9b8f424ad9cc68","sha1":"dffc161bdb78e1130dacd3de7d8b9d7dd24f0fc0","sha256":"19757edeeb6d1e52f7253e4a277979ee6fcaa44ae0d5eee7b6c79d7beec951b9","sha512":"7443de9e8bbfb009a9c72948d8effd438e47456b1f3ed00d0eef9aad92325be99fb14941f7b94dd70f93e93864792f31e57add09590cf191c576b59ad40b1e68","ssdeep":"1536:3eAjA679C+QRCHXC4WHqMPB8Vx8WXwCDcYNIekHeBHmjkfzRNE4cR8+SxpcxID1x:ndeVW/Clkbx","tlshash":"2c43eb863251b4e70bef40eb602b450af32319e4740eb1987ab8ddf66470d5a237b739","size":60173,"data":"","first_seen":"2024-02-05T23:13:55Z","last_seen":"2026-05-22T22:20:20.618356Z","times_seen":323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/c1-jake-paul-vs-anthony-joshua/","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a757942f2d700b69e4871e170894dd7c","sha1":"ab8abf26f815934eaaa71d3a222e975424bba39e","sha256":"2303b0f4aeaa212f0240970f54282841981ec6aee01cd22e6445efad3bc3ed83","sha512":"1ab86b40b1643b56be5e7daa0cb4f67f607a786d1ccf28e6a72fd432d1714b8b73e63c7247e58aa28b9627295300f2377ebad07c9018becb1d1b0d4de024dc8b","ssdeep":"","tlshash":"eea01270018055160497050e646391095410940054733008800cc30c0432dc018a0bcd","size":81,"data":"","first_seen":"2025-12-03T04:13:05.665625Z","last_seen":"2026-05-28T06:46:11.929138Z","times_seen":4918,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/chunks/488-13f06b7b9ed87101.js","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59d7cbaaceb9f146d3b9339870d06611","sha1":"006843cc075fa17a3c548cdfe770ea2bc38852cd","sha256":"56d03b383d8ebe11a80e1792925b90e6c262a5ff448d125077e1a07bc4b1102e","sha512":"378aacae48b5635194d39a88858d2085e8a869b71107a74baaee75277f7c891d0c699e8f5e1a985d909e6c384f4d89c687f78b2488634ed576e53bbe4ca2f599","ssdeep":"384:csUp8LLYVp8LL8eDHMe/Pw1GCr2y9pK6EVqLYFQ:TQyLYLyL8eDPHlCxEeP","tlshash":"1a42520ea24cfedcba724884fa0f540db51f2545cb128c62ea7cac411b65b9872677ce","size":13063,"data":"","first_seen":"2025-08-12T21:09:16.656625Z","last_seen":"2025-12-22T12:53:20.467286Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.17.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8027f7d649c8b4b044a03ef82cc7ef68","sha1":"4ba490a1a2544a195e5fba915ac5eb09eaaec5b3","sha256":"d9755b7eff734eeb6267db6515f0267fc66622cd873cd37f65761b3fcc94cac2","sha512":"f372b4f4a838e59a57c7655acd7ac66b4880360d39edc865f4cea1643f5ad9bf47339a7520a2bc4c0e9a040098dd1236d55ee723673ca9daa04e5d2d4b638cd9","ssdeep":"96:BTifnGhUqdL5MGSPhRm0j0DEpre1bNUx4Gk4OlL8GVyeV9WmLttXSc/8k2:JifcUgL5MGSpM04CrI6CGTvG3rXnEk2","tlshash":"f4c145d90a949d5b26e139d9b0975b701e3dd0323c15aa81ea52eddc19f8fc083ea933","size":5801,"data":"","first_seen":"2023-11-01T17:10:30Z","last_seen":"2026-05-27T13:00:04.122863Z","times_seen":2127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-28T17:38:01.730146Z","times_seen":803394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.chatango.com/h5/gz/r1214250536/id.html","fqdn":"st.chatango.com","domain":"chatango.com","tld":"com"},"ip":{"addr":"208.93.230.18","port":443,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aecf909b2edee7355172265b2507cee6","sha1":"a7e6ac7182510df23208ff0e3fd2500f3582715a","sha256":"ff6e7841cba46548b30a1f8661cab12fa977de4264d387ba82b0bb491e02895a","sha512":"ce659fd4152626f31850f3fd4b3de574e79d51dc53f4a22e9cadb798680209775863275a8d77de024c6d8f66ae0b5a16dc2954e43235e374eda3ef2aac29e73c","ssdeep":"","tlshash":"87c022b4f0618630102500993077c3987e30a10529d27084888e740c9c60fc31562ca4","size":193,"data":"","first_seen":"2025-12-15T18:44:13.182789Z","last_seen":"2026-01-27T10:38:06.930758Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KDPV8F77","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b6cc19f9d2e91be4f74a6be46ca82b8","sha1":"df5e83e6f24ae1b8f2fa253376aa86eced788d21","sha256":"9cda651390f4ec847ebd7e5305a9b9261f464aa71c170de493cfb788b20bcd50","sha512":"a42849b4a4a93dc3db3e569a6c907d778f5e76de8c526560ccf8a7fe6262524c03085e5a48ddaf24e1f95c8a88aefc8658fc19fff0df94a287545b727a8838e8","ssdeep":"6144:nkeJf2bulKYXV1u99Yye5HDmHYmyBFz0nsqufWll+CRaV:k9bu7l1mcAnsLW2Ci","tlshash":"f97419cdb3c6746683a3a478403f114ba17b6e91f44cd894f186d8e42e74aaa4277f7c","size":353931,"data":"","first_seen":"2025-12-19T12:24:58.985023Z","last_seen":"2025-12-20T02:56:56.399506Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"dreamytabs.com/wp-includes/js/wp-emoji-release.min.js?ver=6.6.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b976b651932bfd25b9ddb5b7693d88a7","sha1":"7fcb7cb5c11227f9213b1e08a07d0212209e1432","sha256":"4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3","sha512":"a241ebdcfaf153d5c2a86761145b2575cbe734b4f416acbfac082ae5c6eb7c706bd6ca3bc286b7e1a0f9e326729252dcb95b776750c4a3a0d81f2aa6258ea39f","ssdeep":"384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr","tlshash":"7182f99bb33a4e9f343e3bd78e968f4dc5da555321c0f078dbeeb68169a00568274c90","size":18726,"data":"","first_seen":"2024-03-13T16:02:37Z","last_seen":"2026-05-28T17:36:40.359462Z","times_seen":98617,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.11.17","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"424d1bd49a0f7bf705d9342a91c0089b","sha1":"94166e2c3fb906fcdacd8976d14638201d0a7bb9","sha256":"66b713cb51fe6103cd8729bc0c245c9497295b6873bdb9be7e8196caf5e5326e","sha512":"1694d2c8689eb7fb9e580bbe8184a6636cf6d05619ed16edb914155bf8f4488921d99ebfcbe5d1f5b3504435f13e2050934ae8d1eefdc432a4a98560180cb52f","ssdeep":"768:uYEPx6KoYcFDTHjCqoKoCo9or6jCRcjC5LltbmxPE22Ve8KTX6VzSD0tIzQ6IFNH:uYEPx6VGe6jCRcj6lBmxPErhdSLWNdio","tlshash":"12c272a66300293604fe17e7f5daabc5767114affa0944111838cc2e19a8fd352f5afd","size":25965,"data":"","first_seen":"2025-10-07T10:54:39.300678Z","last_seen":"2026-05-28T13:18:47.094003Z","times_seen":20140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.19.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e340c7960b814d028961d597494aa566","sha1":"bb4ad494be7f93c6656cace97ec592654e9635cc","sha256":"a685d0414b485e26954f312392f12973a30582e220656d0abb815daa2e41ba9e","sha512":"4946ec14880a9613917033dfbcb1fc544c6acddd96f8b143fee0821b4c9845957c275029d75bea5bf510fa6ea3f8b81e6534e85d069bccd45b4d535eb15ab264","ssdeep":"96:BcsNt0jqf9fzgcf8FD7lCjNVobVDPkqflkxwvT8S2:WsNCjw9fsjFD6N4FPkyXgS2","tlshash":"56a142d41b90fc6735e135c9a11aa731752fc0333d1bb8c1fa22dced98e8a9187a9531","size":4997,"data":"","first_seen":"2024-02-05T23:13:54Z","last_seen":"2026-05-22T22:20:20.727867Z","times_seen":327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=3.0.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37a18cd57014e833a5c4a7bfa6eea9b3","sha1":"bdaa4dc40b15d010d66959bfe7a40b10292d1763","sha256":"fad3123058cce0346ee9998342ef09cfa766dc1393ee3b5c2b450a18936c7d1b","sha512":"3d721d447bd732f96bf1b2feae5ef6b6064ec6b2396022f06a0d96f8ca1478f77c8910733bc277ebe414a5e85c77ca80b9d2f9a5f9ae77c7e99884c82f15a9a3","ssdeep":"","tlshash":"e651ba0973db2836406f92bb2f47559e722640cf6405c968786dba5e1f50c7016f2bf6","size":2937,"data":"","first_seen":"2023-12-27T11:44:50Z","last_seen":"2026-05-28T07:04:17.320054Z","times_seen":4568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.19.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8deaa5cfa493aa543f9b8f424ad9cc68","sha1":"dffc161bdb78e1130dacd3de7d8b9d7dd24f0fc0","sha256":"19757edeeb6d1e52f7253e4a277979ee6fcaa44ae0d5eee7b6c79d7beec951b9","sha512":"7443de9e8bbfb009a9c72948d8effd438e47456b1f3ed00d0eef9aad92325be99fb14941f7b94dd70f93e93864792f31e57add09590cf191c576b59ad40b1e68","ssdeep":"1536:3eAjA679C+QRCHXC4WHqMPB8Vx8WXwCDcYNIekHeBHmjkfzRNE4cR8+SxpcxID1x:ndeVW/Clkbx","tlshash":"2c43eb863251b4e70bef40eb602b450af32319e4740eb1987ab8ddf66470d5a237b739","size":60173,"data":"","first_seen":"2024-02-05T23:13:55Z","last_seen":"2026-05-22T22:20:20.618356Z","times_seen":323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5WQ66FLQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ddf5199a53ecdabef3c0fe52b51f395","sha1":"854db8453e1c8d1ff63dd19fc9b78a2b173ee258","sha256":"f3874d8ba09706b7996a3e0e26a861bafdc475043f79932ac976a625903a9c6a","sha512":"c8189fcecf999a96bb3e69207b25c0048101c9669ed2ef20237de0520281c8680420b3095e916381a18d65816881685aefcff1604d8f231e7062a3e3ed126b80","ssdeep":"6144:tkeJf2bulKYXV1u99Yye5HDmHYmyBFz0nsqufWll+CRaV:S9bu7l1mcAnsLW2Ci","tlshash":"107419cdb3c6746683a3a478503f114ba17b6e91f84cc894f186d8e42d74aaa4277f7c","size":352945,"data":"","first_seen":"2025-12-19T22:28:12.619071Z","last_seen":"2025-12-19T22:28:12.619071Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/firefox-before-you-continue/?clickid=8789876781696250658\u0026utm_source=admaven\u0026utm_term=1045621\u0026campaign_id=AM_1045621","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5258cfe0caae388a1ba85fa5765aaeba","sha1":"a2d0078d17144cc988040e4e7951d5999ad6c3b2","sha256":"e3ac61ee6d6733ef5415f4553f77276bea4b024c56a776155319ed4b835cf4fb","sha512":"6ae891ae0b2cdace263dd52b2e8168bc14419804fc1fc39bcc85fe1b778a3e60d3bc99b2b5454d8b71d3e73bf5a6a7e3dc4d7533ef9b4fce3b89c7336d1f4d3c","ssdeep":"","tlshash":"7221984a1a311e2447aebb9861ca3baf88c0033321c4f58d16d5e4a542f7dcef0863a3","size":1153,"data":"","first_seen":"2025-12-19T12:24:59.049015Z","last_seen":"2025-12-19T22:28:12.619921Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"dreamytabs.com/wp-includes/js/wp-emoji-release.min.js?ver=6.6.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b976b651932bfd25b9ddb5b7693d88a7","sha1":"7fcb7cb5c11227f9213b1e08a07d0212209e1432","sha256":"4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3","sha512":"a241ebdcfaf153d5c2a86761145b2575cbe734b4f416acbfac082ae5c6eb7c706bd6ca3bc286b7e1a0f9e326729252dcb95b776750c4a3a0d81f2aa6258ea39f","ssdeep":"384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr","tlshash":"7182f99bb33a4e9f343e3bd78e968f4dc5da555321c0f078dbeeb68169a00568274c90","size":18726,"data":"","first_seen":"2024-03-13T16:02:37Z","last_seen":"2026-05-28T17:36:40.359462Z","times_seen":98617,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/c1-jake-paul-vs-anthony-joshua/astra-flexibility-js-after","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e73a95620a08898063b20c8a18411d5f","sha1":"d002665f32baa40b70c7c6efd54c5a8145eb34b2","sha256":"bfc58865a4c4d31b7fbbd8a85f86057eb1bc860bfbc9a62ce430b968acf6c678","sha512":"2e785638fa77698ba47c3bbfa824537c68ff134496677ed3d56052fcdad21da21caf8a76b78073aea2a34aa5d8d98088e0ded8ce0feaa1301a160fe7c5f3cad9","ssdeep":"","tlshash":"ced01270c18055160497057e6463910a5410d400d4733008800cc30c0432dc01ca0bcd","size":225,"data":"","first_seen":"2025-12-03T21:22:27.101559Z","last_seen":"2026-01-11T05:50:19.336739Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/c1-jake-paul-vs-anthony-joshua/sandbox%20eval%20code","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-28T17:37:59.342347Z","times_seen":905850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/chunks/app/layout-ca27d970411857d2.js","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da18a8c32014d39f385115986c339e8e","sha1":"3ce82cada462bcd818e160fa375ea3787e6d6994","sha256":"4813bbada6db9d33f390464e3710d94cf93e2b09baba0a0d1b8feaabe3aadaf2","sha512":"a78a5997c9559c96970d8c617bb4b9487edcb057565c91a92e0161c3d26086d330a6d1d94776ab9be3e4f1a78cafe52bb479fac51a4059ea5649df1e6f555f89","ssdeep":"96:iUGc+ejgaWLUzfv9Hn5G7ZaIyZpfQGUBT/XCzUBT+9GCxQi4tH9GCON6:iUGc+ejtWsfv9o7ZcpoGU9XCzU5sQi4t","tlshash":"0fb1a9b67bc8fd3b47564980947b85537d402d32101aa8c4a3fedce521a6eda88a1f4b","size":5106,"data":"","first_seen":"2025-08-12T21:09:16.667675Z","last_seen":"2025-12-22T12:53:20.503014Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea456ea638ad6555ae73525514c569a7","sha1":"3b25c505ffa0420719422ef9e33444d1195e11d5","sha256":"af5a2d2d36c223778d027f594eaa17977bd7aaddaa15fe1406889db1a3af632a","sha512":"9734885386ba509414c71c8294cf67a5ee7a5a75870b5f73654bbf4f998ee2fca17848a55e70d416f065fe372e6ae7b0fd9ea35db02955302b42685f458592dc","ssdeep":"96:LZ79mOAW2xSZo7cg1xqzc/xme7SBe29ZoZvExqzpJG6ZJzbJNsa3GZR90No:iOvwupgnqzcpm0oe+bqzauo","tlshash":"6dd18d2e7405e94bedae3da9017edc3a20ce497f07a1dab4968ece580b4147927d7dc0","size":6758,"data":"","first_seen":"2025-08-12T21:09:16.67314Z","last_seen":"2025-12-22T12:53:20.477583Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","size":9141,"data":"","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-05-28T17:05:34.395031Z","times_seen":252816,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.17.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59ab277efa930785720a63e9007677aa","sha1":"144750f1e4d88d5d0bf93704ffebd349dd02e653","sha256":"c7267d9f9b72944e2b3772a521fd1b8882ca17b124de63549fbf591167efbd25","sha512":"153577744897d8e897e0321d562ab727fa71b8be776da89a6e3443618ee58c952e50d23b90b7f0e275bb3626452947b20df4dbbadd82c1fad1c5e23355b90169","ssdeep":"768:gTLX+EV2m6SbdndptaQ9HuGJswyV/pkTAQYtDT6HJiwknOsN7KOljuOzQYqEbzGv:gtV2m6Sb94Q9HuG2iiwkOsN7KOljuOzS","tlshash":"71b2d8063163a87a50cfc157e067420e7b374895740570ed7abc6ceba5b8d9a32eb335","size":24674,"data":"","first_seen":"2023-11-01T17:10:30Z","last_seen":"2026-05-27T13:00:04.101289Z","times_seen":2130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/firefox-before-you-continue/?clickid=8789876781696250658\u0026utm_source=admaven\u0026utm_term=1045621\u0026campaign_id=AM_1045621","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"02b847f73367f7279181b313f7950876","sha1":"63d66e9979455fbd366fe9babd68664f8f204bca","sha256":"d8be289212710c14d49fd957b12c1d17410dab98efee652f202bcdde8e780ab9","sha512":"d3a58d8bb1199c1a82402aa137f343f233ef6542aac8a4392064f70169973548833158bd6ead0d0dab5374a0e9336e35cc03ff0c5af225b377be7fd28cbfabc0","ssdeep":"","tlshash":"505183307945697b83e397557917bf026a7c05254080b9b8f0fc886d14f6a65220be47","size":2675,"data":"","first_seen":"2025-06-24T20:43:22.462521Z","last_seen":"2025-12-27T17:37:15.769808Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"104.21.11.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01227f5edc20e0ff4ed643b27cb8bb68","sha1":"d71a88f7341f2b1bdaa7deb9a66888607bd52598","sha256":"75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2","sha512":"88046b07c07ff6de47ef7d1e0d7ca281fc48e91fc6a292cdf611457b96ac92bb0068971cfd55c0cc3e6179d7335e77a6a14b15fa502bbae7b2233546da6c0f98","ssdeep":"384:WDWdyJ+TJTwWV+6RUL2qq8L6jW4+QL1zWAWvVRIDiei:7so1V+g+d+j4pJ5","tlshash":"8d82094a72d525ee82a3a1d10cef612ffb664e86a97e1785e381b49c187404ec3d7f90","size":17879,"data":"","first_seen":"2024-07-11T16:28:55Z","last_seen":"2026-05-28T15:39:47.191226Z","times_seen":6931,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loijtoottuleringv.info/redirect?tid=1229910\u0026file=Watch_Live","fqdn":"loijtoottuleringv.info","domain":"loijtoottuleringv.info","tld":"info"},"ip":{"addr":"65.9.46.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9687ac84f96adb2ecdfb70bec6595915","sha1":"8f600a50b9f6c6e5816c698abcd582fab6639ea4","sha256":"844ebbe2a0a061f74715937c530f7271f3f595d42b6fe9ac06e8c1d454b01a7b","sha512":"23633bd805b70e1c0d0c8b96b40d5162c11ae7627c41e8a77dce7eab2f4a0f7927b06b4c1691c375625e77f85394d7797d3c44014bf55723e824551badf21b70","ssdeep":"","tlshash":"3ec08cc740022aa63ea9093aca02378830c3278ba6988486c060076076543ab85d2c2e","size":154,"data":"","first_seen":"2025-12-19T22:28:12.625388Z","last_seen":"2025-12-19T22:28:12.625388Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loijtoottuleringv.info/redirect?tid=1229910\u0026ref=Watch_Live","fqdn":"loijtoottuleringv.info","domain":"loijtoottuleringv.info","tld":"info"},"ip":{"addr":"65.9.46.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f7da47fe64e2b9d30c8543c57028b54","sha1":"484ab5923957d09a329bafe113feb2d304430e32","sha256":"5053148596255e8976f2d51de714f186e6f5f326dadaa15f28612573dced1bc1","sha512":"032750c72fa117b922af3955bd469be5c165cc89030fa9208ff908164b38d716ed9f1eb61964491d3e51c07d2203aae616f5bfb0eeb74aa8082b7fe8cc2d0f47","ssdeep":"","tlshash":"1ec080c7104515d53a601b35854337c411971757e48495d5d07147e471d537b41d6c57","size":169,"data":"","first_seen":"2025-12-19T22:28:12.626159Z","last_seen":"2025-12-19T22:28:12.626159Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.chatango.com/h5/gz/r1214250536/id.html","fqdn":"st.chatango.com","domain":"chatango.com","tld":"com"},"ip":{"addr":"208.93.230.18","port":443,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff7740eb4626a42bc3c5931080184792","sha1":"8eae299530fe6b2aa2f48d3af8e7c2566e10cd81","sha256":"6b8a3c1db7301e1456b3e8324242f1d31b27dda2e945211bec25519eef3181ca","sha512":"ec96a8f9d9153f3cad9e8e286476bd8fd913e1382433cd9f9d1be6c821bf30f92cb53f70ba79b59e027f4bc8cc71a8f9e49d320626be8edcd69cc36969bec075","ssdeep":"","tlshash":"56f09e4a352754824563d5ef27f38208acb2670b2440d5727b1c86981f404dd04975fc","size":500,"data":"","first_seen":"2023-03-07T01:18:54Z","last_seen":"2026-05-28T10:51:34.782965Z","times_seen":1474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embedsports.top/embed-noads/admin/ppv-northern-ireland-vs-luxembourg/1#player=clappr","fqdn":"embedsports.top","domain":"embedsports.top","tld":"top"},"ip":{"addr":"104.21.70.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f72159987a8de11469870af72bd0aa62","sha1":"e85b1dafd182bd80fc1c88eaef72b1e29fcaff8c","sha256":"483dbd189ffa4997c1be5bac1d9982108ac072881e328229f268c3b6cdd3aca3","sha512":"8302a2a5efa65091977879882f194699312d833e4d7f96e4c6276f3a94485a9818a7b2bf78c20245e1e91b96d4a6bcb76bf3f048e87710877c028062fda094ad","ssdeep":"","tlshash":"0cf0e172403797b9c6d4506be9b493c098b031b9f503d581e01d9d08616cf250ff5a6d","size":577,"data":"","first_seen":"2025-12-19T22:28:12.627462Z","last_seen":"2025-12-20T02:56:56.469594Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/c1-jake-paul-vs-anthony-joshua/astra-theme-js-js-extra","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"62858ac66dd3797976f70cf321501211","sha1":"2fddf32318967c93849cab6bdfe0a7ce3d0e3d39","sha256":"7c5d238c05b4481050fdd9d80395eb3c85059b97c4fbb73b20517e4e3e96b03a","sha512":"9f0c9ae9b639c2138980ec76b1338d5c8bd342a0224757ecc652d5b5214439b88fdb324df5f593a234c46e43291c6f6b2470fb87dcce254592417b0f12c0569f","ssdeep":"","tlshash":"aff0a710c2d21d0176d78c7250118f64b0fd9190d1d4f08d9a7c454862e6a1a1668109","size":566,"data":"","first_seen":"2025-12-05T08:51:25.04418Z","last_seen":"2026-05-28T07:49:56.222614Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/chunks/app/(firefoxAddon)/firefox-addon/page-7644d226d0055f91.js","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f2aae7dd4b41b8153df01778830e22a","sha1":"fe99082bfc62e6d3ea462dd87027a5505fdb8226","sha256":"06c913a1fc5b200dbbd9ac591fedf80fcd24a436f069cbe27ae2338cb58f0c78","sha512":"6d8058ab1a4ad754cc6d28d7fdf63ce24bce84194bcfb02eecd80cb819de08aec6dc31eeb5e147e5126eff3dbb38410dcf69ef609e9826259c5c354252903844","ssdeep":"","tlshash":"d5c08cb012133da8fc3f4a9d00bb457236e5086a381ec0e5b532ec4458726ac8be1d8b","size":166,"data":"","first_seen":"2025-08-12T21:09:16.658888Z","last_seen":"2025-12-22T12:53:20.494497Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb97cd6bc9dc51ad4323d0f8d7060f27","sha1":"65df978c71ef4f93844f7b56c2347b8bdf830024","sha256":"620a01bd103fb45a177b3f2cbaaf29dca2c098369b4bd89204e6a5035e978035","sha512":"71d01054000c86f847a92831edba65a49a507ffb780d8051db63a7e5596f47bd6f42f7ac83d7c9baeb6f8b1d3761ae65440398c09d43ddf5c6c1abe97ac67399","ssdeep":"","tlshash":"44e0c040ac42dc1ecf169f2100bf1c3610cdc1bc0b40889684c5cc0404a2e311be2fc9","size":365,"data":"","first_seen":"2025-08-12T21:09:16.677003Z","last_seen":"2026-04-12T19:13:08.208208Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embedsports.top/ad.html","fqdn":"embedsports.top","domain":"embedsports.top","tld":"top"},"ip":{"addr":"104.21.70.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"94d5868531dfb8144803a0cfd623055d","sha1":"d5d49ebf0b01dccd1b0b6a1319b1324df296a7ed","sha256":"10c37d26bf6b3cd8573a5ea7cfd5d53db36596c8d85d7345e708440b3fdc3904","sha512":"f6b026b073e83a042cb0d330e134da6e1985ce89f8f19310880668d50808d401bc0c9b71d3940bf53007f93f80e92a17470c057c6c3ce4d0360ad652bfd74141","ssdeep":"","tlshash":"b06000a8080200c080020202a832020200800a80228000800000882000080028300200","size":17,"data":"","first_seen":"2025-12-19T22:28:12.63105Z","last_seen":"2025-12-20T21:13:17.93382Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5258cfe0caae388a1ba85fa5765aaeba","sha1":"a2d0078d17144cc988040e4e7951d5999ad6c3b2","sha256":"e3ac61ee6d6733ef5415f4553f77276bea4b024c56a776155319ed4b835cf4fb","sha512":"6ae891ae0b2cdace263dd52b2e8168bc14419804fc1fc39bcc85fe1b778a3e60d3bc99b2b5454d8b71d3e73bf5a6a7e3dc4d7533ef9b4fce3b89c7336d1f4d3c","ssdeep":"","tlshash":"7221984a1a311e2447aebb9861ca3baf88c0033321c4f58d16d5e4a542f7dcef0863a3","size":1153,"data":"","first_seen":"2025-12-19T12:24:59.049015Z","last_seen":"2025-12-19T22:28:12.619921Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"02b847f73367f7279181b313f7950876","sha1":"63d66e9979455fbd366fe9babd68664f8f204bca","sha256":"d8be289212710c14d49fd957b12c1d17410dab98efee652f202bcdde8e780ab9","sha512":"d3a58d8bb1199c1a82402aa137f343f233ef6542aac8a4392064f70169973548833158bd6ead0d0dab5374a0e9336e35cc03ff0c5af225b377be7fd28cbfabc0","ssdeep":"","tlshash":"505183307945697b83e397557917bf026a7c05254080b9b8f0fc886d14f6a65220be47","size":2675,"data":"","first_seen":"2025-06-24T20:43:22.462521Z","last_seen":"2025-12-27T17:37:15.769808Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-28T17:38:01.730146Z","times_seen":803394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-05-28T17:38:01.734258Z","times_seen":870354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.19.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"802e7441b394288bafeffc8a53506aa2","sha1":"c89af23e3ab70c9ff6bd2bd8dd1b58e565700cb4","sha256":"c809a90f550b4200b6ca38bdca5d9feb21f8d9f69563643eb8f4fcb650d166b4","sha512":"8b17c16c4a84f1ad91dbdd53124504bd8340934595e9d028b90266d8da5e2d749562e248f264fb558b751c7786f8097581c579f3e36de1df1b38d19deb42237f","ssdeep":"768:vRPzjLRkRevx1QEa/A3JSJGfVebVqJj/Q9KEAzBc5GETSebsvTilauUHTSX5aodX:vRP/LRkRQx1QEa3GfV9JREAzBc53TSe1","tlshash":"8303081271d2d4aa418f48b7b433121cb3664dcdb402b59db2bdace6a4b1e8373b2775","size":40306,"data":"","first_seen":"2024-02-05T23:13:54Z","last_seen":"2026-05-22T22:20:20.621909Z","times_seen":325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6105483638bf5e8a75281fe5e1724593","sha1":"eda0189eb558b183b96f986dc5d19383f38d0cef","sha256":"14de16fbe0c19c617049209624382077fc976dec843e4c62b49ba9ad492231f0","sha512":"13b76442e6e3e2af5315da9b98e1ae6902c966521edf1b12373e7fc488902639d73b5fb515c085c6ee0c6e666ffbf4adda3acfb8ed8f5353fbea2cdec7771133","ssdeep":"3072:tXki1TG8YlAVRzIqwL76WJHpYx85/MVzUL:6WTGvlVqw5JJdQza","tlshash":"7db3295673a277d21a6e60d42d57d60573fd8c80488f8867e3c8787972d081cd3abbea","size":112428,"data":"","first_seen":"2025-12-18T11:35:07.715482Z","last_seen":"2026-01-08T09:54:56.313421Z","times_seen":771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/c1-jake-paul-vs-anthony-joshua/","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"213cb043b1051d675b71dc1117164521","sha1":"bf38b11c9ca7e9003ac4ca89bad2807590fe6ba0","sha256":"87981acfab6d0e718ccefce16c8eb1f44b6a416c679143b87cf428ef0efda105","sha512":"5c665abb35175950a14d54973da62a09d050faf2e0c1806748c9a4a5a88fd3df11ad3fb0f623184fb6f127eb790bb105e8dfb3ce0dcf3cd8486dfb1801d240fb","ssdeep":"","tlshash":"7bf0e975d6ad48b013fbf32a365eeb046d39048bd184a6053a5c0e8d5f444a856f2a57","size":511,"data":"","first_seen":"2025-12-19T22:28:12.631834Z","last_seen":"2025-12-19T22:28:12.631834Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loijtoottuleringv.info/redirect?tid=1230072\u0026file=Watch_Live","fqdn":"loijtoottuleringv.info","domain":"loijtoottuleringv.info","tld":"info"},"ip":{"addr":"65.9.46.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"caf6752ca310cd6688295c9f29474e77","sha1":"039a2f7e4b61f14890197e331744259ce71e1c33","sha256":"786dc0f826213c67c89f86eb8c45e02becb2f14d03183d3be144a367a9891298","sha512":"c442706cab19596ac8990c8bf12101b71da8375554498483e04c2f14d63fcf60391e6c7072c8fe0791a2877cb50d562626226010e8f34437e60ec2db19590c75","ssdeep":"","tlshash":"86c02bcf000548082f9400fb96127fcc11c757bea488a109d0f1023831163eb51d7d7f","size":161,"data":"","first_seen":"2025-12-19T22:28:12.632609Z","last_seen":"2025-12-19T22:28:12.632609Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/chunks/898-60c72a68db37911e.js","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef0be5e9a3dcaa5108830bd0aa3c6277","sha1":"8dafe375559c53fd0c3c4385fa66dba145040aef","sha256":"50888faed5af05401cc7e8a95d49769450264699908eaade39814d7e90dd451f","sha512":"c31130b960646e7a65ed2dea0ed79b9ea639a63f60f9327e3db6fa117f3d898f51b8dbfeba3ad56dc7a09b825c01a4b07ae0af769134835c5f78247739eb8ec8","ssdeep":"1536:Ug5gIJct9xrxIP7hL5JJ/KcMhpa9dEwJMxsShgp9JnSGEScPveIBXIhnKb:hc9+VLflM09WwJMxsSRPveuXIq","tlshash":"2a14e9f676d0f8a107a740e5843b4006f3395c7a146e74a0a3e1ccda75644eee1b7faa","size":200767,"data":"","first_seen":"2025-06-17T05:49:33.671882Z","last_seen":"2026-04-11T21:10:00.742721Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4cdfe7e61540b219d985fd007cf7a40","sha1":"b4a01b4ae6057629d539af02cc74f80920cc1d8d","sha256":"4619c32f41f74c4b2183353f7f3854b2b359b43b08bfbe1f353968c05dd760f4","sha512":"3e3bd324f54dfc337e78f187c4086ede46b732ab0b1f3af2684ad422f0fec270944bb5de65a4deca4243c6e8d0796c64a63c4c56f7c86cec3ed391772b8c1436","ssdeep":"","tlshash":"cce0c0db70520cb161ef89bb27b5a5247153760eb8091822fdfd88243f68697482259c","size":426,"data":"","first_seen":"2025-08-23T18:25:08.331632Z","last_seen":"2026-04-12T19:13:08.201906Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"8255f23d719cff550710772953620668","sha1":"e56440d4004f0316a23951980b1d4a91e9d6f810","sha256":"891581b74cf5a816c1f550839774ab2576ba4e246a49a0b74564848173b50901","sha512":"9dc0e4807df0ccff7f0e5b3fe09045b239a4507a5be8092c9afb094b42e63343b36983656ccd9ed127017a91ab08d42c79c20c92ce2245e01f1a855de0798d2c","ssdeep":"","tlshash":"d3800470c4400c15c031405314341145017d400d000007005750574450113055505dcd","size":34,"data":"","first_seen":"2023-09-29T13:28:36Z","last_seen":"2026-05-28T12:50:01.004902Z","times_seen":1877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"072d3f6e5c446f57d5c544f9931860e2","sha1":"ee6aa3d65b474309376468b24bb6f829a4514809","sha256":"2cb546fbdda7995d374fffa4b2f6530bbcf57d014639ddf76de45df43d593045","sha512":"19ceb31ec694ac5c42a0a7b02cfc1c31ddfc033dd62916a1c55bbbdd2435e21f73127c539687633e96f2706b2d75c37609b44a9c9462b63f9f96795cb4495968","ssdeep":"96:vHyiUGUQs6c7DE/3sc/YrEBAr44BPwKxbqtNMHlWh/C2fWRi+RRmps:fyiUGUQ/cHg3NZBT4JbqtNMHiC/RiLps","tlshash":"6d9133c438927870a2637453f4bf14d57279aab2713ac4c1a24dd4e12db39cee0a7a7d","size":4307,"data":"","first_seen":"2024-04-03T08:25:08Z","last_seen":"2026-05-28T15:39:17.926402Z","times_seen":31576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"embedsports.top/fetch","fqdn":"embedsports.top","domain":"embedsports.top","tld":"top"},"ip":{"addr":"104.21.70.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://embedsports.top/embed-noads/admin/ppv-northern-ireland-vs-luxembourg/1#player=clappr","date":"2025-12-19T22:27:32.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"embedsports.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 11:45:11 GMT","end":"Thu, 12 Feb 2026 12:41:30 GMT"},"fingerprint":{"sha1":"52:2C:A5:D1:00:60:55:04:1B:75:95:67:7F:06:E4:0B:B6:76:CD:5E","sha256":"E3:23:4B:94:F3:F1:B8:BF:DE:EC:BF:3E:3A:1F:F6:F1:8F:CC:D8:30:8D:79:DD:C1:15:2E:4F:EE:21:1B:19:32"}}},"request":{"raw":"POST /fetch HTTP/1.1\r\nHost: embedsports.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 168\r\nOrigin: https://embedsports.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embedsports.top/embed-noads/admin/ppv-northern-ireland-vs-luxembourg/1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":168,"data":"{\"n\":\"pageview\",\"u\":\"https://embedsports.top/embed-noads/admin/ppv-northern-ireland-vs-luxembourg/1#player=clappr\",\"d\":\"embedsports.top\",\"r\":\"https://sportytrend.net/\"}"}},"response":{"raw":"HTTP/3 202 Accepted\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GIK-T3pm3NsB00GQvo1B\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xupj2EzbA6qsdaDLujVBEMS7WXkjuAbfNHjfuCiR4m8fBqNOPrJtLFkKU5HzZRkiP8N3p93OztwV%2BHQIKLsDDIv5LqYeZUH%2BvVblN%2Bk%3D\"}]}\r\ncf-ray: 9b0a53ef89f80afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-05-28T17:35:44.167204Z","times_seen":418452,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"embedsports.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://st.chatango.com/h5/gz/r1214250536/id.html","date":"2025-12-19T22:27:33.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bvtpk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 20:07:09 GMT","end":"Thu, 05 Feb 2026 21:05:30 GMT"},"fingerprint":{"sha1":"D2:20:C9:EE:4B:2D:3A:82:43:E2:14:9E:C3:25:30:01:9F:8F:BB:C3","sha256":"D2:57:0B:6C:75:32:2D:6D:C0:F7:1B:32:FC:56:BA:06:7F:64:4B:FC:95:E2:29:A1:4F:59:5C:DD:D3:8D:37:7B"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: bvtpk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://st.chatango.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-trace-id: cf249c521934ec333cee6af46f9f14d0\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 1462\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 19 Dec 2025 22:03:10 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DpGr3TSYeuZLUIH7UBcUYa0YcBCnfct5jL%2Fkp2x20GfMFsrJ0Q0U2VXzh%2BKG26daL2Hubn0nxVrNKM8ribjKYsneLYSNEkuyVg%3D%3D\"}]}\r\ncf-ray: 9b0a53f5698a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112428,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6105483638bf5e8a75281fe5e1724593","sha1":"eda0189eb558b183b96f986dc5d19383f38d0cef","sha256":"14de16fbe0c19c617049209624382077fc976dec843e4c62b49ba9ad492231f0","sha512":"13b76442e6e3e2af5315da9b98e1ae6902c966521edf1b12373e7fc488902639d73b5fb515c085c6ee0c6e666ffbf4adda3acfb8ed8f5353fbea2cdec7771133","ssdeep":"3072:tXki1TG8YlAVRzIqwL76WJHpYx85/MVzUL:6WTGvlVqw5JJdQza","tlshash":"7db3295673a277d21a6e60d42d57d60573fd8c80488f8867e3c8787972d081cd3abbea","first_seen":"2025-12-18T11:35:07.715482Z","last_seen":"2026-01-08T09:54:56.313421Z","times_seen":771,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":66,"dns":36,"connect":1,"send":0,"wait":6,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"bvtpk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bobapsoabauns.com/www/images/99a703977e943b8559ffc8e8c6c9b2da.png","fqdn":"bobapsoabauns.com","domain":"bobapsoabauns.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://st.chatango.com/h5/gz/r1214250536/id.html","date":"2025-12-19T22:27:35.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobapsoabauns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:06:49 GMT","end":"Fri, 13 Feb 2026 10:05:15 GMT"},"fingerprint":{"sha1":"1E:80:62:5B:0A:AE:45:C7:23:30:B5:BA:23:77:27:CF:C7:7E:2B:E5","sha256":"BD:DA:C2:A9:EA:C4:6B:B2:C8:71:38:93:D3:DF:34:10:57:C4:48:46:8C:A2:5E:BE:D1:C5:60:FD:35:71:AA:BE"}}},"request":{"raw":"GET /www/images/99a703977e943b8559ffc8e8c6c9b2da.png HTTP/1.1\r\nHost: bobapsoabauns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://st.chatango.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 8354\r\nserver: cloudflare\r\nlast-modified: Wed, 12 Nov 2025 18:38:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6914d418-20a2\"\r\nexpires: Sat, 20 Dec 2025 02:24:15 GMT\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 72200\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FEJWqil0CEiGwQBb0iBLXiINTHQryPAvQQGX7DpUdib4GcNDgY8L%2Bdn2BLNg7tbMNXtnfDSeNVXWKt%2BLoRf5O3EtSEnRgKEwi%2BixqS%2Fq0rKY\"}]}\r\ncf-ray: 9b0a54024ed123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"99a703977e943b8559ffc8e8c6c9b2da","sha1":"7723d7cd8d07a519d83f083eef9682a0f673d70f","sha256":"312825bac23fd9c0fb39a573dacdd000762843924d1c5456c0f2dd58792698ab","sha512":"3b39a9468f0a4343b58624a99111f1fa4bd37745af89931a7d2caa0534bd91e0c539df7a93ed711c406290fbcd028dce8bf894b38e82707cff76f6c04c18feba","ssdeep":"192:f1bQw9wshJUcCMT7NYVnj6bu+0HOeDRvzHRBtR8+GayPBD9E4qAFqB/z:fuitYVj6bu+QOelvzHRTRfcnE4qg8L","tlshash":"a302afcb7efc6e6d75662e5e0c66889b7d5d325de080845599bfcb328c2f25d81008c2","first_seen":"2025-12-01T19:36:23.427793Z","last_seen":"2025-12-21T23:29:32.616319Z","times_seen":89,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":41,"dns":20,"connect":3,"send":0,"wait":7,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.chatango.com/js/gz/emb.js","fqdn":"st.chatango.com","domain":"chatango.com","tld":"com"},"ip":{"addr":"208.93.230.18","port":443,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/","date":"2025-12-19T22:27:29.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.chatango.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 15 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F3:69:E1:D0:F3:D1:74:D0:DA:D5:22:F8:D3:1E:06:08:AD:10:C4:11","sha256":"09:28:F7:57:15:FC:10:13:9B:36:F1:1C:C5:1D:EE:8C:45:0E:F5:7B:37:E3:7C:84:D3:8B:89:EE:9E:19:0E:20"}}},"request":{"raw":"GET /js/gz/emb.js HTTP/1.1\r\nHost: st.chatango.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sportytrend.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 19 Dec 2025 22:27:30 GMT\r\nContent-Type: application/x-javascript\r\nContent-Length: 23804\r\nLast-Modified: Sun, 14 Dec 2025 13:40:23 GMT\r\nConnection: keep-alive\r\nETag: \"693ebe47-5cfc\"\r\nExpires: Fri, 19 Dec 2025 22:27:30 GMT\r\nCache-Control: max-age=0\r\nContent-Encoding: gzip\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69564,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1651)","md5":"878b535ecd5fa00c9b17da0a55a06dfe","sha1":"e2672cfac6d66b42b820c19dd2442c4a950aaa3b","sha256":"3115c91e28b44cfe62870b716415a37ca55e8acf6d5676dd33e054fec88cca99","sha512":"6499b1e39711762737cc972493388355d3cd2b53a17fe14451cdc7a47f2c35c7233f96f975d860bf925dfccf2b34f610a715b58d9e81b00ee5301582e2f0bf97","ssdeep":"1536:HZ/fvf0QYlkQd39ZQ2xcGpXjYfkHoQ0MMgB6GLwl9Vevk:9f0QYJ4kHoQP6IK9Vevk","tlshash":"e06309c9734274a68262e0f6402f054b7236b469f54885bcb19cdce52c789a9237ff7c","first_seen":"2025-12-14T21:16:56.852219Z","last_seen":"2026-01-08T17:48:16.267476Z","times_seen":77,"resource_available":true,"data":null}},"time_used":1694,"timings":{"blocked":669,"dns":186,"connect":163,"send":0,"wait":337,"receive":2,"ssl":334},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/themes/hello-elementor/header-footer.min.css?ver=3.0.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/header-footer.min.css?ver=3.0.1 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Wed, 13 Nov 2024 09:25:35 GMT\r\netag: W/\"6734708f-1c9d\"\r\nexpires: Thu, 12 Nov 2026 16:39:34 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 3217677\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nOb7GJWjYxIZV4go8gXsicSehyHAzvDuhQs%2FSL9Zl1GDNU%2BBXXOomLgCnKsnN%2BBoktzJeYSGJmn%2FBvGPWbcTUNfxhqHoYta%2BYNm4qw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee3b0a56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7325,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7323), with no line terminators","md5":"4f6608672aae4899d264369dd0c580d9","sha1":"c4b0007b7f9377cd9d7c6b8106dffedaa03d1610","sha256":"97a09cb2af7d4406f6163874dad15c607d571749611d00890d47143495a0a617","sha512":"71269b46a4c18fb845dc411d6de352b8f3ed0bf320e05c4873209b18298beee451975d5108c55a1249f6e37e1227b0b3e4c1de4fcfe85d9dcabf608f5ae39a5f","ssdeep":"96:EfTvO5c2yhjFobxStP53m8yPoTZFo5jJxzy4vA3eCiwtzG/4vo3otubEm+B1Yz:3/otJtFo5jLLx+zI4vdud","tlshash":"fae1cf66f8f2357813338623a7e147ae50bac00dd90babf561eac31b05db44217a7f59","first_seen":"2023-12-28T03:57:54Z","last_seen":"2026-05-28T07:04:17.315172Z","times_seen":5104,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loijtoottuleringv.info/redirect?tid=1230072\u0026file=Watch_Live","fqdn":"loijtoottuleringv.info","domain":"loijtoottuleringv.info","tld":"info"},"ip":{"addr":"65.9.46.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://embedsports.top/ad.html","date":"2025-12-19T22:27:30.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loijtoottuleringv.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sat, 28 Jun 2025 00:00:00 GMT","end":"Mon, 27 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"99:4C:44:30:D5:21:41:F6:46:9C:39:06:D4:04:06:EE:21:58:C6:80","sha256":"18:F4:D4:80:C9:A9:FD:D7:5B:B4:4C:81:21:AB:31:FA:7A:1C:C1:82:6D:0A:C1:33:1B:4C:CE:C2:4F:92:85:5A"}}},"request":{"raw":"GET /redirect?tid=1230072\u0026file=Watch_Live HTTP/1.1\r\nHost: loijtoottuleringv.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embedsports.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 251\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nset-cookie: csu=ec60de3d-6998-41ab-86a6-9ea04f55df7b\r\nreferrer-policy: no-referrer\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 af0c3fbc11dbd0b6ca811448514b3186.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: cAxk7xTqPzENCKRIW88apU4n5HtaGvbqTKDbV-VVp5kk-oaGdjwtcA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":296,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"242aca4891726d872d09d7b32cc90fdb","sha1":"46fe31b7f9d7434589f024ea1a2efdbdd7095d37","sha256":"76af3bc69a6ce18628ad6d2e07cd019284a18d878753561f0a10593ce6eed110","sha512":"c440580c26a68a7271551233c59ef91035ec1b33a0db027b028983c88ec6e4524b4e478db0fdcbea922e435183bae5cd8b37696dccfe22976aa81f8a54eb28b7","ssdeep":"","tlshash":"b1e02bcf0c0198045e5000f2ac75bb4c20c7a6b9a1a4d844e0d1943739a5bdb9983bbe","first_seen":"2025-12-19T22:28:12.528697Z","last_seen":"2025-12-19T22:28:12.528697Z","times_seen":1,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":54,"dns":1,"connect":10,"send":0,"wait":494,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/themes/hello-elementor/theme.min.css?ver=3.0.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/theme.min.css?ver=3.0.1 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Wed, 13 Nov 2024 09:25:35 GMT\r\netag: W/\"6734708f-140b\"\r\nexpires: Thu, 12 Nov 2026 16:39:34 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 3217677\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E67n72UCLJ8dbTPkKFJknZ82OpMTZc6WCyLotsV0f3N4DDnNrYRmy2llBV1PjF3qzfQDOmFDPJrQtyWXn9bFRfCRn7I2FrA8AH6AHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee3b0856a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5131,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5127), with no line terminators","md5":"08fae0e9f8ce7e1cc244d6957a0fc71c","sha1":"958fbf4f8b318e39612dd25eefae43c006769883","sha256":"30c2e510f9fac929eeab0ea915d80904a4e72b22eb8612dd8c83c7dfb71862e0","sha512":"e8f69bb51f6caf9ab132b1be8f6ee3248c80dd74e47823c17ce4c1a14b289bdb2c2ac19035309724e3f8f53a2647b3204f8dc83ae85081e9069275fcac7ae4e3","ssdeep":"96:5ElyBGxT+vAeTzwKbFudzJGW3tCgcMNl3MNM1MNIXMNd8MN7zMNbKD:5ZBGmTNbch8KCgR5A","tlshash":"76b1757ef8d1307c593f9b06fac65b8d2068871ad3530ae9eb99db1a819e710781334d","first_seen":"2023-12-28T03:57:54Z","last_seen":"2026-05-28T07:04:17.344221Z","times_seen":4443,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Nov 2024 07:57:11 GMT\r\netag: W/\"6729cfd7-2fa6\"\r\nexpires: Sun, 22 Nov 2026 03:23:11 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 2401460\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mjvpP53dW9fo6wOvenMUSgyCgxp%2FVbOmfqwfYQ1PsPwrmxeCsutc7t6HR8WlfkkuFrzfEdK3hkC79cknB%2BNEkwVk37OyAzPiAYGPCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee5b3856a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12198,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12198), with no line terminators","md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-05-28T17:08:06.243945Z","times_seen":69501,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.chatango.com/js/gz/r1214250536/CommonUIModule.js","fqdn":"st.chatango.com","domain":"chatango.com","tld":"com"},"ip":{"addr":"208.93.230.18","port":443,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://st.chatango.com/h5/gz/r1214250536/id.html","date":"2025-12-19T22:27:32.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.chatango.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 15 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F3:69:E1:D0:F3:D1:74:D0:DA:D5:22:F8:D3:1E:06:08:AD:10:C4:11","sha256":"09:28:F7:57:15:FC:10:13:9B:36:F1:1C:C5:1D:EE:8C:45:0E:F5:7B:37:E3:7C:84:D3:8B:89:EE:9E:19:0E:20"}}},"request":{"raw":"GET /js/gz/r1214250536/CommonUIModule.js HTTP/1.1\r\nHost: st.chatango.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://st.chatango.com/h5/gz/r1214250536/id.html\r\nCookie: session_id=6202699929308226\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 19 Dec 2025 22:27:32 GMT\r\nContent-Type: application/x-javascript\r\nContent-Length: 7614\r\nLast-Modified: Sun, 14 Dec 2025 13:40:23 GMT\r\nConnection: keep-alive\r\nETag: \"693ebe47-1dbe\"\r\nExpires: Sat, 19 Dec 2026 22:27:32 GMT\r\nCache-Control: max-age=31536000\r\nContent-Encoding: gzip\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21140,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1121)","md5":"27543eb3d80d69bdb014f5a3b4f19963","sha1":"7f8b4b6cdde77f63c0df6676c19a11c480ac90aa","sha256":"9d7bf2516c34273d8809fae0fecf01119b54be83feaf0759fed7116f6d36406b","sha512":"25711f8c535d94df7baeb284847d78c637b6f5c02538e627d35eb07544a055d6c700458853ec9d3d9244b4b35462eab3822901ad02b70326776e4ce97859a5a5","ssdeep":"384:l/YCCywYyufacPsKZOyNxMF0QIZP5qxP5qvCfZdi1jN:N9facPsKZ5xWQHeCtN","tlshash":"3192085bb2623167e262f0f4047f411a1637a549a89582ac349eede45ebdc2c3377f38","first_seen":"2025-09-20T18:59:54.733769Z","last_seen":"2026-04-05T10:10:49.538656Z","times_seen":222,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/chunks/main-app-7467b200585c5dbe.js","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","date":"2025-12-19T22:27:32.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripquestapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 14:50:44 GMT","end":"Mon, 26 Jan 2026 15:49:21 GMT"},"fingerprint":{"sha1":"BE:D1:5B:10:14:EE:08:0F:B0:23:46:F9:DA:47:B6:80:49:37:FF:78","sha256":"F1:96:83:66:9D:CE:6B:B0:DF:67:01:9A:55:C3:4F:B8:E2:E5:FD:AD:58:1E:4A:32:39:01:45:12:89:08:21:3C"}}},"request":{"raw":"GET /_next/static/chunks/main-app-7467b200585c5dbe.js HTTP/1.1\r\nHost: www.tripquestapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 08 May 2025 08:55:19 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ayl95cVPrIcv5qcKoMSdTeBvNQzJEr8Qqf0i6WgBvV7QRnHOaFxFfJXCiutsWYEEN5G4DtjAt3fvSasxv7i5v0EqiC50IXospf8EYFXSTNLRdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b0a53ecebfc0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":463,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (463), with no line terminators","md5":"030cbe6c53b09f53c8584e751e849141","sha1":"b025dee71d5d565c60338dfef2cce6fc071c7110","sha256":"87de38b9038769af2cca6d11420825aae2aca3c70138c42fd0a21a175721a8b6","sha512":"071ca258cd0831d22c43f77583d11cebfb33e54115f08837e70319c3290890c62078e8550f7a0d6c1787be10827c0ac4411379cface094b3ece3d67465a7a657","ssdeep":"","tlshash":"29f0309a4f0cf42f1c266e24fe936ce2285f4535202b4e603901eea12c27facd2a1419","first_seen":"2025-06-17T05:49:33.67305Z","last_seen":"2026-04-04T19:07:32.188429Z","times_seen":118,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loijtoottuleringv.info/redirect?tid=1230072\u0026ref=Watch_Live","fqdn":"loijtoottuleringv.info","domain":"loijtoottuleringv.info","tld":"info"},"ip":{"addr":"65.9.46.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://embedsports.top/ad.html","date":"2025-12-19T22:27:30.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loijtoottuleringv.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sat, 28 Jun 2025 00:00:00 GMT","end":"Mon, 27 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"99:4C:44:30:D5:21:41:F6:46:9C:39:06:D4:04:06:EE:21:58:C6:80","sha256":"18:F4:D4:80:C9:A9:FD:D7:5B:B4:4C:81:21:AB:31:FA:7A:1C:C1:82:6D:0A:C1:33:1B:4C:CE:C2:4F:92:85:5A"}}},"request":{"raw":"GET /redirect?tid=1230072\u0026ref=Watch_Live HTTP/1.1\r\nHost: loijtoottuleringv.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embedsports.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 247\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nset-cookie: csu=e470f8a4-b56d-4afb-b32d-33186d4cdca4\r\nreferrer-policy: no-referrer\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 af0c3fbc11dbd0b6ca811448514b3186.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: wBPNN4g1jxKPXdR9tc0_cqcwXQ4EGumknOcnlVklm3ZvnJGaXZv_eQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":289,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"25494ba0c9e9a8906110eb20e8288bb8","sha1":"353ab8f56c6cea3af473729dcc221380a73194e5","sha256":"6aef172e39110cfa01b7867166ff51c755fd7ca77458d1d5b35512781eb36e78","sha512":"9545b7d2e489bada13484ceca3fc7c3d185b52b5ae2ae858d58fdf77da77eee7acf7a147af5b5421bded3043b9dd04037ff5204ae3fc4b3c607166553af307a7","ssdeep":"","tlshash":"35d0c2cb08016844266010b5ac6673082087b3aa6299c84594c0c93365a47eb8986aae","first_seen":"2025-12-19T22:28:12.53835Z","last_seen":"2025-12-19T22:28:12.53835Z","times_seen":1,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":55,"dns":0,"connect":14,"send":0,"wait":492,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/themes/hello-elementor/style.min.css?ver=3.0.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/style.min.css?ver=3.0.1 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Wed, 13 Nov 2024 09:25:35 GMT\r\netag: W/\"6734708f-167c\"\r\nexpires: Tue, 24 Nov 2026 19:13:42 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 2171629\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aNW15UkRm%2FVSJhEY52VtJ9i3MHzbgwHIcwEgf2cg7AXhDB7K9SO45YE8n32O%2BtGZqZq6Nxm9plZzjFM1XZlLVRJqg5U2VoOecRnV2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee2b0456a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5756,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5756), with no line terminators","md5":"5be56bc9e617084e1cbb84c994912fc3","sha1":"a3adca593d4ec4afb41e32d073405610ae37eef7","sha256":"3c3c0ebe37e4fd4187131a0a8d039064a9014215c4b83199d909e7e0b2d7f450","sha512":"091a8004a7773d77faebd736d6626e5bc68609a366dc8377163b5bb96a87a8ea7b5c25a8eff9cabb17664a1e313769393429b9e6cb7ad3e0e58a810b94b2ef7f","ssdeep":"96:vSpsvXYXqXXXNjSa1I4pIG3PCZBG9Hzkoe3wuFeQWe0O4HClZ6wB2t8lj:v4sfoyHNe66sKZBG9HO3wEXYodtj","tlshash":"39c16363971031497673c8393ad17e943a216211c8336af4f426d9fccbce4675a29bae","first_seen":"2023-10-26T02:25:18Z","last_seen":"2026-05-28T07:04:17.279581Z","times_seen":6962,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=8789876781696250658\u0026utm_source=admaven\u0026utm_term=1045621\u0026campaign_id=AM_1045621","date":"2025-12-19T22:27:32.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\netag: W/\"6482bd64-3509\"\r\nexpires: Thu, 10 Dec 2026 00:03:18 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 858253\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FWTMBU%2Bi3sPCYpy2x17wexFts1DWACQ96w1GLXWVOAKkJjJheJK4HNJYrsqos2ut8kOxb0T4AaK6R6UmICXed2GOp%2FstbvlnGIy3ig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee5b4a56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-28T17:38:01.730146Z","times_seen":803394,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fedoq.com/401/10323858?oo=1\u0026sw_version=v1.770.0-s\u0026oaid=0802a4bf2c4d419afab8cc6e4ebb3e95\u0026st=true","fqdn":"fedoq.com","domain":"fedoq.com","tld":"com"},"ip":{"addr":"139.45.197.116","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://st.chatango.com/h5/gz/r1214250536/id.html","date":"2025-12-19T22:27:34.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fedoq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 06:47:15 GMT","end":"Tue, 06 Jan 2026 06:47:14 GMT"},"fingerprint":{"sha1":"03:2C:7B:90:6A:BD:97:D0:29:90:9D:F5:70:4C:B1:30:E7:4B:27:AF","sha256":"BA:DB:C6:2F:13:23:48:EA:67:13:C1:7F:06:D9:45:AC:12:8F:04:F1:F7:3F:D4:78:48:E3:2D:DD:C2:5F:6D:92"}}},"request":{"raw":"POST /401/10323858?oo=1\u0026sw_version=v1.770.0-s\u0026oaid=0802a4bf2c4d419afab8cc6e4ebb3e95\u0026st=true HTTP/1.1\r\nHost: fedoq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3489\r\nOrigin: https://st.chatango.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://st.chatango.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3489,"data":"{\"sync\":\"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\",\"async\":\"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\",\"quality_options\":{\"hil\":1,\"jsp\":1,\"ng\":false,\"ix\":true,\"pt\":false,\"np\":false,\"nw\":true,\"nb\":true,\"sw\":1280,\"sh\":1024,\"pl\":\"https://st.chatango.com/h5/gz/r1214250536/id.html\",\"wy\":0,\"wx\":0,\"ww\":1280,\"wh\":1024,\"cw\":266,\"wiw\":266,\"wih\":500,\"wfc\":1,\"sah\":1024,\"navlng\":\"en-US\",\"drf\":\"https://sportytrend.net/\",\"wgl\":\"llvmpipe\",\"tb\":false,\"btz\":\"UTC\",\"bto\":0,\"pnt\":0,\"pnrc\":0,\"bml\":0,\"bmi\":false,\"vsbl\":true},\"client_hints\":{}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 19 Dec 2025 22:27:34 GMT\r\ncontent-type: application/json\r\nx-trace-id: 8a1ed05ad6fb3ef97007d9a7aab6471d\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://st.chatango.com\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=0802a4bf2c4d419afab8cc6e4ebb3e95; expires=Sat, 19 Dec 2026 22:27:34 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2161,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d3e6ec5b490c46fbfa7ec9abd53c2fc6","sha1":"5dc1ad1c665599c657b16f9b23307ec9cfd38aec","sha256":"0f2d34dca68a607d1feb504d3a73d9089f08b07d401dfc711c057f1ec1b8a3a6","sha512":"06cf204bb892c9b619874bb2211aca2d7f79f8e98339c9a4d22f169397c395d07f1406a81d0eeece51e2a6afa93323d737a9c2ae5687bed88ae58d407bcae7ad","ssdeep":"","tlshash":"5b4123088e18053a81ee5ab9dc0b6d471abd452f7a0c752eb7490d1770ebce503eb20b","first_seen":"2025-12-19T22:28:12.542544Z","last_seen":"2025-12-19T22:28:12.542544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":73,"dns":15,"connect":26,"send":0,"wait":29,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loijtoottuleringv.info/redirect?tid=1229910\u0026ref=Watch_Live","fqdn":"loijtoottuleringv.info","domain":"loijtoottuleringv.info","tld":"info"},"ip":{"addr":"65.9.46.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://embedsports.top/ad.html","date":"2025-12-19T22:27:30.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loijtoottuleringv.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sat, 28 Jun 2025 00:00:00 GMT","end":"Mon, 27 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"99:4C:44:30:D5:21:41:F6:46:9C:39:06:D4:04:06:EE:21:58:C6:80","sha256":"18:F4:D4:80:C9:A9:FD:D7:5B:B4:4C:81:21:AB:31:FA:7A:1C:C1:82:6D:0A:C1:33:1B:4C:CE:C2:4F:92:85:5A"}}},"request":{"raw":"GET /redirect?tid=1229910\u0026ref=Watch_Live HTTP/1.1\r\nHost: loijtoottuleringv.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embedsports.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 256\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nset-cookie: csu=23e8cd0a-210d-4370-946b-2aaaeb49f1bb\r\nreferrer-policy: no-referrer\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 af0c3fbc11dbd0b6ca811448514b3186.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: Nn-z0OzSaegFd1-PHJeDMNBSZQQ0yqUSj_hBD6Dz7mQ5ucVS23V0pg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":304,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a813493a470d14e3221b2232c27a4114","sha1":"a6f3debc8912575b481cdc7f86e7ff330abfd12d","sha256":"e7b3795716490565abe9bd539f4c4c96b07e26469372b74f5a0498ea8fe04de1","sha512":"9b7098e2a8fcd6fdb7f28f6d271265e93407ece27ec2368a784d02737b02f3a2402efc11adcdfe4885cda81f0d3dbe187a06ea81ca31176a0228ebf918767742","ssdeep":"","tlshash":"4ce0e7cb0c41158416201670dca2738820536362f1d0ccc0d1d0c5b735e0beb89c3ee9","first_seen":"2025-12-19T22:28:12.543749Z","last_seen":"2025-12-19T22:28:12.543749Z","times_seen":1,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":59,"dns":1,"connect":9,"send":0,"wait":504,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.17.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.17.1 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Nov 2023 11:26:35 GMT\r\netag: W/\"6554aaeb-8b5a\"\r\nexpires: Sun, 22 Nov 2026 03:23:11 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 2401460\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T3x7QG86bDkeCZOm0lYU7wUGuu3ypNg%2Bwba62A3oVOYRwaisr2vc2jzhtB1BeuucFTmourHQT%2FF5KKrPvtviuWPQ3LAs%2BY9SLvJVKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee5b3d56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35674,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35630)","md5":"9769d1d76fdce5a776506f7a4a4f9183","sha1":"470c161f30226dc142685e233309009496842e11","sha256":"60a6db28503da0b2c2f4e39da485b7649425cd481da5dee9ff33f6c68e9cb480","sha512":"88d90fe7f8a699a376f6d0667301e82bd5a0be23cd4b70b96a252d4272f6bbe1db5490c280eb245a04c5d9fcc355db1dc4e6a6256bf45fbddc2be838801cc97a","ssdeep":"768:Znr9p7+adwdddrdDdVdydOdad1dpdLdFdVdJf2qMnODVwdhd8dHdLdz0Cn9jXUdv:93qaC/dRrIM4D7lv/3Zw7Gd510Cn9jXk","tlshash":"e2f2b76071aaca7841cfc4abf423268fa7219c9cb413f4d776fd8d826564e876390771","first_seen":"2023-11-01T17:10:30Z","last_seen":"2026-05-27T13:00:04.134925Z","times_seen":1745,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dd133.com/vignette.min.js","fqdn":"dd133.com","domain":"dd133.com","tld":"com"},"ip":{"addr":"172.67.170.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://st.chatango.com/h5/gz/r1214250536/id.html","date":"2025-12-19T22:27:33.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dd133.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 15:31:49 GMT","end":"Thu, 12 Feb 2026 16:30:19 GMT"},"fingerprint":{"sha1":"BD:50:A6:68:EB:06:CF:FC:D3:7E:ED:EE:CD:AE:1B:C7:0E:66:66:88","sha256":"DC:A1:E1:CA:ED:03:9A:C2:7D:F7:35:52:28:52:04:68:16:64:0D:12:E2:AA:26:CC:EE:E1:6E:5A:85:FC:4E:11"}}},"request":{"raw":"GET /vignette.min.js HTTP/1.1\r\nHost: dd133.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://st.chatango.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 1389\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 19 Dec 2025 22:04:23 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YH5j3lUT3443oGGX7E5PY7IUfVkfDM6AjLFV3qUw%2BGmRhZ3mk3Oo2PNWgkPqTH8EmH45mCpdI7Bf8nGBXgzjnlTnBxjaeL0%3D\"}]}\r\ncf-ray: 9b0a53f5785b0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167887,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8f622d9ca1af21251c703b33e4928ea1","sha1":"819961a8e0aade299c61a5baaf9b90eca4c1a2b9","sha256":"dc027532dd484828352656b2945591d0ce6267005b1817c1fcbb8911845489b2","sha512":"b9b2c0a702c0cf84ab95e39969a9edf543ce63508d1bda2a498b2027e8c3ff858d4a12b8baef5809d3d0e064bdd511a2bf3b3205f73ef41d145e791edb9799cd","ssdeep":"3072:FPV6Wtgjm0jmyFIJHAFIrD+rUXqEkVTAg4fAut6Aq6/2DRaTIJyk9hc2VzBnqM:VV6pjm0jmy6AsPXqE0hM676/2DRaMAkH","tlshash":"7ef3e988b192b1552d636534322fd14eb59bdb20584e4a80d0dae1b27f370afd377ee8","first_seen":"2025-12-12T19:09:03.181329Z","last_seen":"2026-01-12T03:14:27.296133Z","times_seen":116,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":63,"dns":38,"connect":1,"send":0,"wait":7,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=6e9491e0-6cff-480e-bdc3-1a6e2b267f39","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://st.chatango.com/h5/gz/r1214250536/id.html","date":"2025-12-19T22:27:35.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 11 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"23:5D:23:03:7B:8D:47:5A:E9:9C:E7:E0:5C:7E:E6:4F:A2:DC:B6:D0","sha256":"9E:F7:13:45:55:C0:E9:09:A9:42:CC:D1:27:57:55:66:A1:63:5C:CB:EA:38:76:AA:6D:AB:5A:02:42:09:5D:46"}}},"request":{"raw":"POST /async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=6e9491e0-6cff-480e-bdc3-1a6e2b267f39 HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 452\r\nOrigin: https://st.chatango.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://st.chatango.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":452,"data":"L\u001b[_\u001e\u0000\u001c\u0006*\u000b^\u001b\u0018T\u0004HT[^\u0016\f\fC\u001b\tMX\r\n7\u0017\u0003LKC\tMH\r\u0003\u0013F\t\u0004Y^\u0011\fJH[\u000b\u001d\u0003J\u000e\u0010W\u00065\u001a\u0002\u001fQLW\u0007\u0015\u0011R\u0013\u0017\u001a\u0000\u0014\u0010_\u0000\u0017^\u003e\u001e\u0007\u0006\u0017\u0016T]\u001b\u001b_S\f\u0001\u0015JOREE[Z\r\u0003\u000b\u0005\u0006k\u0007\t\u0015\u0003\u0011\u0007\u001e\u0006@YC[^D@\t\u0007^C_\u0010\u0006\n@U\f\u0002\u0001W\u0006\u001a\\B\u0003Y\u000bH\u0000\u0002[\bI^\u0016\u000f\u000bQP__\u001b\u0010\u001c7\u001c\u0006\u001aS[\u001bMH\u001a\u0019\u0013R\b\u0004Tf@Y\u000f\u0016\u001a\r*\u000b\\KC\u001bPZ]YA\f[U\u0015\u0015\u0011W\u001e\u0012\u001c\u001a\u0001\u000bK\f\u000bf\b\u000eLQP\u0016BOTX^F\u001b\r\u001e\u0006*\u000b\\KC\u001bCFL\b\u0007G\u001a\u0002ZfZR%U[RW\u0012M\u001a\u0011R\b\u0004LGPW\u001b\u001eCV^i\u0013\u0000\u0026ZWX\u001aKU\u001b\u0002\u0006\u0007\b\u0019k\u0007\t\u0015\u0003\u0011\u0004JW\t]XSI\u0002\u0017I\u0015\u0000^]\n\fLA\u0015Z\\E\u000eFCJWN\u001a\u0004\u001cM\t\u0005\nIH\u0016\r\fTQV\u001b\u0010\u0017T\u001c\u0014\u0005\u001aE[K\u003e\u001f\u0007\u000fP\u000eL[R\u0000\u0007\u000fK\u0001IEC\u0001^\u000fT\rYZ\u000bF\u0010P\r^\u001a\bR\u0000\u001fV\u001bZCU^Z@\u001bMH\u0001\n-]\nO\r\u001b\u0003\u000eJV\u0018\\\u0017\u0004\n\nM]U[W\n\u0014U\fUTZ\u0005SN\u0001\u001b\nF\u0007\u0001\\[\u0015C\u000b\n\u000f\u001b@\u0007\u0002YX_i\u0013\u0000\nJO9e\u0014"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Fri, 19 Dec 2025 22:27:35 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://st.chatango.com\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-28T17:37:38.968108Z","times_seen":15830666,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":89,"dns":3,"connect":26,"send":0,"wait":26,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/firefox-before-you-continue/?clickid=8789876781696250658\u0026utm_source=admaven\u0026utm_term=1045621\u0026campaign_id=AM_1045621","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://embedsports.top/ad.html","date":"2025-12-19T22:27:31.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /firefox-before-you-continue/?clickid=8789876781696250658\u0026utm_source=admaven\u0026utm_term=1045621\u0026campaign_id=AM_1045621 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nlink: \u003chttp://dreamytabs.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttp://dreamytabs.com/wp-json/wp/v2/pages/1179\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttp://dreamytabs.com/?p=1179\u003e; rel=shortlink\r\nreferrer-policy: no-referrer-when-downgrade\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rjIMReBelLIdbXjwsu6G8MYl8hVVPuUGX4CIvMfkHfIGTKxx7X0Xfw%2FeaZuhXD2s0uBlojLLv7sOdSQlxcQ8nw0O%2BhELHuuvOrQnSw%3D%3D\"}]}\r\ncontent-security-policy: upgrade-insecure-requests\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9b0a53ea4c32712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"W3 Total Cache","description":"W3 Total Cache (W3TC) improves the SEO and increases website performance and reducing load times by leveraging features like content delivery network (CDN) integration and the latest best practices.","website":"https://www.w3-edge.com/wordpress-plugins/w3-total-cache","common_platform_enumeration":"","icon":"W3 Total Cache.png","categories":["Caching","WordPress plugins"]},{"name":"Elementor:3.19.1","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.6.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":32885,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856), with CRLF, LF line terminators","md5":"77c3ed44f7332f42c112076f797d4c00","sha1":"1d561299ab533fc1b6072d46ec3702b2eae09a2d","sha256":"8c6e03e9388a82c5e73d3adb7419d22e9062cfa1474707ff0da6f10de08752a6","sha512":"a581b379bdc929337fb94ee01cb0b57472e4b41acc489f509a0e7ed0155c461bfa0d00d653aa40eca7cdc22f7732fb7283b6effa28de6d9d2c9cd8495af989f6","ssdeep":"768:K0jZdapzL6xBGEosVdjUYPW6N9vWm9ei6NCyh:japv6xBGEosVdjUYPW0vWmL6NCyh","tlshash":"77e2d633b42a04663b5f97aed053331de4d88aa3d640d7f5b4fda02856b0df222e3659","first_seen":"2025-12-19T22:28:12.547016Z","last_seen":"2025-12-19T22:28:12.547016Z","times_seen":1,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":108,"dns":0,"connect":1,"send":0,"wait":345,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/chunks/898-60c72a68db37911e.js","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","date":"2025-12-19T22:27:32.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripquestapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 14:50:44 GMT","end":"Mon, 26 Jan 2026 15:49:21 GMT"},"fingerprint":{"sha1":"BE:D1:5B:10:14:EE:08:0F:B0:23:46:F9:DA:47:B6:80:49:37:FF:78","sha256":"F1:96:83:66:9D:CE:6B:B0:DF:67:01:9A:55:C3:4F:B8:E2:E5:FD:AD:58:1E:4A:32:39:01:45:12:89:08:21:3C"}}},"request":{"raw":"GET /_next/static/chunks/898-60c72a68db37911e.js HTTP/1.1\r\nHost: www.tripquestapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 08 May 2025 08:55:19 GMT\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=14400\r\nage: 184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gcbJaFrisGszwKF8NYqLHF4YLIxl%2Fzw0GCtAdhghQtA0CCvUHPpcPcMssydZhCE1gSJwq7QqPyC%2FjI%2FHryAH7LFL%2BmbtfAlmb4bN63HFlmJBVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b0a53ecebfb0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200767,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ef0be5e9a3dcaa5108830bd0aa3c6277","sha1":"8dafe375559c53fd0c3c4385fa66dba145040aef","sha256":"50888faed5af05401cc7e8a95d49769450264699908eaade39814d7e90dd451f","sha512":"c31130b960646e7a65ed2dea0ed79b9ea639a63f60f9327e3db6fa117f3d898f51b8dbfeba3ad56dc7a09b825c01a4b07ae0af769134835c5f78247739eb8ec8","ssdeep":"1536:Ug5gIJct9xrxIP7hL5JJ/KcMhpa9dEwJMxsShgp9JnSGEScPveIBXIhnKb:hc9+VLflM09WwJMxsSRPveuXIq","tlshash":"2a14e9f676d0f8a107a740e5843b4006f3395c7a146e74a0a3e1ccda75644eee1b7faa","first_seen":"2025-06-17T05:49:33.671882Z","last_seen":"2026-04-11T21:10:00.742721Z","times_seen":130,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/js-extensions-plugin/js/functions.js?ver=6.6.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=8789876781696250658\u0026utm_source=admaven\u0026utm_term=1045621\u0026campaign_id=AM_1045621","date":"2025-12-19T22:27:32.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/plugins/js-extensions-plugin/js/functions.js?ver=6.6.1 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Sun, 19 Nov 2023 09:07:02 GMT\r\netag: W/\"6559d036-e11\"\r\nexpires: Wed, 18 Nov 2026 22:49:37 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 2677074\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fHIOQl%2BU9cA%2BfJm8twq2fPBPUDOWfj%2BhMWCjsD42m6iNS%2FfidcEkQBgvifq6yNf6vMRB1oQQ0vw8elxyCn%2Fk7uxY4P%2FZnhpl5qon0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee5b3e56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3601,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a0ce4d9bff07bf24421ad8d6991193db","sha1":"54672432fa469b7b566cb3125e1779b07fc8a613","sha256":"9701065a77191b3a4ced86664ef4599ac455b2436f780c2e6d544cd190d3cfc0","sha512":"578f6c70bae67bff28f06c4926aecbb05a7eb6b62106d582ee4750a1593de72647b6a4c61cc2c19e0c57373b5c41e558a3f12d828bdf9a55fe2fc90a12d4daf3","ssdeep":"","tlshash":"1d71100828f7943c069765fc5b2bd7a03a2160177584ce587d4c5b10af56c2fcee5eae","first_seen":"2024-07-14T22:27:13Z","last_seen":"2025-12-27T17:37:15.607577Z","times_seen":66,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/wp-content/uploads/2025/12/cropped-image-32x32.png","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/","date":"2025-12-19T22:27:30.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sportytrend.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 14:59:40 GMT","end":"Sat, 14 Feb 2026 15:53:06 GMT"},"fingerprint":{"sha1":"31:D0:D8:8A:4D:E3:BF:51:4A:83:51:AD:D4:9F:CA:CF:EA:FF:D6:79","sha256":"BF:B9:B8:7D:88:1F:DD:8C:90:2E:AA:A2:8B:32:66:A1:A8:DD:34:18:95:0C:5F:8B:36:94:31:F6:A7:07:4E:DA"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/cropped-image-32x32.png HTTP/1.1\r\nHost: sportytrend.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/\r\nCookie: wp-dark-mode-device=light\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 689\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 22:27:30 GMT\r\netag: \"2b1-692f59ef-223a8c;;;\"\r\nlast-modified: Tue, 02 Dec 2025 21:28:15 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gOUVx2%2BO9BJW5sfaZVcsxK2BPR8UHmat7MdXtA6UvmvUyrTS6BU7fTo8Ks6pkNcW53UX3Z3jCvvOEtP3XGFDvFju6IhWg5OblxVo8T8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53e28f5e56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":689,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"a8ae6831b68bd08b7fa7a33fc315ca9f","sha1":"53b09e0b01c26cc0717d771651444e6817d5bdd8","sha256":"bd3a8bbac5f7fddff5fdc0ab02d9f3755e12f83725776b6de76bc2f6eaaa6736","sha512":"7ad977ace34466e649fd51eb87410e08dadafad36ef48b17a6dc7e45d0f86a3fda4ec7d0c90c4de5be297c31854a9eb1f8eb4fbc05b55984586156c005ade7cc","ssdeep":"","tlshash":"100183c36632fe6ed70d2b03048550b2d864de1f239828757a41e70e830eb44a9c7f1c","first_seen":"2025-12-19T22:28:12.549366Z","last_seen":"2025-12-19T22:28:12.549366Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"sportytrend.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/chunks/474-8498b525963453b1.js","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","date":"2025-12-19T22:27:32.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripquestapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 14:50:44 GMT","end":"Mon, 26 Jan 2026 15:49:21 GMT"},"fingerprint":{"sha1":"BE:D1:5B:10:14:EE:08:0F:B0:23:46:F9:DA:47:B6:80:49:37:FF:78","sha256":"F1:96:83:66:9D:CE:6B:B0:DF:67:01:9A:55:C3:4F:B8:E2:E5:FD:AD:58:1E:4A:32:39:01:45:12:89:08:21:3C"}}},"request":{"raw":"GET /_next/static/chunks/474-8498b525963453b1.js HTTP/1.1\r\nHost: www.tripquestapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 08 May 2025 08:55:19 GMT\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=14400\r\nage: 184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LNCAGQ2qNV4xU3ztQAL%2BTotGQK8g0xxtUtnHhDXy3McQiCBJYkE%2FYmeKnYjeBmbh4ihcEFKOsNoPoc1n9xTTMnB9WSWCEzfLzU4Qt36phJAsSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b0a53ecebfd0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10280,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10280), with no line terminators","md5":"24bf883d59be0dbd3eccaff6d29d631c","sha1":"209b7639a5ddbb82bf316ec348fc4bdaf5f0d54a","sha256":"8d185776ea58b58f59222826aaf25079b6d6f4bb094c5b46e439454f2de4765e","sha512":"de55b58ac12a233c943095d9fd413bbe840cdb1b4bb86ef5e7456dfc6e7876d6491962ff79f23ff28509b4029f767b94600e64ed66a964488b7e53a224568ae9","ssdeep":"192:YUHR7+DmSA2b13976QfAOHW8lZKmNzGd2KL6ImtY1wOc3YXwV9GWlTcbl:YsWmSR3I0NzTbFIXwV9GWlTcB","tlshash":"0e22c8da71d1f8e283bb0061443b100bb27a1d79285e7158f7b49cebb9b046da1a2f5d","first_seen":"2025-06-17T05:49:33.674087Z","last_seen":"2026-04-12T19:13:08.235654Z","times_seen":132,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/chunks/app/layout-ca27d970411857d2.js","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","date":"2025-12-19T22:27:32.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripquestapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 14:50:44 GMT","end":"Mon, 26 Jan 2026 15:49:21 GMT"},"fingerprint":{"sha1":"BE:D1:5B:10:14:EE:08:0F:B0:23:46:F9:DA:47:B6:80:49:37:FF:78","sha256":"F1:96:83:66:9D:CE:6B:B0:DF:67:01:9A:55:C3:4F:B8:E2:E5:FD:AD:58:1E:4A:32:39:01:45:12:89:08:21:3C"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-ca27d970411857d2.js HTTP/1.1\r\nHost: www.tripquestapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 08 May 2025 08:55:19 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jORZZiTtoJpclDf0NPws6O0knaT7WhG23kLc1ZX12%2BCcVxT8HTEzQiBw1D86%2Bpv0qoCcmZRFHaXD3ist4ZtIjnn%2Brc5lWJHP5AuPr%2FQvvcuTwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b0a53ecec000b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5106,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5106), with no line terminators","md5":"da18a8c32014d39f385115986c339e8e","sha1":"3ce82cada462bcd818e160fa375ea3787e6d6994","sha256":"4813bbada6db9d33f390464e3710d94cf93e2b09baba0a0d1b8feaabe3aadaf2","sha512":"a78a5997c9559c96970d8c617bb4b9487edcb057565c91a92e0161c3d26086d330a6d1d94776ab9be3e4f1a78cafe52bb479fac51a4059ea5649df1e6f555f89","ssdeep":"96:iUGc+ejgaWLUzfv9Hn5G7ZaIyZpfQGUBT/XCzUBT+9GCxQi4tH9GCON6:iUGc+ejtWsfv9o7ZcpoGU9XCzU5sQi4t","tlshash":"0fb1a9b67bc8fd3b47564980947b85537d402d32101aa8c4a3fedce521a6eda88a1f4b","first_seen":"2025-08-12T21:09:16.667675Z","last_seen":"2025-12-22T12:53:20.503014Z","times_seen":7,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.19.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.19.1 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Nov 2024 07:57:09 GMT\r\netag: W/\"6729cfd5-4824\"\r\nexpires: Thu, 12 Nov 2026 16:39:34 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 3217677\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2FBOQ7uJiIZaFLOgk4lybIiMMwUQoDb2dgRv4b1QQ4VBPErhbtCwdjT%2FArIf3%2Fm0%2BkASo02hfNsPFUIuRpb7ljdMwCBaVyAyhPzZDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee4b1b56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18468,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10019)","md5":"4601ba55044413706c2022cb6c1c3d05","sha1":"5103ec2fbb389568ebf5cfe4fd721f3df2ff7aec","sha256":"fe513ef974b767510d0a2b9f1b4d3afa53185b89ab617c869e5e3d6db960192c","sha512":"8dab2d19378e34b40043621aac57b418e56486dcfebd1a5991be8a02ee6b071d07ec6bfd9408dea8ff0198995de9d42a46e66513d68b40b68056707e4e691e01","ssdeep":"384:FKJ30sBCwYe4oHjDl5fyLrHNck7Ige24YS5bqvcVV+:FKJ30sBCwYocYlm","tlshash":"c58269c9ee12104902a70373caca5e68c9388ec764325cfe7366544f0a51add73eba77","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-05-28T17:08:06.274954Z","times_seen":40277,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/css/5033cdc03a58380e.css","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","date":"2025-12-19T22:27:31.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripquestapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 14:50:44 GMT","end":"Mon, 26 Jan 2026 15:49:21 GMT"},"fingerprint":{"sha1":"BE:D1:5B:10:14:EE:08:0F:B0:23:46:F9:DA:47:B6:80:49:37:FF:78","sha256":"F1:96:83:66:9D:CE:6B:B0:DF:67:01:9A:55:C3:4F:B8:E2:E5:FD:AD:58:1E:4A:32:39:01:45:12:89:08:21:3C"}}},"request":{"raw":"GET /_next/static/css/5033cdc03a58380e.css HTTP/1.1\r\nHost: www.tripquestapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 08 May 2025 08:55:19 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kOWLDQ1dp561w%2B86EY%2BerHEIyvoLiYSk6CtDLId2LjjEnuaStWs8VflbeibQAAc45gzK5vK%2F8o044cbLIVWQ8mz04u7sh53anrmtwojFfG8OAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b0a53eccbe40b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7615,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7615), with no line terminators","md5":"80042a95f0d5bb11ff14f1dfd746902f","sha1":"cd4afccf0e594c6e9b8ee129dd4823da3a4ad598","sha256":"48789abee49af0128e266ba455ae6f8882ff7eaa1fb3015710c77b0495ada1a2","sha512":"12470f3ec8e57034f6ee9b9544634eb9732c7d3657a03a23ecc51a18cfd30ac1dcefb1f0fb0db1f653dcd19f9ddadf53fd01576e2e11e28793a43bae29a55315","ssdeep":"96:Trdk20HUsxYs2S/0NYCaNPEm+eHf+u9A7/fQaZHp67L:ndk24JxPHf+u94fXC","tlshash":"5cf1a666a760b43db96fe129e3d2e04cb244d403db6767f4e942561b85cb3e10a32ecd","first_seen":"2025-08-12T21:09:16.664989Z","last_seen":"2025-12-22T12:53:20.403333Z","times_seen":7,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/chunks/970-471fcb4faa5fd57a.js","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","date":"2025-12-19T22:27:32.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripquestapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 14:50:44 GMT","end":"Mon, 26 Jan 2026 15:49:21 GMT"},"fingerprint":{"sha1":"BE:D1:5B:10:14:EE:08:0F:B0:23:46:F9:DA:47:B6:80:49:37:FF:78","sha256":"F1:96:83:66:9D:CE:6B:B0:DF:67:01:9A:55:C3:4F:B8:E2:E5:FD:AD:58:1E:4A:32:39:01:45:12:89:08:21:3C"}}},"request":{"raw":"GET /_next/static/chunks/970-471fcb4faa5fd57a.js HTTP/1.1\r\nHost: www.tripquestapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 08 May 2025 08:55:19 GMT\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=14400\r\nage: 184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B1thY22RjXakbEAx16SYIPSm33YMydTD4GdH1t%2FnbK5AwRIT%2B7OdEJmyQpCDW0543P%2Fi8uoeUXmKEBs9dV1uU%2FkVAXQGwJJSrhk%2BlknNpDSHug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b0a53ecfc030b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13531,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13531), with no line terminators","md5":"6434b1c374a1b673c2d94bd6287b73ee","sha1":"2b015c34c7f0d2a38526ac899c61fe9fe0aa3288","sha256":"a8cf918f9dc573bf49a2bf490f6ac642ec1de4554bf55a8294dc04c9588354e5","sha512":"04eff6d6380a9414a65de1edcbf05451a93b1244a33a9c832317435f952adba3e30226b333779d7b8f95314e7585dbacac8f8ada0dd00d366f6049919cadf34a","ssdeep":"192:iKrdYcTZpYzm7y2BjTwwfQnd58IdMavNEz+66fRFxYiC4BMqCJ:is5Tn7njw1dD36yu46qQ","tlshash":"cd5209b73690fcd6278b80d5883f000df3655d76632ab04873a5ccd9a6e0595f1a2fba","first_seen":"2025-06-17T05:49:33.66444Z","last_seen":"2026-05-22T06:34:39.520484Z","times_seen":134,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/uploads/sites/165/elementor/css/post-1179.css?ver=1758582687","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/uploads/sites/165/elementor/css/post-1179.css?ver=1758582687 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Nov 2024 08:07:20 GMT\r\netag: W/\"6746d338-d82\"\r\nexpires: Fri, 04 Dec 2026 00:25:47 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1375304\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ycfrt5s2h%2BV61ElfKrNs3OwYtijRmhXVYxd9p2jQIYValoghR0WSvOltqMWvY%2B%2B20BLel1SEQ8TAndti1uJ6T2bcfSwm%2FfB%2FGMQkkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee3b1656a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3458,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3458), with no line terminators","md5":"2abbfd2b3f884ef81c8dd254d886a2da","sha1":"e04bbb4ba89b82f2cd45d6fdb6a72171b5c1607c","sha256":"9582e8d45457e69b757028205308276a63cd1b6a1e697de539237c3285b4dbda","sha512":"29757ae0e495105c5617864c4e04f8556dc81ad80ba667b6b912b6bdc4b29c30e468159cea28a6b398505ca827273d51dc5066c4a56c92f9f7b3a2c47338c240","ssdeep":"","tlshash":"0d6156103e536668762f811f9433b59c26248ccae53a3bd9e82171b7f4bec9533f1a49","first_seen":"2025-06-24T20:43:22.421308Z","last_seen":"2025-12-27T17:37:15.58469Z","times_seen":11,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fedoq.com/500/10323858?excludes=\u0026oaid=0802a4bf2c4d419afab8cc6e4ebb3e95\u0026tgp=\u0026of=true\u0026sw_version=v1.770.0-s\u0026dmn=dd133.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=266\u0026wiw=266\u0026wih=500\u0026wfc=2\u0026pl=https%3A%2F%2Fst.chatango.com%2Fh5%2Fgz%2Fr1214250536%2Fid.html\u0026drf=https%3A%2F%2Fsportytrend.net%2F\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=1\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"fedoq.com","domain":"fedoq.com","tld":"com"},"ip":{"addr":"139.45.197.116","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://st.chatango.com/h5/gz/r1214250536/id.html","date":"2025-12-19T22:27:35.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fedoq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 06:47:15 GMT","end":"Tue, 06 Jan 2026 06:47:14 GMT"},"fingerprint":{"sha1":"03:2C:7B:90:6A:BD:97:D0:29:90:9D:F5:70:4C:B1:30:E7:4B:27:AF","sha256":"BA:DB:C6:2F:13:23:48:EA:67:13:C1:7F:06:D9:45:AC:12:8F:04:F1:F7:3F:D4:78:48:E3:2D:DD:C2:5F:6D:92"}}},"request":{"raw":"OPTIONS /500/10323858?excludes=\u0026oaid=0802a4bf2c4d419afab8cc6e4ebb3e95\u0026tgp=\u0026of=true\u0026sw_version=v1.770.0-s\u0026dmn=dd133.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=266\u0026wiw=266\u0026wih=500\u0026wfc=2\u0026pl=https%3A%2F%2Fst.chatango.com%2Fh5%2Fgz%2Fr1214250536%2Fid.html\u0026drf=https%3A%2F%2Fsportytrend.net%2F\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=1\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: fedoq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://st.chatango.com/\r\nOrigin: https://st.chatango.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 19 Dec 2025 22:27:35 GMT\r\ncontent-length: 0\r\nallow: GET, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://st.chatango.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-28T17:37:38.968108Z","times_seen":15830666,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":59,"dns":0,"connect":26,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/css/9f9fa728a9e659c8.css","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","date":"2025-12-19T22:27:32.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripquestapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 14:50:44 GMT","end":"Mon, 26 Jan 2026 15:49:21 GMT"},"fingerprint":{"sha1":"BE:D1:5B:10:14:EE:08:0F:B0:23:46:F9:DA:47:B6:80:49:37:FF:78","sha256":"F1:96:83:66:9D:CE:6B:B0:DF:67:01:9A:55:C3:4F:B8:E2:E5:FD:AD:58:1E:4A:32:39:01:45:12:89:08:21:3C"}}},"request":{"raw":"GET /_next/static/css/9f9fa728a9e659c8.css HTTP/1.1\r\nHost: www.tripquestapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 08 May 2025 08:55:19 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6zFt0kwVV3lEmI%2B1aNnyBEkuwjr9vzQEiC3uJPDSm3nHwXc1Y9gn5k410B7Dp5%2BcFXHI%2FUTKki3fb1J5YMKPw7TBPCoVmh6SFS60tSUCTBLSjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b0a53ecdbe90b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1077,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1077), with no line terminators","md5":"0a8fdf597c7d5751b4f01b909577c14b","sha1":"f683d2439a3d94ef5568af18f354d85c1b8d61c0","sha256":"ca2dfbca48cc16e92b728a4491e90bf671a7d627e026b53f03e69aca539744e4","sha512":"d583a6f418c1e88854d7e64378eb14ecf062e502750377fc21a3e350b386b03829756b21656dff26019eb58a9fdad1afd52e0f2ea8bc7df3bb9b77f8a6540474","ssdeep":"","tlshash":"df11d53e652cf5259c7fb219548b250ff810b888ebfb91984e37471406a792e05b9c8f","first_seen":"2025-08-12T21:09:16.662649Z","last_seen":"2025-12-19T22:28:12.556015Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.19.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.19.1 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Nov 2024 07:57:09 GMT\r\netag: \"6729cfd5-1385\"\r\nexpires: Thu, 17 Dec 2026 02:50:33 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 243419\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2DluSEG983m%2BE%2FBRu0Jj8iYWA9Zx1P7a2HDq7VKx8xufrxpgX56cAV%2FhHx8wy5RWRgveB%2BOP35DnE%2FU4wzqaocDP9P0q9fhQUFoU9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee4b2156a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4997,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4957)","md5":"e340c7960b814d028961d597494aa566","sha1":"bb4ad494be7f93c6656cace97ec592654e9635cc","sha256":"a685d0414b485e26954f312392f12973a30582e220656d0abb815daa2e41ba9e","sha512":"4946ec14880a9613917033dfbcb1fc544c6acddd96f8b143fee0821b4c9845957c275029d75bea5bf510fa6ea3f8b81e6534e85d069bccd45b4d535eb15ab264","ssdeep":"96:BcsNt0jqf9fzgcf8FD7lCjNVobVDPkqflkxwvT8S2:WsNCjw9fsjFD6N4FPkyXgS2","tlshash":"56a142d41b90fc6735e135c9a11aa731752fc0333d1bb8c1fa22dced98e8a9187a9531","first_seen":"2024-02-05T23:13:54Z","last_seen":"2026-05-22T22:20:20.727867Z","times_seen":327,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b7510.com/5/9353294/?oo=1\u0026js_build=iclick-v1.1670.0\u0026userId=0802a4bf2c4d419afab8cc6e4ebb3e95\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=1","fqdn":"b7510.com","domain":"b7510.com","tld":"com"},"ip":{"addr":"139.45.197.115","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://st.chatango.com/h5/gz/r1214250536/id.html","date":"2025-12-19T22:27:34.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b7510.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 05:16:54 GMT","end":"Mon, 19 Jan 2026 05:16:53 GMT"},"fingerprint":{"sha1":"D4:41:24:3C:CF:C7:8C:56:F0:95:50:DF:63:59:AA:07:08:41:B7:48","sha256":"DF:09:31:9E:FB:30:04:94:33:7D:77:61:1E:14:8B:26:7D:32:A7:F7:3C:CC:ED:BD:06:FE:FC:B9:E7:52:70:5E"}}},"request":{"raw":"POST /5/9353294/?oo=1\u0026js_build=iclick-v1.1670.0\u0026userId=0802a4bf2c4d419afab8cc6e4ebb3e95\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=1 HTTP/1.1\r\nHost: b7510.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3485\r\nOrigin: https://st.chatango.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://st.chatango.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3485,"data":"{\"sync\":\"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\",\"async\":\"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\",\"quality_options\":{\"hil\":1,\"jsp\":1,\"ng\":false,\"ix\":true,\"pt\":false,\"np\":false,\"nw\":true,\"nb\":true,\"sw\":1280,\"sh\":1024,\"pl\":\"https://st.chatango.com/h5/gz/r1214250536/id.html\",\"wy\":0,\"wx\":0,\"ww\":1280,\"wh\":1024,\"cw\":266,\"wiw\":266,\"wih\":500,\"wfc\":1,\"sah\":1024,\"navlng\":\"en-US\",\"drf\":\"https://sportytrend.net/\",\"wgl\":\"llvmpipe\",\"tb\":false,\"btz\":\"UTC\",\"bto\":0,\"pnt\":0,\"pnrc\":0,\"bml\":0,\"bmi\":false,\"vsbl\":true},\"client_hints\":{}}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Fri, 19 Dec 2025 22:27:35 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://st.chatango.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-28T17:37:38.968108Z","times_seen":15830666,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":120,"dns":55,"connect":26,"send":0,"wait":29,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.19.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.19.1 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Nov 2024 07:57:06 GMT\r\netag: \"6729cfd2-eb0d\"\r\nexpires: Thu, 17 Dec 2026 02:50:33 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 243419\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8C7g%2BULELQ1eWXDVdlydwNAwWFUCouoZWwW9%2FQEcP%2F4NNWDhb%2FkQ5Dt9ywJzsNc7Ju9ejVrJJWchmU2fUg4R9EyCZkiTLDZNI1b4Qw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee4b2a56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60173,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60132)","md5":"8deaa5cfa493aa543f9b8f424ad9cc68","sha1":"dffc161bdb78e1130dacd3de7d8b9d7dd24f0fc0","sha256":"19757edeeb6d1e52f7253e4a277979ee6fcaa44ae0d5eee7b6c79d7beec951b9","sha512":"7443de9e8bbfb009a9c72948d8effd438e47456b1f3ed00d0eef9aad92325be99fb14941f7b94dd70f93e93864792f31e57add09590cf191c576b59ad40b1e68","ssdeep":"1536:3eAjA679C+QRCHXC4WHqMPB8Vx8WXwCDcYNIekHeBHmjkfzRNE4cR8+SxpcxID1x:ndeVW/Clkbx","tlshash":"2c43eb863251b4e70bef40eb602b450af32319e4740eb1987ab8ddf66470d5a237b739","first_seen":"2024-02-05T23:13:55Z","last_seen":"2026-05-22T22:20:20.618356Z","times_seen":323,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embedsports.top/ad.html","fqdn":"embedsports.top","domain":"embedsports.top","tld":"top"},"ip":{"addr":"104.21.70.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://embedsports.top/embed-noads/admin/ppv-northern-ireland-vs-luxembourg/1#player=clappr","date":"2025-12-19T22:27:30.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"embedsports.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 11:45:11 GMT","end":"Thu, 12 Feb 2026 12:41:30 GMT"},"fingerprint":{"sha1":"52:2C:A5:D1:00:60:55:04:1B:75:95:67:7F:06:E4:0B:B6:76:CD:5E","sha256":"E3:23:4B:94:F3:F1:B8:BF:DE:EC:BF:3E:3A:1F:F6:F1:8F:CC:D8:30:8D:79:DD:C1:15:2E:4F:EE:21:1B:19:32"}}},"request":{"raw":"GET /ad.html HTTP/1.1\r\nHost: embedsports.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embedsports.top/embed-noads/admin/ppv-northern-ireland-vs-luxembourg/1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=50zIq6dw2wS59yDnYuHGMQYoPd%2B2Tx%2F8mDDqkuPeP84I0gfkIzEwdPSc0fmuvAnIQfnhJLUXMfVxTOBSf6tRwOFGF2I2fd939kdGoJU%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 17 Dec 2025 14:58:52 GMT\r\nx-cache-status: HIT\r\norigin-cache-hits: 225\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53e2f98d0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1655,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1654)","md5":"555ad99460e7f3342ba1544aaea25736","sha1":"e4ebc3501a713dc4ddc2e72c2d56a039e2391b50","sha256":"2fef5d8c5e62a5e75c64eabca51441417dba743e34f9ce3f69f04568732160a0","sha512":"610b76edf4ad3cf328c0560fb695b35f2c766c278446797b292808e43aaa70520533b23df83ac84b1c2a909f2f73ab44a46c11f89ed72e8ae4818af92bfe30d8","ssdeep":"","tlshash":"31316ae76e26b01419055374a01bb9ca4046a34bf6a8dee4fff05aa23130a791d636ce","first_seen":"2025-12-19T22:28:12.557831Z","last_seen":"2025-12-20T02:56:56.347253Z","times_seen":3,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"embedsports.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.19.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.19.1 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Nov 2024 07:57:06 GMT\r\netag: W/\"6729cfd2-9d72\"\r\nexpires: Sun, 22 Nov 2026 03:23:11 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 2401460\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uc%2BkD1VYO5up6phrGjuwCKpC2BN%2BcyND3oypz3wIL1U9se21j%2FENrF2kGpG0AwTAvLrZs7QAcRtzIcBnX7P0bmYUPxoT2F4pAH2RQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee5b3c56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40266)","md5":"802e7441b394288bafeffc8a53506aa2","sha1":"c89af23e3ab70c9ff6bd2bd8dd1b58e565700cb4","sha256":"c809a90f550b4200b6ca38bdca5d9feb21f8d9f69563643eb8f4fcb650d166b4","sha512":"8b17c16c4a84f1ad91dbdd53124504bd8340934595e9d028b90266d8da5e2d749562e248f264fb558b751c7786f8097581c579f3e36de1df1b38d19deb42237f","ssdeep":"768:vRPzjLRkRevx1QEa/A3JSJGfVebVqJj/Q9KEAzBc5GETSebsvTilauUHTSX5aodX:vRP/LRkRQx1QEa3GfV9JREAzBc53TSe1","tlshash":"8303081271d2d4aa418f48b7b433121cb3664dcdb402b59db2bdace6a4b1e8373b2775","first_seen":"2024-02-05T23:13:54Z","last_seen":"2026-05-22T22:20:20.621909Z","times_seen":325,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embedsports.top/embed-noads/admin/ppv-northern-ireland-vs-luxembourg/1#player=clappr","fqdn":"embedsports.top","domain":"embedsports.top","tld":"top"},"ip":{"addr":"104.21.70.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/","date":"2025-12-19T22:27:30.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"embedsports.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 11:45:11 GMT","end":"Thu, 12 Feb 2026 12:41:30 GMT"},"fingerprint":{"sha1":"52:2C:A5:D1:00:60:55:04:1B:75:95:67:7F:06:E4:0B:B6:76:CD:5E","sha256":"E3:23:4B:94:F3:F1:B8:BF:DE:EC:BF:3E:3A:1F:F6:F1:8F:CC:D8:30:8D:79:DD:C1:15:2E:4F:EE:21:1B:19:32"}}},"request":{"raw":"GET /embed-noads/admin/ppv-northern-ireland-vs-luxembourg/1 HTTP/1.1\r\nHost: embedsports.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sportytrend.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-cache-status: HIT\r\norigin-cache-hits: 10\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aFLrYIU1gVwNf7nb%2FHflSMx%2BAmW7eruqVs6PVKt9Uz82K3vBLW04CMQOJNduBRCSOLrB%2FbRTFlk%2FV0W6Hg2R1YlanULQIhaHIIgNHv4%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b0a53e1cac95697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":932,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (931)","md5":"eccec1e7f4f6ce5707ce191326d450af","sha1":"d7c53fc1a4e39d2c93ba5e87fac48de59bcc41b9","sha256":"bb43f94bd07c8ad44e976ef6dc759425799cd2d4e4f8d589e3f7d018ba57c6fc","sha512":"5d73f25d84b1ccee7f724c59036ec00571fbfe85b9e285453cba902b6806299083d469c3f8d1d3012ea1d35e5eb68c6fb788b73b0a58818f1c8a29c451bb5f76","ssdeep":"","tlshash":"0b112d724023ca3dc9a18136bdb2d28c4470657db7838900f05edd2824dca220eb2a5c","first_seen":"2025-12-19T22:28:12.559316Z","last_seen":"2025-12-19T22:28:12.559316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":74,"dns":53,"connect":1,"send":0,"wait":65,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"embedsports.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fedoq.com/impression/-o6yzIMJeEMaGXEKCw4jr65POx6X7KhN9KKr-JcWy707uFLAPOupdQBVOTYTHvWvYgOYMwdU0v4R1Bh1rZzOnt_7jdjIYVdIv60rWZotGktzWUhoXOhjBhXqyJ5OeWYZ_PVBhHj8FI2YHb6hp9A3vQPGvPLF2XMxG9k57Z_qiDBLsbQOrka8qj5unfNIsSxDnuKcQkKaUjtqohpGA32oyKF_RxU-QeSLt5Ou1vr3fTM7fnNYGW7xN2ojbwztsvgq2v8R-wlwBJwpduevfETtkP20x4BtnQqCSfoD5cv0AM5vxy985wYFJNP99CK4ygHTri3qGcObP8dMxN6Dh8SRfLf1WMeHHmxZPNV3Mi1TIvC70_5ldTmHRNj5q0jSZ2m_WlRr6Q5bwqhDX4sOr4Lxcrbedw0G45_lfgbidfGT1MLGH4udvhYLxmzSnDpdvpW9CFz4hjVAnX8rOGzwWcKDtU4NgfryMXFvHiwVJe49UOH4Pu74PQLe_6H4yNA3XFh-7M4hcrCRtASKtAvIgC25hbDdcfHJmEXY8Oe-o2LT2Z8j5kzejXlbzRA2chWkX3J_PZPQC6on3aFHZPD5is_Vx2xYJwW1RIYY6s99FbdGEkk1I6l2tz52Iw-H_7r8U-9ZwkkduK3vuu2Ge4q9-IwpO4LPxxx24g5lYL_8Ow22iWJ3xCu7bVn8k2Tdj85o6a-rL8hi9v1eDzkiCkeI7XY_X3epc2Tbq-4Brj_XArMklRUAhGoQdJGN7mzMMUUK1IoVdis1lwgZijg2wgem0zyhbNcRXMJjizDpzNnywgS-1yv-O-uSS7P-vr0BeYZdqxCr7TaH9W0iXAMed4u0ViwzD3Su1u0FewjVFLShNteeuU3Pzpapu3iuuuLWQck=?_z=10323858\u0026sw_version=v1.770.0-s\u0026dmn=dd133.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=266\u0026wiw=266\u0026wih=500\u0026wfc=2\u0026pl=https%3A%2F%2Fst.chatango.com%2Fh5%2Fgz%2Fr1214250536%2Fid.html\u0026drf=https%3A%2F%2Fsportytrend.net%2F\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=1\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"fedoq.com","domain":"fedoq.com","tld":"com"},"ip":{"addr":"139.45.197.116","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://st.chatango.com/h5/gz/r1214250536/id.html","date":"2025-12-19T22:27:38.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fedoq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 06:47:15 GMT","end":"Tue, 06 Jan 2026 06:47:14 GMT"},"fingerprint":{"sha1":"03:2C:7B:90:6A:BD:97:D0:29:90:9D:F5:70:4C:B1:30:E7:4B:27:AF","sha256":"BA:DB:C6:2F:13:23:48:EA:67:13:C1:7F:06:D9:45:AC:12:8F:04:F1:F7:3F:D4:78:48:E3:2D:DD:C2:5F:6D:92"}}},"request":{"raw":"GET /impression/-o6yzIMJeEMaGXEKCw4jr65POx6X7KhN9KKr-JcWy707uFLAPOupdQBVOTYTHvWvYgOYMwdU0v4R1Bh1rZzOnt_7jdjIYVdIv60rWZotGktzWUhoXOhjBhXqyJ5OeWYZ_PVBhHj8FI2YHb6hp9A3vQPGvPLF2XMxG9k57Z_qiDBLsbQOrka8qj5unfNIsSxDnuKcQkKaUjtqohpGA32oyKF_RxU-QeSLt5Ou1vr3fTM7fnNYGW7xN2ojbwztsvgq2v8R-wlwBJwpduevfETtkP20x4BtnQqCSfoD5cv0AM5vxy985wYFJNP99CK4ygHTri3qGcObP8dMxN6Dh8SRfLf1WMeHHmxZPNV3Mi1TIvC70_5ldTmHRNj5q0jSZ2m_WlRr6Q5bwqhDX4sOr4Lxcrbedw0G45_lfgbidfGT1MLGH4udvhYLxmzSnDpdvpW9CFz4hjVAnX8rOGzwWcKDtU4NgfryMXFvHiwVJe49UOH4Pu74PQLe_6H4yNA3XFh-7M4hcrCRtASKtAvIgC25hbDdcfHJmEXY8Oe-o2LT2Z8j5kzejXlbzRA2chWkX3J_PZPQC6on3aFHZPD5is_Vx2xYJwW1RIYY6s99FbdGEkk1I6l2tz52Iw-H_7r8U-9ZwkkduK3vuu2Ge4q9-IwpO4LPxxx24g5lYL_8Ow22iWJ3xCu7bVn8k2Tdj85o6a-rL8hi9v1eDzkiCkeI7XY_X3epc2Tbq-4Brj_XArMklRUAhGoQdJGN7mzMMUUK1IoVdis1lwgZijg2wgem0zyhbNcRXMJjizDpzNnywgS-1yv-O-uSS7P-vr0BeYZdqxCr7TaH9W0iXAMed4u0ViwzD3Su1u0FewjVFLShNteeuU3Pzpapu3iuuuLWQck=?_z=10323858\u0026sw_version=v1.770.0-s\u0026dmn=dd133.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=266\u0026wiw=266\u0026wih=500\u0026wfc=2\u0026pl=https%3A%2F%2Fst.chatango.com%2Fh5%2Fgz%2Fr1214250536%2Fid.html\u0026drf=https%3A%2F%2Fsportytrend.net%2F\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=1\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: fedoq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://st.chatango.com/\r\nCookie: OAID=0802a4bf2c4d419afab8cc6e4ebb3e95\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 19 Dec 2025 22:27:38 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-trace-id: afdc806f4cde5882241adb97fab39727\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-05-28T16:30:59.922148Z","times_seen":100503,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/uploads/sites/165/elementor/css/post-963.css?ver=1758570995","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/uploads/sites/165/elementor/css/post-963.css?ver=1758570995 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Nov 2024 08:07:20 GMT\r\netag: W/\"6746d338-5d6\"\r\nexpires: Thu, 26 Nov 2026 03:01:53 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 2057138\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KT8IVx8hFhgafdH4LKPSXfzY3Fdinu%2BnfvgDufiqISBsS5i%2BdvcfOl1amB3CLTXvLQaRYtz7dh4J1XKVsVHAD8jkaHRmtAt0vLGrkA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee3b0e56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1494,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1494), with no line terminators","md5":"55d2bc61b5803678fd64d4998cfdd075","sha1":"2de28779dc0b5aa7b1c13ebf1d6710f2a6f0504d","sha256":"890db3e87c8b4bf36fd4fe1331734db84df39f6d4f608fc3ed90929f4a9d78d6","sha512":"4d0061d2d20eabf81f2acdf4d19fafa0fcf40face91db11a04d9089605d508056720ea9d4e30f47bb62c4753d97990b6367b6fa781db42f2ff0dd3f3194c4901","ssdeep":"","tlshash":"383167463f22d022e0bb066fa1d3e47d152cd46f618fc9efe01d8346f8bab1a5118643","first_seen":"2025-06-24T20:43:22.420437Z","last_seen":"2025-12-27T17:37:15.67986Z","times_seen":21,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.17.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=8789876781696250658\u0026utm_source=admaven\u0026utm_term=1045621\u0026campaign_id=AM_1045621","date":"2025-12-19T22:27:32.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.17.1 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Nov 2023 11:26:33 GMT\r\netag: W/\"6554aae9-16a9\"\r\nexpires: Thu, 12 Nov 2026 16:39:34 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 3217677\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MXCRwEA%2Bt4bHWqsb6FykJSjUnF%2FBYxji%2F7lEpDxDd34Iofo7Z4IWIKjXNU8qvRVZplg8ETet%2F2ldakZExzvrCSncaSG%2Bh6Qu9DOZJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee5b4756a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5801,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5757)","md5":"8027f7d649c8b4b044a03ef82cc7ef68","sha1":"4ba490a1a2544a195e5fba915ac5eb09eaaec5b3","sha256":"d9755b7eff734eeb6267db6515f0267fc66622cd873cd37f65761b3fcc94cac2","sha512":"f372b4f4a838e59a57c7655acd7ac66b4880360d39edc865f4cea1643f5ad9bf47339a7520a2bc4c0e9a040098dd1236d55ee723673ca9daa04e5d2d4b638cd9","ssdeep":"96:BTifnGhUqdL5MGSPhRm0j0DEpre1bNUx4Gk4OlL8GVyeV9WmLttXSc/8k2:JifcUgL5MGSpM04CrI6CGTvG3rXnEk2","tlshash":"f4c145d90a949d5b26e139d9b0975b701e3dd0323c15aa81ea52eddc19f8fc083ea933","first_seen":"2023-11-01T17:10:30Z","last_seen":"2026-05-27T13:00:04.122863Z","times_seen":2127,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"104.21.11.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://st.chatango.com/h5/gz/r1214250536/id.html","date":"2025-12-19T22:27:35.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tzegilo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 06:43:47 GMT","end":"Mon, 09 Feb 2026 07:38:46 GMT"},"fingerprint":{"sha1":"D5:38:99:61:B8:EA:99:50:AE:A6:42:89:19:46:3D:27:F6:80:AE:53","sha256":"EB:AA:B8:24:FF:C4:D3:0A:D8:6E:81:A6:73:F2:98:E7:69:A1:0F:95:6F:52:21:C6:59:D5:A0:26:AD:55:F8:CC"}}},"request":{"raw":"GET /stattag.js HTTP/1.1\r\nHost: tzegilo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://st.chatango.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:35 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Jul 2024 10:23:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nlink: \u003chttps://flerap.com/\u003e; rel=preconnect; crossorigin, \u003chttps://fleraprt.com/\u003e; rel=preconnect; crossorigin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZH8g%2F2HhWbV%2FSzT%2BXLmHPiWHvzHOagMFHvXtLqIhQwCec2Zcf0RGIzYdaEt4cZzlUpijywTR%2BOtbHZITagNnJtdajx5yfJYhbg%3D%3D\"}]}\r\nage: 1087\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"668fb2be-45d7\"\r\ncontent-encoding: br\r\ncf-ray: 9b0a54003d3c56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17879,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17229)","md5":"01227f5edc20e0ff4ed643b27cb8bb68","sha1":"d71a88f7341f2b1bdaa7deb9a66888607bd52598","sha256":"75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2","sha512":"88046b07c07ff6de47ef7d1e0d7ca281fc48e91fc6a292cdf611457b96ac92bb0068971cfd55c0cc3e6179d7335e77a6a14b15fa502bbae7b2233546da6c0f98","ssdeep":"384:WDWdyJ+TJTwWV+6RUL2qq8L6jW4+QL1zWAWvVRIDiei:7so1V+g+d+j4pJ5","tlshash":"8d82094a72d525ee82a3a1d10cef612ffb664e86a97e1785e381b49c187404ec3d7f90","first_seen":"2024-07-11T16:28:55Z","last_seen":"2026-05-28T15:39:47.191226Z","times_seen":6931,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":73,"dns":52,"connect":1,"send":0,"wait":10,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver=4.11.17","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/","date":"2025-12-19T22:27:29.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sportytrend.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 14:59:40 GMT","end":"Sat, 14 Feb 2026 15:53:06 GMT"},"fingerprint":{"sha1":"31:D0:D8:8A:4D:E3:BF:51:4A:83:51:AD:D4:9F:CA:CF:EA:FF:D6:79","sha256":"BF:B9:B8:7D:88:1F:DD:8C:90:2E:AA:A2:8B:32:66:A1:A8:DD:34:18:95:0C:5F:8B:36:94:31:F6:A7:07:4E:DA"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver=4.11.17 HTTP/1.1\r\nHost: sportytrend.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:29 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3749\r\netag: \"3ca5-6937597e-3202bb;br\"\r\nlast-modified: Mon, 08 Dec 2025 23:04:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UNo6xbYmHgZorlEftOtAF3yxkeRNz36mjYP72wzexy7Ym2Coz37HqtExqVpS5ISvAHH1cltduhCBm%2B%2BqB2nkIUkNPNxNGQwxXd9i71Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53dd7bb756b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":15525,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15525), with no line terminators","md5":"f3f609a6ebd5b8fede4abc63e105a7b7","sha1":"6cf96160fa67d56a7be3c68b1941d3af0061a69d","sha256":"cb7b88e5a91d97805b4efcbb6d4076cf93a62fcee29a5a363ed66dafca0dec09","sha512":"afd5aca3d8468c121b02d8b93f219bf9157c36f94a1df1511c3803ea70671d872bdb2ff6a04bcaf1110355a10ec5f9f2b2e28f9d50cb3447ee845d6ea00303a4","ssdeep":"384:uOgKnOUyVosSYlDjp1CAWa54XoO4qd7auYk4FozQ5rY3cYaTtlUBETID9g4ST6C7:Ng0OlVosHlDjp1CAWa54XoO4qd7auYkA","tlshash":"07620dc73a4c342246028e88fdab9a1578a60f6e0b2c4758d157b97400b6d571debbff","first_seen":"2025-10-07T17:03:00.325877Z","last_seen":"2026-05-28T13:10:15.43491Z","times_seen":16713,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"sportytrend.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loijtoottuleringv.info/redirect?tid=1045621\u0026file=Watch_Live","fqdn":"loijtoottuleringv.info","domain":"loijtoottuleringv.info","tld":"info"},"ip":{"addr":"65.9.46.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://embedsports.top/ad.html","date":"2025-12-19T22:27:30.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loijtoottuleringv.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sat, 28 Jun 2025 00:00:00 GMT","end":"Mon, 27 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"99:4C:44:30:D5:21:41:F6:46:9C:39:06:D4:04:06:EE:21:58:C6:80","sha256":"18:F4:D4:80:C9:A9:FD:D7:5B:B4:4C:81:21:AB:31:FA:7A:1C:C1:82:6D:0A:C1:33:1B:4C:CE:C2:4F:92:85:5A"}}},"request":{"raw":"GET /redirect?tid=1045621\u0026file=Watch_Live HTTP/1.1\r\nHost: loijtoottuleringv.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embedsports.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 256\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nset-cookie: csu=f832011e-9421-49f2-bb4c-7041b9204565\r\nreferrer-policy: no-referrer\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 af0c3fbc11dbd0b6ca811448514b3186.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: N81YbGzha2jZ7CMidM9hwVyt3YvxREyt-3kOJHJ7OCDqWthdgZ6mqA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":304,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"c24de56489d5ce2d2c6428b449af825a","sha1":"fa6e8a01b453f8437254657db289e2ef1f3200d8","sha256":"e9254db3e29e82535e6f48b2156facf15fd5fd3cd980a7befa07fdda64537d0f","sha512":"56e551a16bba5ba364d7110048ac129b0eb7693e4c932b56494de0f8eed0ac23f5e4587063c4765930e152388b22ad886af3c5e30100e77522452d9bbdccd8cf","ssdeep":"","tlshash":"99e0c2cb0c421a69426020b1ace2b348215766aa95d4d948e2d0997b69f47db8c87aaa","first_seen":"2025-12-19T22:28:12.564283Z","last_seen":"2025-12-19T22:28:12.564283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":57,"dns":3,"connect":20,"send":0,"wait":487,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/css/314915b66c349e94.css","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","date":"2025-12-19T22:27:32.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripquestapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 14:50:44 GMT","end":"Mon, 26 Jan 2026 15:49:21 GMT"},"fingerprint":{"sha1":"BE:D1:5B:10:14:EE:08:0F:B0:23:46:F9:DA:47:B6:80:49:37:FF:78","sha256":"F1:96:83:66:9D:CE:6B:B0:DF:67:01:9A:55:C3:4F:B8:E2:E5:FD:AD:58:1E:4A:32:39:01:45:12:89:08:21:3C"}}},"request":{"raw":"GET /_next/static/css/314915b66c349e94.css HTTP/1.1\r\nHost: www.tripquestapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 08 May 2025 08:55:19 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y214YLmR9mhOjmMxu9jIpO%2Bky%2FU0KgJpF4kXXtVAqujXutVy6bFNM%2BKdM5jYZql2VStEKnqJmjmMyKIl1u3sgjbsaQxKmxzFCAECcpv944EaBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b0a53ecdbe80b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a443f7051c2ce60e7ea6dd3e8b9e250d","sha1":"cda851adaef95d7f4832861ec5f1185c108390ea","sha256":"e9bfff762d4569792af19d42fafba95a1ffae5a545a9ef79c152235fb68e1b9b","sha512":"e21f250ee75a4744962efb92700a0720a0b806f71b8c9309405ee7b75217fdec6eeac29a84a337dcb9d4063a4313970a7a319b86ea109ff6bde22576d19c6c36","ssdeep":"","tlshash":"d6b0222b88b0a020e02a22202b802a28a208c808088bceb0e2238800e0c30a3bf0030c","first_seen":"2025-06-17T05:49:33.661056Z","last_seen":"2026-04-12T19:13:08.129068Z","times_seen":114,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Aug 2023 17:14:23 GMT\r\netag: W/\"64ecd5ef-15601\"\r\nexpires: Fri, 20 Nov 2026 22:23:25 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 2505846\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5fjtaYAIxClbbC3DVhHsZnZPhdQgwzlNbTHAwFLcwca8ze8D%2Bd%2BS1vB4Bd45xsSO9wj3UeQ2lcai1dLv1YHFJDCBbC9upFfuts8ytQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee4b2256a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-05-28T17:38:01.734258Z","times_seen":870354,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/wp-content/plugins/wp-dark-mode/assets/js/dark-mode.js?ver=5.2.20","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/","date":"2025-12-19T22:27:29.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sportytrend.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 14:59:40 GMT","end":"Sat, 14 Feb 2026 15:53:06 GMT"},"fingerprint":{"sha1":"31:D0:D8:8A:4D:E3:BF:51:4A:83:51:AD:D4:9F:CA:CF:EA:FF:D6:79","sha256":"BF:B9:B8:7D:88:1F:DD:8C:90:2E:AA:A2:8B:32:66:A1:A8:DD:34:18:95:0C:5F:8B:36:94:31:F6:A7:07:4E:DA"}}},"request":{"raw":"GET /wp-content/plugins/wp-dark-mode/assets/js/dark-mode.js?ver=5.2.20 HTTP/1.1\r\nHost: sportytrend.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:29 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 37052\r\netag: \"1d9c6-693746b5-32009f;br\"\r\nlast-modified: Mon, 08 Dec 2025 21:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wLN5k71sIEtKnnSsmcK%2Bynjq%2FcVwpujRxBk%2BZR7c2cwKPWYU4EJ71uFZa%2FFz7ZXABmhU1gJMmzLFzQU%2B1QgGtlpuhWnmpCl29d%2FZ5ls%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53dd6ba656b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":121286,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (49913)","md5":"451b0b2a11d4871fa8354048bad72ba8","sha1":"9e3e845afd1b28653b350f68fce313eefdb990c3","sha256":"54a0bcde9445a58fd5802f2a369aeae5132201f747bf8e2077b1835b9ff4f6c1","sha512":"ba8655b947eef6aab57004a35e6a97620e605862f039ff6cd32634f3f861fd15bfb6d9b80bd4bf8cde2f811ec55d33fd776563c8227693451ae138dbe8438e5a","ssdeep":"3072:ORRPABIjxpMIO81R95QMOZlIXMILgaPdnRErKzA:ODjS81R95QMOZlIXMIs+cKzA","tlshash":"40c3f8dc72e7b47613936575406fa20ab33f2c95644c8920e226e9e53c78c4ea277f6c","first_seen":"2025-09-09T13:22:48.411685Z","last_seen":"2026-05-28T04:09:43.559539Z","times_seen":290,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"sportytrend.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.11.17","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/","date":"2025-12-19T22:27:29.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sportytrend.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 14:59:40 GMT","end":"Sat, 14 Feb 2026 15:53:06 GMT"},"fingerprint":{"sha1":"31:D0:D8:8A:4D:E3:BF:51:4A:83:51:AD:D4:9F:CA:CF:EA:FF:D6:79","sha256":"BF:B9:B8:7D:88:1F:DD:8C:90:2E:AA:A2:8B:32:66:A1:A8:DD:34:18:95:0C:5F:8B:36:94:31:F6:A7:07:4E:DA"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.11.17 HTTP/1.1\r\nHost: sportytrend.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:29 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5894\r\netag: \"656d-6937597e-3202bd;br\"\r\nlast-modified: Mon, 08 Dec 2025 23:04:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=42Uj4Op0Sf4%2FZRXwzOjbxgXJgZXtb2cYDN5cwJCgbPjcC%2Fi7wR2GfkvpK2dH46YTeFXK0rjVg%2BgSR4YsWq8wSmslHt8umlLjruXbVjs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53dd7bba56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25965,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25965), with no line terminators","md5":"424d1bd49a0f7bf705d9342a91c0089b","sha1":"94166e2c3fb906fcdacd8976d14638201d0a7bb9","sha256":"66b713cb51fe6103cd8729bc0c245c9497295b6873bdb9be7e8196caf5e5326e","sha512":"1694d2c8689eb7fb9e580bbe8184a6636cf6d05619ed16edb914155bf8f4488921d99ebfcbe5d1f5b3504435f13e2050934ae8d1eefdc432a4a98560180cb52f","ssdeep":"768:uYEPx6KoYcFDTHjCqoKoCo9or6jCRcjC5LltbmxPE22Ve8KTX6VzSD0tIzQ6IFNH:uYEPx6VGe6jCRcj6lBmxPErhdSLWNdio","tlshash":"12c272a66300293604fe17e7f5daabc5767114affa0944111838cc2e19a8fd352f5afd","first_seen":"2025-10-07T10:54:39.300678Z","last_seen":"2026-05-28T13:18:47.094003Z","times_seen":20140,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"sportytrend.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embedsports.top/js/bundle-clappr.js?v=8","fqdn":"embedsports.top","domain":"embedsports.top","tld":"top"},"ip":{"addr":"104.21.70.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://embedsports.top/embed-noads/admin/ppv-northern-ireland-vs-luxembourg/1#player=clappr","date":"2025-12-19T22:27:30.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"embedsports.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Nov 2025 11:45:11 GMT","end":"Thu, 12 Feb 2026 12:41:30 GMT"},"fingerprint":{"sha1":"52:2C:A5:D1:00:60:55:04:1B:75:95:67:7F:06:E4:0B:B6:76:CD:5E","sha256":"E3:23:4B:94:F3:F1:B8:BF:DE:EC:BF:3E:3A:1F:F6:F1:8F:CC:D8:30:8D:79:DD:C1:15:2E:4F:EE:21:1B:19:32"}}},"request":{"raw":"GET /js/bundle-clappr.js?v=8 HTTP/1.1\r\nHost: embedsports.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embedsports.top/embed-noads/admin/ppv-northern-ireland-vs-luxembourg/1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:30 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WK38iuIO%2B4ZnLZMlG1Tc6kiVVQZh%2ByjQLactjgCIQ6Oxajf%2BgOhbyiSFv81KQXre9WtS1CeG%2FmfjveK%2FnZch8vGKUkYWHSjItV7jCI4%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 07 Dec 2025 15:07:24 GMT\r\nx-cache-status: HIT\r\norigin-cache-hits: 29\r\ncontent-encoding: gzip\r\nage: 4161\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53e2f98c0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1756685,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f3a8f75a57fa809b1b4e059c7a282d20","sha1":"9b679105a0ec7da954fc92e525697f6596621146","sha256":"218aa62b1d8e92ad16904aea770bed4c82539ee4791ab97b69786e6312a74a87","sha512":"1ac26f0038ff45566707b0dc35a85585565fa61d3578d9532ca86ea4c17aa7e2c63fa8e69616ba5b8df4eae684641be3ad8cc25a2ff529d91936cc5cdb60c4ae","ssdeep":"24576:93lQLOjb55FT5WfkZFlmWpsUH9pmjoOUyP8jrengPAnqcnuWuCunu5uduZ91u:91QLOjb55F1WfkPlmWpsUH9AjoOUE8jr","tlshash":"4b25289a3692b43742d190a95c374a01a234b977b884c06ef57eecc7ae5ec0564eff34","first_seen":"2025-12-19T22:28:12.567761Z","last_seen":"2026-01-03T21:38:43.209668Z","times_seen":7,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"embedsports.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Nov 2024 07:57:11 GMT\r\netag: W/\"6729cfd7-4057\"\r\nexpires: Thu, 12 Nov 2026 16:39:34 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 3217677\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HxTnSYVq5D5oJNuR64gLSXVlAktaMabYzRjCL9GDMv7ACTaiMIXjto7zBpzUaaMbpqtp1Ye9UcSvgArANaZ9ezw6BcQaMm7Xj%2F2kwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee3b1256a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16471,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16214)","md5":"a2431bc290cf34e330e11ec4cfce1247","sha1":"32a53342901fef5f4f4dbb26a555e730f84437a4","sha256":"c57e64fcb72bddafa9c38de574441c3e69ac6c961df96b0cad34da83658bd196","sha512":"87aef045472db25020faead697ec02813ba38d4e313caf437b4ca5cadbb7a7495805ac0b74e5de60cd84ccecab290b76d003eb1fadfcdaa70e650a597658ada9","ssdeep":"192:IbgmUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IdUbeTMbHZ+Vnh2AVfHfA4XYz","tlshash":"fa7234681340282753274f374b71cbb9d9b444d24b93896e91c0ee88d7b6cbd236f6e9","first_seen":"2023-04-05T10:48:11Z","last_seen":"2026-05-28T17:37:24.565603Z","times_seen":121944,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://st.chatango.com/h5/gz/r1214250536/id.html","date":"2025-12-19T22:27:33.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 15:37:01 GMT","end":"Sat, 24 Jan 2026 16:36:49 GMT"},"fingerprint":{"sha1":"84:49:FF:DC:BD:D8:BA:3D:2F:25:0B:EF:CA:E4:6D:73:79:8C:F9:7D","sha256":"AF:21:94:4D:14:07:CF:FC:E5:3C:3C:F4:AC:47:9E:83:98:6A:62:87:FB:8C:27:43:25:FB:97:CC:47:15:99:4A"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://st.chatango.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://st.chatango.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://st.chatango.com\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=0802a4bf2c4d419afab8cc6e4ebb3e95; expires=Sat, 19 Dec 2026 22:27:33 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9b0a53f6c9acb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1a0823269871ec328e8d2fa28457d0d","sha1":"ae27a136ebdcc7877ff314ea2b1396c4c5b41ee9","sha256":"448a9be7253e52e89e37356c02aa566928faa650fb9032a04fa4fd46c294a03f","sha512":"5fdddc1a99381cb19e135e445376e55942a619496540d8d48d6e0e0b9c456dbfa313ad5a8da735ccd7e50efc68aeb5a859ad478b1c071a977d17526a2a226fe5","ssdeep":"","tlshash":"13a022c0080c3080280000b88c0ecb8320000000cc08c2c28af0c0000e830ac8a02300","first_seen":"2025-12-19T22:28:12.569156Z","last_seen":"2025-12-19T22:28:12.569156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":32,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/wp-admin/admin-ajax.php?action=wp_dark_mode_update_visitor\u0026_wpnonce=a10f5b3ace","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/","date":"2025-12-19T22:27:40.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sportytrend.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 14:59:40 GMT","end":"Sat, 14 Feb 2026 15:53:06 GMT"},"fingerprint":{"sha1":"31:D0:D8:8A:4D:E3:BF:51:4A:83:51:AD:D4:9F:CA:CF:EA:FF:D6:79","sha256":"BF:B9:B8:7D:88:1F:DD:8C:90:2E:AA:A2:8B:32:66:A1:A8:DD:34:18:95:0C:5F:8B:36:94:31:F6:A7:07:4E:DA"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php?action=wp_dark_mode_update_visitor\u0026_wpnonce=a10f5b3ace HTTP/1.1\r\nHost: sportytrend.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 238\r\nOrigin: https://sportytrend.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/\r\nCookie: wp-dark-mode-device=light\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":238,"data":"visitor_id=false\u0026mode=dark\u0026security_key=a10f5b3ace\u0026meta=%7B%22os%22%3A%22Win32%22%2C%22browser%22%3A%22Mozilla%22%2C%22browser_version%22%3A%225.0+%28X11%29%22%2C%22language%22%3A%22en-US%22%2C%22timezone%22%3A%22UTC%22%7D\u0026ip=91.90.42.154"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:40 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-length: 93\r\naccess-control-allow-origin: https://sportytrend.net\r\naccess-control-allow-credentials: true\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nx-litespeed-cache-control: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YR3mZMk6OsssR2l1Wm1g%2Bml%2FYoGnCY4lzA%2B7PxXgt0ltSO%2FlIJWlNUnw4TBrooefjHwRCnMRscmVUFwl%2B%2BpfA%2F1s2%2BMWLohczTby%2Bmo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a54219d2356b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":83,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"811aeed1f209ea03e712ca039cbc4ad4","sha1":"01dec3ebeb43945c04cf937b488b8f819378b7c1","sha256":"1736b5152fbff4fbe118608afc79b17a546e65b9bd253874d7d31f5f95f9660a","sha512":"9850c45e0961b05509afa0f6249fdae2bc1b9ad285fb6677d15904d6118cd0afde85feb9ee2b25fca1be8f399eb4ade3d217c79fe7dbdabaa075a29e632a3860","ssdeep":"","tlshash":"3ca0122309000cd76641136120343c4050d6628340c01505900c5009db0e8153387371","first_seen":"2025-12-19T22:28:12.570014Z","last_seen":"2025-12-19T22:28:12.570014Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"sportytrend.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/uploads/sites/165/elementor/css/global.css?ver=1758570995","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/uploads/sites/165/elementor/css/global.css?ver=1758570995 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Nov 2024 08:07:20 GMT\r\netag: W/\"6746d338-15b2d\"\r\nexpires: Sun, 22 Nov 2026 03:23:12 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 2401459\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=phOWCYBTZekXz5Tn3yco%2FH6rWE5huDAd9VkdXM2CjxIDAWiNSoqIsGMdD9wsmCcHnDK0RXVyaMRWtwvuOYHOs4rtlgzfd9cmSs62%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee3b1556a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88877,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (24028)","md5":"b6daf1344a92878787612bf876abde77","sha1":"295934ff61ac06d9dedbb231ef544135e2d057f1","sha256":"9864ca34eb69dededc95a4a8c4989493d56f3208cf3d236f9497b3cbf8f834e0","sha512":"1e7d70665f1bbcc807d67f7289a5401e04f14ab00df7b9c3d1a3b4ccb529e83e3572fc8b888bd11948c230c88b9f5b57296473d6b449f93bbcef2ad47d9b18ee","ssdeep":"384:44RD9D9XwYYIFDgJ6S7DHIxFDgJ6S7DHI9:44RD9EIFDPFDD","tlshash":"2493a69d7b22d025b87b082f794bf178281ce4da5c0ac9f7f849934695e7f3ba718610","first_seen":"2024-08-19T18:19:02.357596Z","last_seen":"2025-12-27T17:37:15.635683Z","times_seen":22,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/firefox-addon?clickid=3948365993502736286\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://embedsports.top/ad.html","date":"2025-12-19T22:27:31.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /firefox-addon?clickid=3948365993502736286\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: http://dreamytabs.com/firefox-addon/?clickid=3948365993502736286\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nexpires: Fri, 19 Dec 2025 23:27:31 GMT\r\ncache-control: max-age=3600\r\nx-redirect-by: WordPress\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: upgrade-insecure-requests\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w8ixdxD3mC%2FCB%2Fj3t1lgcXxIwTrr1LhhgNZkGYXSUmHnUM8Bjn%2BfoZofGOkh9BHsulv4Xfug79I2rb7ocYa4%2ByGLHFnsrcXD97GSug%3D%3D\"}]}\r\ncf-ray: 9b0a53ea3c22712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-28T17:37:38.968108Z","times_seen":15830666,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":93,"dns":33,"connect":1,"send":0,"wait":170,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/chunks/4bd1b696-9d53a45aeb6e92ca.js","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","date":"2025-12-19T22:27:32.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripquestapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 14:50:44 GMT","end":"Mon, 26 Jan 2026 15:49:21 GMT"},"fingerprint":{"sha1":"BE:D1:5B:10:14:EE:08:0F:B0:23:46:F9:DA:47:B6:80:49:37:FF:78","sha256":"F1:96:83:66:9D:CE:6B:B0:DF:67:01:9A:55:C3:4F:B8:E2:E5:FD:AD:58:1E:4A:32:39:01:45:12:89:08:21:3C"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-9d53a45aeb6e92ca.js HTTP/1.1\r\nHost: www.tripquestapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 08 May 2025 08:55:19 GMT\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=14400\r\nage: 187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=naC8ODiL2zUCxEslaZegMSw%2BaRXpL2Pj4QzuAixnKFPgXxdhWL3q%2Fqn967ILWqDlnF5NrEwxK%2BzU%2FbJ2xuRpVTh%2BfGrrEd8ag5mp1ei23VpKBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b0a53ecdbed0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167090,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"134c96f899922d29279b675e9fbee451","sha1":"81a49edacad8533e4a1dc0953c3c41707429645b","sha256":"c03ea96e1936ca94440d2f2b1db6105027ac80129374e2738ec2332769dc2183","sha512":"15c10d98073cae3ca5f670b137ae0218ccb8a6d6c86179233751a58e987efc8de8a8aae5420f3e771f3fa921e0f0bc8a52dac3383895a12a109b785fb50c51f9","ssdeep":"1536:6WSSc/OtXTZdmomUsjbmLCbLcL56jtP3VfHPqmH1c59zhFcavz12smlh77eP9AH1:tc/OjDImScLOTD1sFc0Olhe2WX+","tlshash":"71f3f9ec3999e651aeb302a700df28037378262b240d4d60a614fd9db57845bb17bfde","first_seen":"2024-12-23T17:43:51.448446Z","last_seen":"2026-05-28T12:02:27.099743Z","times_seen":946,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.17.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.17.1 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Nov 2023 11:26:33 GMT\r\netag: W/\"6554aae9-16a9\"\r\nexpires: Thu, 12 Nov 2026 16:39:34 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 3217677\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fkTGDUlGuNs%2FvRVAV83%2F%2B2sWzkbr07oXpDj6ffRj%2Bs9wM%2FR4rlft0Kdm0uxJ%2FgaDFi6if7eiQ2TxB6%2B3%2Bsj7IGEabD8CUm0ZBdI9MQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee4b1f56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5801,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5757)","md5":"8027f7d649c8b4b044a03ef82cc7ef68","sha1":"4ba490a1a2544a195e5fba915ac5eb09eaaec5b3","sha256":"d9755b7eff734eeb6267db6515f0267fc66622cd873cd37f65761b3fcc94cac2","sha512":"f372b4f4a838e59a57c7655acd7ac66b4880360d39edc865f4cea1643f5ad9bf47339a7520a2bc4c0e9a040098dd1236d55ee723673ca9daa04e5d2d4b638cd9","ssdeep":"96:BTifnGhUqdL5MGSPhRm0j0DEpre1bNUx4Gk4OlL8GVyeV9WmLttXSc/8k2:JifcUgL5MGSpM04CrI6CGTvG3rXnEk2","tlshash":"f4c145d90a949d5b26e139d9b0975b701e3dd0323c15aa81ea52eddc19f8fc083ea933","first_seen":"2023-11-01T17:10:30Z","last_seen":"2026-05-27T13:00:04.122863Z","times_seen":2127,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loijtoottuleringv.info/redirect?tid=1229910\u0026file=Watch_Live","fqdn":"loijtoottuleringv.info","domain":"loijtoottuleringv.info","tld":"info"},"ip":{"addr":"65.9.46.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://embedsports.top/ad.html","date":"2025-12-19T22:27:30.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loijtoottuleringv.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sat, 28 Jun 2025 00:00:00 GMT","end":"Mon, 27 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"99:4C:44:30:D5:21:41:F6:46:9C:39:06:D4:04:06:EE:21:58:C6:80","sha256":"18:F4:D4:80:C9:A9:FD:D7:5B:B4:4C:81:21:AB:31:FA:7A:1C:C1:82:6D:0A:C1:33:1B:4C:CE:C2:4F:92:85:5A"}}},"request":{"raw":"GET /redirect?tid=1229910\u0026file=Watch_Live HTTP/1.1\r\nHost: loijtoottuleringv.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embedsports.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 244\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nset-cookie: csu=75ef852a-e524-4eea-a054-d35805d977d3\r\nreferrer-policy: no-referrer\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 af0c3fbc11dbd0b6ca811448514b3186.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: GzHlHCPK-wSSON4O030Cr_7q4sY4Kg1yV_DnLrClIJq7zQOhvT1STg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":289,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e2e16bf0172946a3dc32e800a72bc734","sha1":"ac40432f0101e0cee22961954da9a23bf40ec847","sha256":"0b8d907345e9813080b5f9a299ddaa498dc5541fbd48236268647a29588ee2e1","sha512":"fa06fc2a385fd95f016ead5609894036fc9abbcf59dfbca1a7e15fd77e395d6231d629ceddeac165f320d47e4db8fdaa2aebfc1c6822612888fd49c90d6c34e0","ssdeep":"","tlshash":"39d02bcb0c0169552a6015b1dc66b74c30837796a2a4c881d0d085737ae4bebcdc3ead","first_seen":"2025-12-19T22:28:12.573334Z","last_seen":"2025-12-19T22:28:12.573334Z","times_seen":1,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":69,"dns":52,"connect":11,"send":0,"wait":489,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loijtoottuleringv.info/redirect?tid=1045621\u0026ref=Watch_Live","fqdn":"loijtoottuleringv.info","domain":"loijtoottuleringv.info","tld":"info"},"ip":{"addr":"65.9.46.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://embedsports.top/ad.html","date":"2025-12-19T22:27:30.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loijtoottuleringv.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sat, 28 Jun 2025 00:00:00 GMT","end":"Mon, 27 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"99:4C:44:30:D5:21:41:F6:46:9C:39:06:D4:04:06:EE:21:58:C6:80","sha256":"18:F4:D4:80:C9:A9:FD:D7:5B:B4:4C:81:21:AB:31:FA:7A:1C:C1:82:6D:0A:C1:33:1B:4C:CE:C2:4F:92:85:5A"}}},"request":{"raw":"GET /redirect?tid=1045621\u0026ref=Watch_Live HTTP/1.1\r\nHost: loijtoottuleringv.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embedsports.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 247\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nset-cookie: csu=7ed73546-f365-42dd-aa62-0cc9538067d0\r\nreferrer-policy: no-referrer\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 af0c3fbc11dbd0b6ca811448514b3186.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: HH58faUAKsFaZVpfiJrtP5TM-KA1QcKi7twRiwSfZjm2MIY3VqQb3g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":289,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"337a64be1d8015f6683524f9b4d93a7a","sha1":"5aeb46669e9ab349bd89416b2160b4f0759f2f19","sha256":"639dbe5878d61965c8406ea22e04eaaf1a7654f5eb89899af380fe1586e299f8","sha512":"e8d1cc6115c7426982576d188c7161f4bcee946f04b8eb6298a39235addec2be92e50c937bb129f1c15e3ad40445f26c9f0213efcc79405632921a8447c96567","ssdeep":"","tlshash":"37d0c2cb08512955166020b1ada7b308208367da51d5c848e5d0883ba5a47eb8883aea","first_seen":"2025-12-19T22:28:12.574151Z","last_seen":"2025-12-19T22:28:12.574151Z","times_seen":1,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":57,"dns":1,"connect":14,"send":0,"wait":488,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/wp-content/plugins/wp-dark-mode/assets/css/themes/astra.css?ver=5.2.20","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/","date":"2025-12-19T22:27:29.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sportytrend.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 14:59:40 GMT","end":"Sat, 14 Feb 2026 15:53:06 GMT"},"fingerprint":{"sha1":"31:D0:D8:8A:4D:E3:BF:51:4A:83:51:AD:D4:9F:CA:CF:EA:FF:D6:79","sha256":"BF:B9:B8:7D:88:1F:DD:8C:90:2E:AA:A2:8B:32:66:A1:A8:DD:34:18:95:0C:5F:8B:36:94:31:F6:A7:07:4E:DA"}}},"request":{"raw":"GET /wp-content/plugins/wp-dark-mode/assets/css/themes/astra.css?ver=5.2.20 HTTP/1.1\r\nHost: sportytrend.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:29 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 22:27:29 GMT\r\netag: \"10c-693746b5-320039;gz\"\r\nlast-modified: Mon, 08 Dec 2025 21:44:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=viM%2B%2BRub2xoJ6f0VUiLAU0PZ8ubeEY2qL3lCzGkAed8wVmI3bQcb54QUmdtTxnQpb8DXqXJepUEodqF55fv89I6N4nSZIYZd5XMDwxs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53dd6ba356b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":268,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"843526f81db9b47e8a48ead46fe5ef68","sha1":"e1fd91c91b61b2b5b737457b88c0c198a9f38019","sha256":"4c208cdfb0ef4b4892f4086b813e38f1cf16ae1bfb4d883d19d73d5e80796619","sha512":"add5c77bc9d2d30af7dcd3a77a22f56973b1ece55dbd814eed2227e3db522c32f249d8fd60daa004cf29b3725997fcb9844d3c30ac21c54a1f6a6560e075c73b","ssdeep":"","tlshash":"ebd05e11f975a9f7a83347bf928dc458939d2652649c370830adb3f801cdbea6910a6a","first_seen":"2024-12-14T14:41:10.120595Z","last_seen":"2026-05-27T20:06:45.51142Z","times_seen":97,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"sportytrend.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/css/3589b4f4db8508a7.css","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","date":"2025-12-19T22:27:32.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripquestapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 14:50:44 GMT","end":"Mon, 26 Jan 2026 15:49:21 GMT"},"fingerprint":{"sha1":"BE:D1:5B:10:14:EE:08:0F:B0:23:46:F9:DA:47:B6:80:49:37:FF:78","sha256":"F1:96:83:66:9D:CE:6B:B0:DF:67:01:9A:55:C3:4F:B8:E2:E5:FD:AD:58:1E:4A:32:39:01:45:12:89:08:21:3C"}}},"request":{"raw":"GET /_next/static/css/3589b4f4db8508a7.css HTTP/1.1\r\nHost: www.tripquestapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 May 2025 08:55:19 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xnsi5K1Dx57zqCG32V9tTgYmZstAQY4z5Dnup886XRZfe6g95kVVm3FHF2hgQ2er6l22%2FwvD0YRN6nuuCPhhGZ3k3TdzhnQeb%2Fr6I3zwGshi2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b0a53eccbe60b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1231,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1231), with no line terminators","md5":"2501b07a5b42b3ef98147e5fbdb890e4","sha1":"4ad361632699d5c5da792a07d8f8d8a6f4149447","sha256":"e5033b057bc80bc5e47c0facf0715fb3d69b89c514d7f93d53dfbd5a0d34a18a","sha512":"c6aed08f544f818e1f80f0ac75fcdc448af671fdab1d427b06c70cb91fe956d398e173c7d4ae93057c735996a9db113681159267db94063258d70e5bcecf0ef0","ssdeep":"","tlshash":"b221df5fb431c128a91bf4086ff80b8b51479413eb4bee838a9311dfe7ea2d6017060b","first_seen":"2025-06-17T05:49:33.657898Z","last_seen":"2026-04-12T19:13:08.124634Z","times_seen":114,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/js-extensions-plugin/js/functions.js?ver=6.6.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/plugins/js-extensions-plugin/js/functions.js?ver=6.6.1 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Sun, 19 Nov 2023 09:07:02 GMT\r\netag: W/\"6559d036-e11\"\r\nexpires: Wed, 18 Nov 2026 22:49:37 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 2677074\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xdkkOhrGx9%2FeVmjShsI2grX3t4A1m3Swms7hxTotEf6MRxTWU%2F10K0HS1cwNBXnADAM2YN4cwEmFWsp63oE1dRdFlNb4ryzIJQYwkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee4b1d56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3601,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a0ce4d9bff07bf24421ad8d6991193db","sha1":"54672432fa469b7b566cb3125e1779b07fc8a613","sha256":"9701065a77191b3a4ced86664ef4599ac455b2436f780c2e6d544cd190d3cfc0","sha512":"578f6c70bae67bff28f06c4926aecbb05a7eb6b62106d582ee4750a1593de72647b6a4c61cc2c19e0c57373b5c41e558a3f12d828bdf9a55fe2fc90a12d4daf3","ssdeep":"","tlshash":"1d71100828f7943c069765fc5b2bd7a03a2160177584ce587d4c5b10af56c2fcee5eae","first_seen":"2024-07-14T22:27:13Z","last_seen":"2025-12-27T17:37:15.607577Z","times_seen":66,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fedoq.com/500/10323858?excludes=\u0026oaid=0802a4bf2c4d419afab8cc6e4ebb3e95\u0026tgp=\u0026of=true\u0026sw_version=v1.770.0-s\u0026dmn=dd133.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=266\u0026wiw=266\u0026wih=500\u0026wfc=2\u0026pl=https%3A%2F%2Fst.chatango.com%2Fh5%2Fgz%2Fr1214250536%2Fid.html\u0026drf=https%3A%2F%2Fsportytrend.net%2F\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=1\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"fedoq.com","domain":"fedoq.com","tld":"com"},"ip":{"addr":"139.45.197.116","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://st.chatango.com/h5/gz/r1214250536/id.html","date":"2025-12-19T22:27:35.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fedoq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 06:47:15 GMT","end":"Tue, 06 Jan 2026 06:47:14 GMT"},"fingerprint":{"sha1":"03:2C:7B:90:6A:BD:97:D0:29:90:9D:F5:70:4C:B1:30:E7:4B:27:AF","sha256":"BA:DB:C6:2F:13:23:48:EA:67:13:C1:7F:06:D9:45:AC:12:8F:04:F1:F7:3F:D4:78:48:E3:2D:DD:C2:5F:6D:92"}}},"request":{"raw":"GET /500/10323858?excludes=\u0026oaid=0802a4bf2c4d419afab8cc6e4ebb3e95\u0026tgp=\u0026of=true\u0026sw_version=v1.770.0-s\u0026dmn=dd133.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=266\u0026wiw=266\u0026wih=500\u0026wfc=2\u0026pl=https%3A%2F%2Fst.chatango.com%2Fh5%2Fgz%2Fr1214250536%2Fid.html\u0026drf=https%3A%2F%2Fsportytrend.net%2F\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=1\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: fedoq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://st.chatango.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://st.chatango.com/\r\nCookie: OAID=0802a4bf2c4d419afab8cc6e4ebb3e95\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 19 Dec 2025 22:27:35 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: d1aa264f1834c3dfc927c56002fa0d39\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nvary: Origin\r\naccess-control-allow-origin: https://st.chatango.com\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=0802a4bf2c4d419afab8cc6e4ebb3e95; expires=Sat, 19 Dec 2026 22:27:35 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2310,"size_decoded":0,"mime_type":"application/javascript","magic":"JSON text data","md5":"0d9bd29e46d46ce039db88991826600f","sha1":"9c95a57b82ea5e5467a4ddd76f3ec1ffa3770125","sha256":"758f0bb7bd222b6ffe05fa3368256e484bbbe786812c8882c414038c06841b16","sha512":"f963b134da8080246000297cc693f448b9b193c7b6162dd0382f95f942c4e22c721b6b56f8d20da72cd4af17f911c4f7981526d14244e7043bd9935352165a04","ssdeep":"","tlshash":"9041fb4046d9369337613bbe20cd6e218ddb96cf87e92f4d5f3c6b80396e091504d524","first_seen":"2025-12-19T22:28:12.575936Z","last_seen":"2025-12-19T22:28:12.575936Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://st.chatango.com/h5/gz/r1214250536/id.html","date":"2025-12-19T22:27:39.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"FF:92:1F:D0:E9:98:18:CB:FA:1B:90:BE:3E:B9:41:44:DE:05:28:15","sha256":"0C:A2:FB:F0:F6:40:B0:82:E4:FB:1A:51:96:48:D8:22:C9:05:C4:41:67:1F:41:D4:8C:F2:B6:85:A4:D2:3A:AF"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://st.chatango.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 16 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 270303\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-28T17:37:34.135159Z","times_seen":853522,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.chatango.com/h5/gz/r1214250536/id.html","fqdn":"st.chatango.com","domain":"chatango.com","tld":"com"},"ip":{"addr":"208.93.230.18","port":443,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/","date":"2025-12-19T22:27:30.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.chatango.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 15 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F3:69:E1:D0:F3:D1:74:D0:DA:D5:22:F8:D3:1E:06:08:AD:10:C4:11","sha256":"09:28:F7:57:15:FC:10:13:9B:36:F1:1C:C5:1D:EE:8C:45:0E:F5:7B:37:E3:7C:84:D3:8B:89:EE:9E:19:0E:20"}}},"request":{"raw":"GET /h5/gz/r1214250536/id.html HTTP/1.1\r\nHost: st.chatango.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sportytrend.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 19 Dec 2025 22:27:30 GMT\r\nContent-Type: text/html\r\nContent-Length: 224259\r\nLast-Modified: Sun, 14 Dec 2025 13:40:23 GMT\r\nConnection: keep-alive\r\nETag: \"693ebe47-36c03\"\r\nExpires: Sat, 19 Dec 2026 22:27:30 GMT\r\nCache-Control: max-age=31536000\r\nContent-Encoding: gzip\r\nP3P: CP=\"Chatango does not have a P3P policy. Please see our privacy policy: http://chatango.com/page?full_privacy\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":697710,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (54430), with CRLF, LF line terminators","md5":"ccd42d490bbf0c9806be7b89ee4be285","sha1":"bab4af9c16ac5e5189f3a1dfa69b98de0ad8f2cb","sha256":"d1bef81c9a58163f30a567981c3967dbe307b1c037baa2387a464679a8a3214b","sha512":"a1921952bdfb3d6b85d816a35ed8377f2f0eba63b9f997d9a4dc9f0f110ddf3a4da5ad6e76a278826bb84aac60d174d3017a17756c6d7b1d2d02dfe6b6691181","ssdeep":"12288:cRHV9ZpBGlXuSa6x6+P1xhyRifELFr74GQYY/udq2o:YHV9ZpguSa6x6+NxhyRifcFr74GQYM","tlshash":"6ce4189db7613225c2a3e1f4806b1155723b60ade5049b6cb24ddcf4ae7486c227bfbc","first_seen":"2025-12-14T21:16:56.820184Z","last_seen":"2026-01-08T17:48:16.218568Z","times_seen":78,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":163,"receive":509,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Jan 2024 12:59:56 GMT\r\netag: W/\"65ba444c-10d3\"\r\nexpires: Thu, 03 Dec 2026 00:30:41 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1461410\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BiWa95AcaywO%2Bmjg7Gzp4Y9N4tPT2scPNDUJBF%2BezWOKcAKqUVx5vgxbyGc6f%2FkVNO%2FFiKpluBdgL8dyQRl1fPp6%2FwRFSX%2FxlPozcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee4b2f56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4307,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4272)","md5":"072d3f6e5c446f57d5c544f9931860e2","sha1":"ee6aa3d65b474309376468b24bb6f829a4514809","sha256":"2cb546fbdda7995d374fffa4b2f6530bbcf57d014639ddf76de45df43d593045","sha512":"19ceb31ec694ac5c42a0a7b02cfc1c31ddfc033dd62916a1c55bbbdd2435e21f73127c539687633e96f2706b2d75c37609b44a9c9462b63f9f96795cb4495968","ssdeep":"96:vHyiUGUQs6c7DE/3sc/YrEBAr44BPwKxbqtNMHlWh/C2fWRi+RRmps:fyiUGUQ/cHg3NZBT4JbqtNMHiC/RiLps","tlshash":"6d9133c438927870a2637453f4bf14d57279aab2713ac4c1a24dd4e12db39cee0a7a7d","first_seen":"2024-04-03T08:25:08Z","last_seen":"2026-05-28T15:39:17.926402Z","times_seen":31576,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.11.17","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/","date":"2025-12-19T22:27:29.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sportytrend.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 14:59:40 GMT","end":"Sat, 14 Feb 2026 15:53:06 GMT"},"fingerprint":{"sha1":"31:D0:D8:8A:4D:E3:BF:51:4A:83:51:AD:D4:9F:CA:CF:EA:FF:D6:79","sha256":"BF:B9:B8:7D:88:1F:DD:8C:90:2E:AA:A2:8B:32:66:A1:A8:DD:34:18:95:0C:5F:8B:36:94:31:F6:A7:07:4E:DA"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.11.17 HTTP/1.1\r\nHost: sportytrend.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 8383\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 22:27:29 GMT\r\netag: \"b2a3-6937597e-3202a3;br\"\r\nlast-modified: Mon, 08 Dec 2025 23:04:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IrM1rhRESvIR9WxzFmNJ%2BNpv8VjnRASOAwBgIFD47IjgAJL0FxNSes0dfcQxg2GjZAoBTVfV2lozZYvwyU7Ru5BDT4sh%2FAG5IO5uw%2FI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53dd6b9b56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":45731,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (43549)","md5":"063387c1aadb9ba1e6e2038c8ce990ad","sha1":"ed1577ef20820b34b58e9c4b194e6c2715b4683f","sha256":"2ed2af3da90ae0f65ec5b2512186251d247a10b7e18eea1f3425a551426a1ffe","sha512":"2bec73ec88ba0fa5ff85634f82f8a2a66a2c0b4c842d4e71074d4b5c51c4acb205bf46066ae1b7bbb231b3325fdfa483535b62178f8136ae6b31b3b3a2f21aaa","ssdeep":"768:mPcOrk1rhDYollnk+FHk3YCzxdvN3JR2/WLmiyCFS7OHQtBU5PT1enhm2a7ZAR2s:A2YY+tHQtBU5PTwDuaP","tlshash":"a323f96047d035391233873efad6b9082a694313d74f26e6f8ab8768c9c57d71a72e4c","first_seen":"2025-09-09T21:36:58.042082Z","last_seen":"2026-05-28T13:18:47.21462Z","times_seen":14408,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"sportytrend.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/wp-content/uploads/2025/12/cropped-image-192x192.png","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/","date":"2025-12-19T22:27:30.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sportytrend.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 14:59:40 GMT","end":"Sat, 14 Feb 2026 15:53:06 GMT"},"fingerprint":{"sha1":"31:D0:D8:8A:4D:E3:BF:51:4A:83:51:AD:D4:9F:CA:CF:EA:FF:D6:79","sha256":"BF:B9:B8:7D:88:1F:DD:8C:90:2E:AA:A2:8B:32:66:A1:A8:DD:34:18:95:0C:5F:8B:36:94:31:F6:A7:07:4E:DA"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/cropped-image-192x192.png HTTP/1.1\r\nHost: sportytrend.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/\r\nCookie: wp-dark-mode-device=light\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 3624\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 22:27:30 GMT\r\netag: \"e28-692f59ef-223a8a;;;\"\r\nlast-modified: Tue, 02 Dec 2025 21:28:15 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0NpDaKQJLvWLv5YiBMmBA6CABq1KQaNvLYdayStFZTBiCb3patUDloHQk1DnvmB0q%2Fnr7pLpW945ZR8qG1y5wu0CP7%2BJWMj6ciSKlCw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53e27f5d56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3624,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"476724a3455c79e9445b8f8038a1a853","sha1":"44e3757ae6e159235b3c537f3f52ad078ed900cc","sha256":"f8f8a8982be3dbf15bdadaa2512b11ec94734e2a98944e435574c1cc0345ab72","sha512":"83906c0b21c657970d5ae0775430a6a557569bf67d270997fb220f056c594dcbcf3652f087d62f892fc2489e02ca3c8b7d95f953ade8f59bc3e60ce793aaa275","ssdeep":"","tlshash":"49717d4090185cfa9abfa49d917740a7f49f83c7ec1c62e1746eba2bda1000042f75a7","first_seen":"2025-12-19T22:28:12.578752Z","last_seen":"2025-12-19T22:28:12.578752Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"sportytrend.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"st.chatango.com/cfg/nc/r.json?6e06050020000345522954035","fqdn":"st.chatango.com","domain":"chatango.com","tld":"com"},"ip":{"addr":"208.93.230.18","port":443,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/","date":"2025-12-19T22:27:30.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.chatango.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 15 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F3:69:E1:D0:F3:D1:74:D0:DA:D5:22:F8:D3:1E:06:08:AD:10:C4:11","sha256":"09:28:F7:57:15:FC:10:13:9B:36:F1:1C:C5:1D:EE:8C:45:0E:F5:7B:37:E3:7C:84:D3:8B:89:EE:9E:19:0E:20"}}},"request":{"raw":"GET /cfg/nc/r.json?6e06050020000345522954035 HTTP/1.1\r\nHost: st.chatango.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sportytrend.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sportytrend.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 19 Dec 2025 22:27:31 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 20\r\nLast-Modified: Sun, 14 Dec 2025 13:40:23 GMT\r\nConnection: keep-alive\r\nETag: \"693ebe47-14\"\r\nCache-Control: max-age=0, no-cache, no-store, must-revalidate\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JSON text data","md5":"a245ec0018fea3f9d24cece95e464245","sha1":"79b28e3b3d5da3e589bf11e0e879dcbd3e23fa0a","sha256":"9312a61de45fe51d064f44f7a85cc92f4e0baf3c0baf26a2a4bc0506692e0482","sha512":"c472e8264388a58953008950f1a60100c24d9a9d100bed9ede9da519c3d35c53277210ef7fc62d92e3a777e584233deac592f99e0291be4f509600ee1f96ef1d","ssdeep":"","tlshash":"a97000800a0088022200888008220c00280282388280080a8002888888023800c82802","first_seen":"2025-12-14T21:16:56.837116Z","last_seen":"2026-01-08T17:48:16.232895Z","times_seen":81,"resource_available":false,"data":null}},"time_used":1171,"timings":{"blocked":508,"dns":3,"connect":162,"send":0,"wait":162,"receive":0,"ssl":332},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/wp-includes/css/dist/block-library/style.min.css?ver=6.9","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/","date":"2025-12-19T22:27:29.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sportytrend.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 14:59:40 GMT","end":"Sat, 14 Feb 2026 15:53:06 GMT"},"fingerprint":{"sha1":"31:D0:D8:8A:4D:E3:BF:51:4A:83:51:AD:D4:9F:CA:CF:EA:FF:D6:79","sha256":"BF:B9:B8:7D:88:1F:DD:8C:90:2E:AA:A2:8B:32:66:A1:A8:DD:34:18:95:0C:5F:8B:36:94:31:F6:A7:07:4E:DA"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.9 HTTP/1.1\r\nHost: sportytrend.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 14541\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 22:27:29 GMT\r\netag: \"1d38f-692f5aec-1a3961;br\"\r\nlast-modified: Tue, 02 Dec 2025 21:32:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4KT9rvVPsHWSMqdqUY46%2Flrz%2BLukFu9C93rMOYGCQwuKxJWOIPD77y%2B2f%2Fh192%2Bj49948h3WGd0Z0RmtwwaNVO64VxNcNVoNvgvKdR8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53dd6b9e56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":119695,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55871)","md5":"693359d40ab420bb23aa1b4be239f162","sha1":"67719855e95b9befb5e16556455ea78f3b9d7d92","sha256":"b4cd2f5507698b3ebd388e2d1ed31bef9c5704a171ccd53720c27c66df2510c7","sha512":"3ea55e5e2d2cfa21f66701e322928f3199042b8d3eef8f611cae1ee5d931903fb69d39b5cbb72f493e84f477b56f44fb24badc73f2c298785a9f29eb72b6d8a5","ssdeep":"3072:SoeJBCCUQg5MG7x+qehvX02dclkWwbFpPu:mfUQg5MG7x+qehvX02dclkWiF0","tlshash":"7ec3621417b4dcf935ffa73a5e4ee258a107aa41c68a67e6e066d190718ca490cf3f0f","first_seen":"2025-12-02T22:14:51.412485Z","last_seen":"2026-05-27T23:40:49.886439Z","times_seen":21409,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"sportytrend.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/assets/images/image-add-app.svg","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","date":"2025-12-19T22:27:31.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripquestapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 14:50:44 GMT","end":"Mon, 26 Jan 2026 15:49:21 GMT"},"fingerprint":{"sha1":"BE:D1:5B:10:14:EE:08:0F:B0:23:46:F9:DA:47:B6:80:49:37:FF:78","sha256":"F1:96:83:66:9D:CE:6B:B0:DF:67:01:9A:55:C3:4F:B8:E2:E5:FD:AD:58:1E:4A:32:39:01:45:12:89:08:21:3C"}}},"request":{"raw":"GET /assets/images/image-add-app.svg HTTP/1.1\r\nHost: www.tripquestapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 08 May 2025 08:55:19 GMT\r\ncache-control: public, max-age=14400\r\nage: 200\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gZLLLzElJvNsIXYlqHYj0MOmonBZHbm48pborwmLSJnjH9gZj%2BvIzE%2FEq2jqL6GkYe2EGXwfUAZ1ZKl9yreO9wXVil0FXNKwunKQuOtXFv9c9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b0a53eccbe00b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49158,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"edc457e78a49e4f2f2684792ddc4d80e","sha1":"02afedca49b5f046a39ea6f6894afcb89233b356","sha256":"1aa22494b041e7020079274a84f8d731cc385ca04e4eb1ccb815a8a59f88a08b","sha512":"d09fce7069ea5dcc01d7fe6b527434ba371b86914a45fb22bf968a83d5683f18f595f4b921e9fcf1e011cd7702f9e5d0877ec3620a74f769598a8343edb8dc9f","ssdeep":"768:GebjxtelNECoM9jQyXm/dwfzVoFPYXQ6/tN41Cou4bbKCEZ9o95n3L1Uw3gCt:GebbezEG9ydwf5owOS6J4ehN","tlshash":"042370cd3b749cd58ec4c7cbbf51917e281ba0b7b94d8a04c29c8f5d2489c2e9d59ac2","first_seen":"2025-08-12T21:09:16.663703Z","last_seen":"2026-04-12T19:13:08.080346Z","times_seen":12,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=3.0.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=3.0.1 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Wed, 13 Nov 2024 09:25:34 GMT\r\netag: W/\"6734708e-b79\"\r\nexpires: Thu, 12 Nov 2026 16:39:34 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 3217677\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vnz6a9rPFA%2BfDv83JHfmll9HFoylYohqmAOjRt1393w2tacfNzMmC8Pj9pp6tJkiSEzgTT%2FBTNFOGYvf1wKpxo47XXrLDqEk%2Fo%2FH4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee4b1e56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2937,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"37a18cd57014e833a5c4a7bfa6eea9b3","sha1":"bdaa4dc40b15d010d66959bfe7a40b10292d1763","sha256":"fad3123058cce0346ee9998342ef09cfa766dc1393ee3b5c2b450a18936c7d1b","sha512":"3d721d447bd732f96bf1b2feae5ef6b6064ec6b2396022f06a0d96f8ca1478f77c8910733bc277ebe414a5e85c77ca80b9d2f9a5f9ae77c7e99884c82f15a9a3","ssdeep":"","tlshash":"e651ba0973db2836406f92bb2f47559e722640cf6405c968786dba5e1f50c7016f2bf6","first_seen":"2023-12-27T11:44:50Z","last_seen":"2026-05-28T07:04:17.320054Z","times_seen":4568,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/c1-jake-paul-vs-anthony-joshua/","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-19T22:27:29.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sportytrend.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 14:59:40 GMT","end":"Sat, 14 Feb 2026 15:53:06 GMT"},"fingerprint":{"sha1":"31:D0:D8:8A:4D:E3:BF:51:4A:83:51:AD:D4:9F:CA:CF:EA:FF:D6:79","sha256":"BF:B9:B8:7D:88:1F:DD:8C:90:2E:AA:A2:8B:32:66:A1:A8:DD:34:18:95:0C:5F:8B:36:94:31:F6:A7:07:4E:DA"}}},"request":{"raw":"GET /c1-jake-paul-vs-anthony-joshua/ HTTP/1.1\r\nHost: sportytrend.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://sportytrend.net/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://sportytrend.net/wp-json/wp/v2/pages/209\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://sportytrend.net/?p=209\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iBeIcWw4gMOYli7SyAZIx2%2BX7FCAs8NJEc14e%2BzUfr%2BlNdyms39BUcNGdliNYNq85BEZYkiSDLs8Sj4oupc2pWMEBjp7q%2BQTJbeK4k1OFA%3D%3D\"}]}\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b0a53db2cd10daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Chatango","description":"Chatango is a website used for connecting to a large selection of users.","website":"https://chatango.com","common_platform_enumeration":"","icon":"Chatango.png","categories":["Widgets"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Draftpress HFCM","description":"Header Footer Code Manager by Draftpress is a easy interface to add snippets to the header or footer or above or below the content of your page.","website":"https://draftpress.com/products/header-footer-code-manager-pro/","common_platform_enumeration":"","icon":"Draftpress.png","categories":["WordPress plugins"]}],"data":{"size":311554,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (53155)","md5":"5de67157ed4d1bfde016142f5136d6e4","sha1":"21ad478f5ea6a36c906725dd236a28641b83b853","sha256":"b9613bddc3ac6afbb04728e937167df9d3f5114d914e19fbf26091af5eb6aa1a","sha512":"74353a2a064a1b778e957a05905e8cd17ddb198e6a76867e95faec4e5bb893ebddda1cb35fd8de48ac6c265bdf24e4bc53009da3fa7f829992a53e51993672ba","ssdeep":"6144:/Iw+1olInXVeTW6cTK/1DD44ofF5ppxZTXF3ft17CKgs90w6mF:XW6cTK/1DD44Mjpp156mF","tlshash":"aa645df2a7a030fa152b93b8f41bb61971671837ef4e93c1e1bdc5989a80f9505f1a0d","first_seen":"2025-12-19T22:28:12.582291Z","last_seen":"2025-12-19T22:28:12.582291Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":62,"dns":42,"connect":1,"send":0,"wait":171,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"sportytrend.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/wp-content/plugins/wp-dark-mode/assets/css/app.min.css?ver=5.2.20","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/","date":"2025-12-19T22:27:29.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sportytrend.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 14:59:40 GMT","end":"Sat, 14 Feb 2026 15:53:06 GMT"},"fingerprint":{"sha1":"31:D0:D8:8A:4D:E3:BF:51:4A:83:51:AD:D4:9F:CA:CF:EA:FF:D6:79","sha256":"BF:B9:B8:7D:88:1F:DD:8C:90:2E:AA:A2:8B:32:66:A1:A8:DD:34:18:95:0C:5F:8B:36:94:31:F6:A7:07:4E:DA"}}},"request":{"raw":"GET /wp-content/plugins/wp-dark-mode/assets/css/app.min.css?ver=5.2.20 HTTP/1.1\r\nHost: sportytrend.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 68598\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 22:27:29 GMT\r\netag: \"27936-693746b5-320032;br\"\r\nlast-modified: Mon, 08 Dec 2025 21:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2CooHTy1UGknPjyX3uhch5M1hL2tMPLS%2B7LLGVagS2zekypfryuXytg73xreE4n7r66ROd6e4aDTolkvsbE%2FuDm6C9tpsIPySfMPJmQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53dd6b9756b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":162102,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"165444373814002f8d080778ee40782c","sha1":"534f2f88a5e32bea821c8f78d4ef20ec89320a7c","sha256":"3d73342e59c01b5dcc36d37b56ea6eca52415d06f43f9b07c8ab152258bce2bb","sha512":"15d9d708f28cbca180669c5df9266a4495c97ef4c673b3c0122f9960271478d15959fd2835c46119260a75d0b133a8eb899e63b1862643aa5a4bcad04a9084f8","ssdeep":"3072:qRLRNRTR3R3RTR7Rg3zIm52xyLMPtOvc6qtNqayyzUVh/5TSdVgj5MpqYq74oqXg:qRLRNRTR3R3RTR7Rg3zIm524km2p3sFv","tlshash":"daf3d9a330faa8f8fa131bb07b40dd94822e51f158f97c9d719312e9c9695f8be54d08","first_seen":"2025-09-09T13:22:48.418281Z","last_seen":"2026-05-28T04:09:43.774466Z","times_seen":688,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"sportytrend.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/firefox-addon?clickid=6200043950403111000\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://embedsports.top/ad.html","date":"2025-12-19T22:27:31.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /firefox-addon?clickid=6200043950403111000\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: http://dreamytabs.com/firefox-addon/?clickid=6200043950403111000\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nexpires: Fri, 19 Dec 2025 23:27:31 GMT\r\ncache-control: max-age=3600\r\nx-redirect-by: WordPress\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: upgrade-insecure-requests\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bYsTL086V%2F7%2FZQ9DhuehcdRdOVkMbgiGU3YuPXQ%2FB3JR1c35XrpIsej3nEZ%2FNmvCg2cm2aAnR80DU0O%2BqhyLIroVo0KIf%2BaayzMcNg%3D%3D\"}]}\r\ncf-ray: 9b0a53ea4c29712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-28T17:37:38.968108Z","times_seen":15830666,"resource_available":true,"data":null}},"time_used":541,"timings":{"blocked":136,"dns":42,"connect":1,"send":0,"wait":295,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/css/fe54d18178cd43b4.css","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","date":"2025-12-19T22:27:31.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripquestapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 14:50:44 GMT","end":"Mon, 26 Jan 2026 15:49:21 GMT"},"fingerprint":{"sha1":"BE:D1:5B:10:14:EE:08:0F:B0:23:46:F9:DA:47:B6:80:49:37:FF:78","sha256":"F1:96:83:66:9D:CE:6B:B0:DF:67:01:9A:55:C3:4F:B8:E2:E5:FD:AD:58:1E:4A:32:39:01:45:12:89:08:21:3C"}}},"request":{"raw":"GET /_next/static/css/fe54d18178cd43b4.css HTTP/1.1\r\nHost: www.tripquestapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 08 May 2025 08:55:19 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E02eFfhx8lkX8%2BSnDlGYBdc47xcTYWQoV0lgIrCtt44N0SzFvWZPEjOkSXBQpjTfbzuOBWv2w8VkHwXVLQjaWeIPj4S9VkUjwNwzEL%2BpaJBI2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b0a53eccbe20b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7126,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7126), with no line terminators","md5":"7baf5a255c4b8e770a4c8f2581f377bc","sha1":"451f324d59d3c5dcc915f57f1a6880d1b2fd60ab","sha256":"816627febd69611059ae59b1b55ba0735e4db7d41f2bf0713d6bbbe253d32a87","sha512":"e82aa051973dbd0c7bb4be2365e15db7c7319ad99a4d62975538e596085d00c28ea10d53d5f281d472759e6c5da96cacc6092fa44e4ec202f6cb9da628e6007a","ssdeep":"96:TRx7bm3JFE7wwCE00P27YxAm5KRWpGYH466GZ44pJuyNHzE1:dxvmZ27Bh00u7Yx3cYYjGq4pJfNTE1","tlshash":"33e11f30841a50aed433bc6232c93f66353d5421a6c55672de2ab8da8fdb8f673a075c","first_seen":"2025-08-12T21:09:16.653108Z","last_seen":"2025-12-22T12:53:20.453383Z","times_seen":6,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.17.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.17.1 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Nov 2023 11:26:36 GMT\r\netag: W/\"6554aaec-2d58\"\r\nexpires: Wed, 18 Nov 2026 22:49:37 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 2677074\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B0%2FqOD5XnUBPhGwXRrGtVGRLkaLO9Wz3kR1Y0pN6gOaWMg350pCmFcX0wHpXzTpOAyagh6e%2FAzzXIeZGgYRAcew50EhUR9JGkqpWMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee3b1356a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11608,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11564)","md5":"cdcc197db2fe8c87f3e87b799be60f5f","sha1":"a11d1d52e438f35277ee4d9fe0e56bbf8507709a","sha256":"940ba916c06a97707b6e3983286711a5cbb7ba152039da67cd75aecb187d2c8f","sha512":"08d79681a77f918941d1bfcb549f2598393f9153037775f08173600872ae8340689badd8071c311f1c79a708a80ccfcf786dfc6befaac7e72f7c30f25bbfb10a","ssdeep":"192:BlCUn8qrIuqxIZqJIrqYqP3qYIYIP3IHq8qL3q/I8IL3IuqL3IL+q8IXqFqDqeqX:0pkX+uy","tlshash":"b7327e26bd0b585c43bf91b7918b259c4a09d9cae1610cfdfb20650f41f4e89f3ba627","first_seen":"2023-11-01T17:10:30Z","last_seen":"2026-05-27T13:00:04.097719Z","times_seen":1245,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.chatango.com/js/gz/r1214250536/RklModule.js","fqdn":"st.chatango.com","domain":"chatango.com","tld":"com"},"ip":{"addr":"208.93.230.18","port":443,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://st.chatango.com/h5/gz/r1214250536/id.html","date":"2025-12-19T22:27:33.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.chatango.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 15 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F3:69:E1:D0:F3:D1:74:D0:DA:D5:22:F8:D3:1E:06:08:AD:10:C4:11","sha256":"09:28:F7:57:15:FC:10:13:9B:36:F1:1C:C5:1D:EE:8C:45:0E:F5:7B:37:E3:7C:84:D3:8B:89:EE:9E:19:0E:20"}}},"request":{"raw":"GET /js/gz/r1214250536/RklModule.js HTTP/1.1\r\nHost: st.chatango.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://st.chatango.com/h5/gz/r1214250536/id.html\r\nCookie: session_id=6202699929308226\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 19 Dec 2025 22:27:33 GMT\r\nContent-Type: application/x-javascript\r\nContent-Length: 954\r\nLast-Modified: Sun, 14 Dec 2025 13:40:23 GMT\r\nConnection: keep-alive\r\nETag: \"693ebe47-3ba\"\r\nExpires: Sat, 19 Dec 2026 22:27:33 GMT\r\nCache-Control: max-age=31536000\r\nContent-Encoding: gzip\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2822,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (542)","md5":"453babfa81aff07f29bb1098e912c767","sha1":"bd8e4ce5666de59e306c6a49ca44c670610ab055","sha256":"6ac8a47779aca0fa994448c16c1f2c13a1cb66924cb25e3649825c08789ae9fe","sha512":"a31c80ee42aac181b22fcc2a113bec4808c20c4a6817ed6755389232874730f821c0d07db8f1f5768cba82b8904d3ae82f5114c685f50535c4493e917cb123c8","ssdeep":"","tlshash":"f251df3f1574313a981810c7b876eacd6f603069a7938898e4ceec9df66cdd21973834","first_seen":"2025-12-15T18:44:13.11409Z","last_seen":"2026-01-27T10:38:06.817821Z","times_seen":46,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"s53.chatango.com:8081/","fqdn":"s53.chatango.com","domain":"chatango.com","tld":"com"},"ip":{"addr":"208.93.230.168","port":8081,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://st.chatango.com/h5/gz/r1214250536/id.html","date":"2025-12-19T22:27:31.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.chatango.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 15 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F3:69:E1:D0:F3:D1:74:D0:DA:D5:22:F8:D3:1E:06:08:AD:10:C4:11","sha256":"09:28:F7:57:15:FC:10:13:9B:36:F1:1C:C5:1D:EE:8C:45:0E:F5:7B:37:E3:7C:84:D3:8B:89:EE:9E:19:0E:20"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: s53.chatango.com:8081\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://st.chatango.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: SC+wYzd/l9zrslqnq+YNog==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: T8dri0bGZCryENHxfmn7y7gMLTU=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-28T17:37:38.968108Z","times_seen":15830666,"resource_available":true,"data":null}},"time_used":684,"timings":{"blocked":0,"dns":1,"connect":163,"send":0,"wait":163,"receive":0,"ssl":357},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ust.chatango.com/groupinfo/s/p/sportsnest/gprofile.xml","fqdn":"ust.chatango.com","domain":"chatango.com","tld":"com"},"ip":{"addr":"208.93.230.16","port":443,"asn":29893,"as":"CHATANGO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://st.chatango.com/h5/gz/r1214250536/id.html","date":"2025-12-19T22:27:31.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.chatango.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 15 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F3:69:E1:D0:F3:D1:74:D0:DA:D5:22:F8:D3:1E:06:08:AD:10:C4:11","sha256":"09:28:F7:57:15:FC:10:13:9B:36:F1:1C:C5:1D:EE:8C:45:0E:F5:7B:37:E3:7C:84:D3:8B:89:EE:9E:19:0E:20"}}},"request":{"raw":"GET /groupinfo/s/p/sportsnest/gprofile.xml HTTP/1.1\r\nHost: ust.chatango.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://st.chatango.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://st.chatango.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 19 Dec 2025 22:27:32 GMT\r\nContent-Type: text/xml\r\nContent-Length: 215\r\nLast-Modified: Fri, 19 May 2023 21:29:05 GMT\r\nConnection: keep-alive\r\nETag: \"6467ea21-d7\"\r\nExpires: Fri, 19 Dec 2025 22:27:32 GMT\r\nCache-Control: max-age=0\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":215,"size_decoded":0,"mime_type":"text/xml","magic":"XML 1.0 document, ASCII text, with no line terminators","md5":"43ad387204349654cc105aa774339ffe","sha1":"e749e5d2e5f8ca3a900b7981f833be949bc4ee1c","sha256":"46f8346affa3b95350e2e692b55ac8ca65352d552323e341b58d8d45c99afc1a","sha512":"ca8f431c2d96c797a1e40c3d877d8ed5ebd3b614406ce120d07c48681b0f27e50ad6ff4388b0c8b666dd44f207d06b67fb72ac21de6f7f53bb5d4e26d7c65ef8","ssdeep":"","tlshash":"38d0239e440e707848112041c6c033281abc1b5bc1cc22ac3b49201715620b342ea0d3","first_seen":"2025-06-09T00:27:14.496416Z","last_seen":"2026-01-21T03:09:55.762059Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1320,"timings":{"blocked":572,"dns":28,"connect":175,"send":0,"wait":175,"receive":0,"ssl":366},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=3.0.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=8789876781696250658\u0026utm_source=admaven\u0026utm_term=1045621\u0026campaign_id=AM_1045621","date":"2025-12-19T22:27:32.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=3.0.1 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Wed, 13 Nov 2024 09:25:34 GMT\r\netag: W/\"6734708e-b79\"\r\nexpires: Thu, 12 Nov 2026 16:39:34 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 3217677\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TVbIW4sFg9cnngGbBdpMw%2BuRe3tWgfkwSOHpfIxAEU9PrwhfKKhpGkzIeHankAJ1PcpQp7hGxjQMSZFTAWgIkpGb8d4mPna5VtfmYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee5b4556a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2937,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"37a18cd57014e833a5c4a7bfa6eea9b3","sha1":"bdaa4dc40b15d010d66959bfe7a40b10292d1763","sha256":"fad3123058cce0346ee9998342ef09cfa766dc1393ee3b5c2b450a18936c7d1b","sha512":"3d721d447bd732f96bf1b2feae5ef6b6064ec6b2396022f06a0d96f8ca1478f77c8910733bc277ebe414a5e85c77ca80b9d2f9a5f9ae77c7e99884c82f15a9a3","ssdeep":"","tlshash":"e651ba0973db2836406f92bb2f47559e722640cf6405c968786dba5e1f50c7016f2bf6","first_seen":"2023-12-27T11:44:50Z","last_seen":"2026-05-28T07:04:17.320054Z","times_seen":4568,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=6e9491e0-6cff-480e-bdc3-1a6e2b267f39","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://st.chatango.com/h5/gz/r1214250536/id.html","date":"2025-12-19T22:27:35.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 11 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"23:5D:23:03:7B:8D:47:5A:E9:9C:E7:E0:5C:7E:E6:4F:A2:DC:B6:D0","sha256":"9E:F7:13:45:55:C0:E9:09:A9:42:CC:D1:27:57:55:66:A1:63:5C:CB:EA:38:76:AA:6D:AB:5A:02:42:09:5D:46"}}},"request":{"raw":"POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=6e9491e0-6cff-480e-bdc3-1a6e2b267f39 HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1446\r\nOrigin: https://st.chatango.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://st.chatango.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1446,"data":"L\u001bRR\u001f\u001c\u0026\u001c\u0014\u0005g\u001f\u001cK\u0012\u0003\u0001\u0005P\u000eL_\u0003\u000e\u0011\u001aX\u0016\u0010JO@T\u0005\u000fT\u0011\u0003\u001e\u000eP\u0018L\u001fA\u001b\t\u00147\u0001\n\tWN\u001a\u001b\tICPVGP@\u0014\u0002\u0015\u0003\u0003\u001aX\u0013\u000eJOS\nQI\u0015C\u001d\u0006IH\u0005^_\u0003\u0015\u0011A\u0013\u0013[RGT\u000eE[N\b\u0002LQG\u0004^A\u0015NK\u0014@TUJ\u0002\u001b\u001aSI\u0015C\u0003\u0016IH\u0005BO@_P\u0014@VUJ\u0006\u0003PKC\bQXZGPG\u0006O\r\b\u0003\u0004NH[\u001b\u0002@\u0002XK\u0001QFL\u0018\u0013CLW\u0006\u000b\u000b\u0006VF\r\u001b*\u0006]\u001d\u001cZ\u0015\u000f\nIH\u0004BO]JFWX^[%\u001a\u0018Q\u0005\u0015XN_@[R\u001c9\u0004Y]\\A\tD7\u003cUS\bGI\u0002A=\u0007\u0005D\u0000UMO\u000f\u0007\rZ\u0016\u000fRDQ\fGI\u0010A-\u000b\b\u0019[A_\u0007\b\u0003\u0006KTHH3\u000bJ\f\u001fV\u0019E_XF\u001a^O\u001b\u001b]FX^HDW\u0012\\KC\u001b\b\u0004\u001a\u000e\u0000Z\u000f\u0001\u001aIWPW\u0012\u0010\r\u0002\u0007JS\u0010J1#U\u0002\u001c@\u000b\u001fYX_\u001b\n\u0000\u001fE\u0003\u000b]\u001e\u001cK[\u0003\u001d;;\u000f\u0007\u0003C\\AX\u001b\bT\u0018\u0011\u0004\u0015\u001f\u0010\\\u0016\u000f\u001cQ\u001bG\u003e$\fP]B\u001f\u0016\u0017\t\u0019OH\r\u001f\u0014\u0017\u0003\u000b\u001c\u0017FT\u0004Diz\r\u0013\n\r\r\u0007\fY\u0005TI\u0005\fC\u001d\u001bQ\u0019\bE\u0003ZE*-BJY@M\u0000\u001d\u001b[\u0004\u001b\u0007\u001e\u0018L\tE_\u0011\fX\f\r\u001c\u0005\u0011\u0002FVJ\u0011\u0005\u001c\u001f\u000b@\u001c\bY]\u001dX\u001f\u0010VJY@H\u0005[\u0003C\u0002\u001a\u001f\u0002GTB\u0018JG\u0018\u0019\f\u0018\u001c\u0014\f_\u0006WZ\u000e\u0007A\u0003G\u001b\t\u0017\u0018K\u0002\u0004KPK]EW\u000b_VP\u0005D\u0006\u001f\u001fXLA\u0015WT\u0014@TUJ\u0001\u0018\u001aS[l5)LGPZ\fO\r\b\u001f\u0014\u0014\u0005\tJO@o\u0000\u0017\nSHBI\u0002@LW\u0007\u0015\u0011S\f\u0005\u0015JOQ\u000fE[Q\u0002HT_J\u0018L\tZ\u001b\t\u001bKH[\u001a\u0001\u0016\u001aST\bMH\r\u0003-[\f\u0007\u0015\u0003\u0003\u001aX\n\u000eJOS\u0014K\u000e]CP\b\n\u001eG\u000bA\u0015V@U\n\u0011[RW.Q\u0007\fAA\u0012V]-\u0002ZO\u001b\u001b[_\u001e\u0000\u001c\u0006WX^\b\u0015J\u0004FL\b\u001ak\u0001\u000f]fZX\u001e\u0001\u0001JOO\tE[N\b\u00041\u0000\u0017M\u001d2[\\]Q\u000e\f[RDZ\u0000]U\u001b\u0002\u0005\u0002\u0004\u0000k\n\bGM[\u0014@VMDW\u0014]\u0007\u001dV\u0013HTIP\u0018L\nVTVF\u001b\u0000\nJOR\u0014K\u0017UCPL\u000e\u001c\u0019;\u003e\u0015\u0015\u0011X\u0016\u0017[RW\u0007VD,jM\u000f\u0000I^\u0016\r\u0002[VAi\u001d\u0005\u0014\u001d\u0001@\u0002K\nK\u0006\bLGPD\b\u0001\u0015\u0003\u0011\u0014VF\u001a\u0004\u0001@\u0002\u0012\u0004\u0015C\u001a\u0002\n\u0006R\u0001\u001fZfWS\u000e\u0001\u001a\u001c\u001a\u0010\u001aS\u0002\u001b\b\u00191\n\u001cP\u001c\u0002^]\u0011\f\u001c\u0005\u0015\u001b\u0010N\u001a\u0000\nf\u0015\u0018\u0007\u000f\u0017Z\u001aO\r_RZ\t\u0001UJ\u001c\u0011g\n\u0011K\u000e\u0007\u0007\u001e\u001fkV[hVAi\u0014\u0001\u000e\r\u0007@\u0002\u000f\u0018U\u0012\u000fBI\u001bG1\u000e_K\\[\u0013\u0011\u0014JO\u0004Y\u0005\n\\MH\u0007\u0018-Q\n\nR\u001b\tP\u001b\b\n\rY@Q\u001a\u0026^\u0004\t\u0005\u0004P\u000e\u001a\u001fB\\\u001f\u0014\u0013\u0017\u0026\u001f\u0010\u0000g\u0002\u0010MCP\b\n\u001eG\u000bA\u0015P@i\r\u0001\u001b7\u001e\u000bL6O\tW5\u0001\u0019-Z\u000b\u001aRK\u0011\f\u001c\u0005\u0015\u001b\u0010N\u001a\u0000\nf\u0005\u000f\u001d\u0000\u0006[\u001e2DXUW\b\r[R\u0013\u0003T\u001a\u001c\u0015C\u0003\u001d4\u0011\\\u001c\u0002ZPF[%\u000b\t\r\u0007\u0003\u001aS\u001fX\r\u0019\u000b\u0016^\u0016\u0000\bD\u001b\t\u0014KWL_C[\u000b_L\u000eCFL\b\u001e]\u000b\u0003CfZRX^[Y\u0011\u0000\u0001XO\u0000\u0007GW[\u0014\u0000CYU\u000bW\u001b\u0018QH_X\u0000[]NX\u0000\b_R\u0011\u0005\bO\u001b\u001bRP\u001c\r\u0015\u0001\u0014\u0016]6\u0010]CPLI^\u0016\u001a\u001fV_U_\u0019;\n\u0007\u0000\u0010[\f\u0026P\u0005HTIC\u0004]_\u0004\u0001\u0006\u000eXH[\t\u0011\u0014]\u001b\rP\u0012\u000f\u001c4\u001bPLW\u0015\u001b\u001f\u0014\u0019\u0005\u0014\u0018\u0014\u000b_\u0007\u0026P\u0005HTIP\u0018L\u000eBJGY\u0017;\u0010\f*S\u001aS[I\u0014\u0019\u0006\u0000\u001bZLA\u0015ZFE\u000e\u000b\u00147\u001c\u0006g[[\u0003CHBI\u0011X\u0007\u000e\\fZRX^[ZEQH\\T\b\u0010\u0001\u0000\u001b\u0006^^[O\u0001\u0011\u001aX\u0007\u0016\u001b\u0001@\u0002K[\u0015C\u0007\u000b\u001f\u001a[\nO\r\u001bPW\u0019\f\u001cE\u001f\u0011\u0015\u001d\u0018^CFL\u0019-A\u0007\t\u0015\u0003\u0011\u0000\u001f]MQD\u0007\bDOZ\u0007\fC_J\u0004\u000b@U]P\u0005WU\u0018^\u0010PZ[O\u000e\u0007YWI^\u0016\u0001\fhPW\u0014@FIPEPY]\u001b_S\tZ\u000fF\u0005W\fQXQ\u000e\u0019\u0007O\rA\u0007Z\u000bJ\\X_LGPU\n\t^MZY\u0014\u0005\u00157\u001c\u0006KKCb\u003c\u0017"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Fri, 19 Dec 2025 22:27:35 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://st.chatango.com\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adb4650bfc9d2a73d4dd69583b0ceb14","sha1":"1ce399d6e936232aaf2192cd7903a279c5015f22","sha256":"21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed","sha512":"3fbce22572bbed1aada0f7c6706f16a97e7c0ea132dfee1a7eb80f5e68da1cc63c891a5bc3ea8e87f0c97be3002212a0efbb2af9553acb45e0d447a685cd805b","ssdeep":"","tlshash":"436000000c3000000cc00c0000c00030ff300f00000f00c0000c00f003030c0c00c000","first_seen":"2023-04-05T07:30:31Z","last_seen":"2026-05-28T18:02:18.917452Z","times_seen":57170,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":104,"dns":28,"connect":26,"send":0,"wait":27,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\netag: W/\"6482bd64-3509\"\r\nexpires: Thu, 10 Dec 2026 00:03:18 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 858253\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x7%2F863yo45rACyqqcEi9sBmdVplmNDESDPqXNt6bi%2FEzZpbnS%2FST0GEzWuHu60o8iVoHlAVG6HlCKBWmQR5V75NgIN%2FfdAvTcB6HuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee4b2556a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-28T17:38:01.730146Z","times_seen":803394,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://st.chatango.com/h5/gz/r1214250536/id.html","date":"2025-12-19T22:27:39.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"FF:92:1F:D0:E9:98:18:CB:FA:1B:90:BE:3E:B9:41:44:DE:05:28:15","sha256":"0C:A2:FB:F0:F6:40:B0:82:E4:FB:1A:51:96:48:D8:22:C9:05:C4:41:67:1F:41:D4:8C:F2:B6:85:A4:D2:3A:AF"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://st.chatango.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 16 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 270303\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-28T17:37:34.135159Z","times_seen":853522,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/chunks/webpack-9b218dd7273a2a79.js","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","date":"2025-12-19T22:27:32.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripquestapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 14:50:44 GMT","end":"Mon, 26 Jan 2026 15:49:21 GMT"},"fingerprint":{"sha1":"BE:D1:5B:10:14:EE:08:0F:B0:23:46:F9:DA:47:B6:80:49:37:FF:78","sha256":"F1:96:83:66:9D:CE:6B:B0:DF:67:01:9A:55:C3:4F:B8:E2:E5:FD:AD:58:1E:4A:32:39:01:45:12:89:08:21:3C"}}},"request":{"raw":"GET /_next/static/chunks/webpack-9b218dd7273a2a79.js HTTP/1.1\r\nHost: www.tripquestapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 08 May 2025 08:55:19 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AYpYCzlVA9taiJCfhoTe1j%2B0cHvxnElKDweONqmvB8yido8hlWsVPu%2BeshaiuuovXLQo%2BkEBOjsKbrFjKqr9qgQHcdhXw9v6Qw3BdN9GrlN4qQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b0a53ecdbeb0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3452,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3452), with no line terminators","md5":"d3c115a56e5a70e8aefc7eb23aef6062","sha1":"1482f7f8b29c969d134f0de2b2bcfd939b8fddcc","sha256":"712071fcffe88d7ca985992463d328346fc1cab2c3ab25190878143f0578db7a","sha512":"ca114f04f45aaba892bf50b37f3188cecb475c61e0eae0cbcd8382c753f8873d791fbe6003504617b9d00acbc5f6b469cf8ca33da519867479e113b8346d1001","ssdeep":"","tlshash":"4061c5a93625fab556f10885887fc242f619203b152efca0e717dcb9b464ae10562ff3","first_seen":"2025-08-12T21:09:16.66121Z","last_seen":"2025-12-22T12:53:20.463919Z","times_seen":7,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.19.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=8789876781696250658\u0026utm_source=admaven\u0026utm_term=1045621\u0026campaign_id=AM_1045621","date":"2025-12-19T22:27:32.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.19.1 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Nov 2024 07:57:09 GMT\r\netag: \"6729cfd5-1385\"\r\nexpires: Thu, 17 Dec 2026 02:50:33 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 243419\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NLs5TDoqrvAl5VXLMteoivgRQhoDiTk1BxxEpqEOjfoGgDaqKbhYaFifZBUZvgv0rOZpon9u%2Bp4QalrNFNYAAw4c6cPe5bHedXAbGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee5b4856a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4997,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4957)","md5":"e340c7960b814d028961d597494aa566","sha1":"bb4ad494be7f93c6656cace97ec592654e9635cc","sha256":"a685d0414b485e26954f312392f12973a30582e220656d0abb815daa2e41ba9e","sha512":"4946ec14880a9613917033dfbcb1fc544c6acddd96f8b143fee0821b4c9845957c275029d75bea5bf510fa6ea3f8b81e6534e85d069bccd45b4d535eb15ab264","ssdeep":"96:BcsNt0jqf9fzgcf8FD7lCjNVobVDPkqflkxwvT8S2:WsNCjw9fsjFD6N4FPkyXgS2","tlshash":"56a142d41b90fc6735e135c9a11aa731752fc0333d1bb8c1fa22dced98e8a9187a9531","first_seen":"2024-02-05T23:13:54Z","last_seen":"2026-05-22T22:20:20.727867Z","times_seen":327,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/wp-content/plugins/wp-dark-mode/assets/js/app.min.js?ver=5.2.20","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/","date":"2025-12-19T22:27:29.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sportytrend.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 14:59:40 GMT","end":"Sat, 14 Feb 2026 15:53:06 GMT"},"fingerprint":{"sha1":"31:D0:D8:8A:4D:E3:BF:51:4A:83:51:AD:D4:9F:CA:CF:EA:FF:D6:79","sha256":"BF:B9:B8:7D:88:1F:DD:8C:90:2E:AA:A2:8B:32:66:A1:A8:DD:34:18:95:0C:5F:8B:36:94:31:F6:A7:07:4E:DA"}}},"request":{"raw":"GET /wp-content/plugins/wp-dark-mode/assets/js/app.min.js?ver=5.2.20 HTTP/1.1\r\nHost: sportytrend.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:29 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 27435\r\netag: \"1302b-693746b5-32009d;br\"\r\nlast-modified: Mon, 08 Dec 2025 21:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QIiuQFQ8FzC6nSoPIZH9X72QJ%2B5xmOIrZiYXtXMH6n6xal3FyQWzdr76sG0LBEv3nvc86Y78kGz6IBk4IPDSf6YCRoWZoYao14dSwT4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53dd7bb456b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":77867,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25860)","md5":"5dceb2d4539654c5ac62d2feb9da0222","sha1":"42dabbacf383b325223f4266d66c037e14930f68","sha256":"72ba3b88c5a2a7a1ae8b464a9abc31d4e77b0d1f708285e3d2c6b5fff9f7fc91","sha512":"a019b6cab9f5b6cf2f9a379d9a935a82fe1e20e995412ba5861e537f2d555b3b3f89321776062c2209758b39ae87f57894a7e8b6f5317e3ecc9290e01b97b0bd","ssdeep":"1536:2wkiodlECuvlXw1WWccEWRw8h75MdrH8nPdsqzjC4u/5xO:2wkzlECudUcc9RPyKTmR5xO","tlshash":"cc735dd372f56872436309d1e63e4a0af37c0566b8de4498703e4dc92fa5c09bb23e69","first_seen":"2025-11-25T13:05:38.879642Z","last_seen":"2026-04-29T01:34:18.024586Z","times_seen":78,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"sportytrend.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/chunks/488-13f06b7b9ed87101.js","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","date":"2025-12-19T22:27:32.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripquestapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 14:50:44 GMT","end":"Mon, 26 Jan 2026 15:49:21 GMT"},"fingerprint":{"sha1":"BE:D1:5B:10:14:EE:08:0F:B0:23:46:F9:DA:47:B6:80:49:37:FF:78","sha256":"F1:96:83:66:9D:CE:6B:B0:DF:67:01:9A:55:C3:4F:B8:E2:E5:FD:AD:58:1E:4A:32:39:01:45:12:89:08:21:3C"}}},"request":{"raw":"GET /_next/static/chunks/488-13f06b7b9ed87101.js HTTP/1.1\r\nHost: www.tripquestapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 08 May 2025 08:55:19 GMT\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=14400\r\nage: 180\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y3rLTjTYt%2BBdioXi7andZqo8tA5tjUmu0UhUWHtctMmKVLrry8vqshH%2BsZK0sYGqLLzZWfLT1Eq1csiwX99B2rM1w8RUUSHpf4l7gJ9A0lX07A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b0a53ecfc040b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13063,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13043), with no line terminators","md5":"59d7cbaaceb9f146d3b9339870d06611","sha1":"006843cc075fa17a3c548cdfe770ea2bc38852cd","sha256":"56d03b383d8ebe11a80e1792925b90e6c262a5ff448d125077e1a07bc4b1102e","sha512":"378aacae48b5635194d39a88858d2085e8a869b71107a74baaee75277f7c891d0c699e8f5e1a985d909e6c384f4d89c687f78b2488634ed576e53bbe4ca2f599","ssdeep":"384:csUp8LLYVp8LL8eDHMe/Pw1GCr2y9pK6EVqLYFQ:TQyLYLyL8eDPHlCxEeP","tlshash":"1a42520ea24cfedcba724884fa0f540db51f2545cb128c62ea7cac411b65b9872677ce","first_seen":"2025-08-12T21:09:16.656625Z","last_seen":"2025-12-22T12:53:20.467286Z","times_seen":7,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Thu, 15 Feb 2024 16:53:15 GMT\r\netag: W/\"65ce417b-23b5\"\r\nexpires: Thu, 12 Nov 2026 16:39:34 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 3217677\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IX8SXNRLyduj%2F8e8BlcxJcAxIxtyVbZ76%2Btt6mWNlWr6bRjdw6mQ8sM8mBc01zvDMnOQhjUyuqHLuKlfJGygaR5%2B5CkHonHL6Sv4IA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee4b3156a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9141,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-05-28T17:05:34.395031Z","times_seen":252816,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Jun 2024 13:51:43 GMT\r\netag: W/\"667d6e6f-53d8\"\r\nexpires: Wed, 18 Nov 2026 22:49:37 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 2677074\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mfBXoduisT1hObu3hgEFFasj3CSpGbYtvQ3b%2F6DRp84sZ4B7E2V5MFqj8KArsmoeO13jMm%2BkPoHyrGkN5rwUEuQu20TEqMCGW8sspA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee5b3a56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"8fbc22c79d40119dde9a5d16897002b9","sha1":"e9837519aca724457792e2d5ee98a97a0367cdf9","sha256":"7e84c9f8d71bc6eb2dac2fce59a6caea62da51ffa8cf56b41806f59386ab1322","sha512":"3118a198a3710c839c15d6c4b5dc9f9adcd637913af2e26f438b01c80b27281f4937e25aad2817855d8b3eb36207c61ae16d62b17e698799c5316e86f52ac6fc","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhBGX0CiS9rH/OrLrErJ29FkFvd:iS33Z5vK47kv","tlshash":"81a2d94eb246380586f7a2a5402f521fb132e25cb10588ddf468d8da3c7eea95173f79","first_seen":"2024-07-16T20:15:04Z","last_seen":"2026-05-28T16:23:40.250557Z","times_seen":39600,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bobapsoabauns.com/www/images/99a703977e943b8559ffc8e8c6c9b2da.png","fqdn":"bobapsoabauns.com","domain":"bobapsoabauns.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://st.chatango.com/h5/gz/r1214250536/id.html","date":"2025-12-19T22:27:39.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobapsoabauns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:06:49 GMT","end":"Fri, 13 Feb 2026 10:05:15 GMT"},"fingerprint":{"sha1":"1E:80:62:5B:0A:AE:45:C7:23:30:B5:BA:23:77:27:CF:C7:7E:2B:E5","sha256":"BD:DA:C2:A9:EA:C4:6B:B2:C8:71:38:93:D3:DF:34:10:57:C4:48:46:8C:A2:5E:BE:D1:C5:60:FD:35:71:AA:BE"}}},"request":{"raw":"GET /www/images/99a703977e943b8559ffc8e8c6c9b2da.png HTTP/1.1\r\nHost: bobapsoabauns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Dec 2025 22:27:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 8354\r\nlast-modified: Wed, 12 Nov 2025 18:38:16 GMT\r\npriority: u=4,i=?0\r\netag: \"6914d418-20a2\"\r\nexpires: Sat, 20 Dec 2025 02:24:15 GMT\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 72203\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Fip9UgwQ%2B7wbOBljrBBx40daHjWqWVrcqjB81fS5Fd96fVjXKpRJgRItqjN42ABGeuALSz3b2NlzwJOSWxN1XcsgV0CXB8rwIYEu%2BKbxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b0a5418f820b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"99a703977e943b8559ffc8e8c6c9b2da","sha1":"7723d7cd8d07a519d83f083eef9682a0f673d70f","sha256":"312825bac23fd9c0fb39a573dacdd000762843924d1c5456c0f2dd58792698ab","sha512":"3b39a9468f0a4343b58624a99111f1fa4bd37745af89931a7d2caa0534bd91e0c539df7a93ed711c406290fbcd028dce8bf894b38e82707cff76f6c04c18feba","ssdeep":"192:f1bQw9wshJUcCMT7NYVnj6bu+0HOeDRvzHRBtR8+GayPBD9E4qAFqB/z:fuitYVj6bu+QOelvzHRTRfcnE4qg8L","tlshash":"a302afcb7efc6e6d75662e5e0c66889b7d5d325de080845599bfcb328c2f25d81008c2","first_seen":"2025-12-01T19:36:23.427793Z","last_seen":"2025-12-21T23:29:32.616319Z","times_seen":89,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sportytrend.net/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"sportytrend.net","domain":"sportytrend.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/","date":"2025-12-19T22:27:30.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sportytrend.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 14:59:40 GMT","end":"Sat, 14 Feb 2026 15:53:06 GMT"},"fingerprint":{"sha1":"31:D0:D8:8A:4D:E3:BF:51:4A:83:51:AD:D4:9F:CA:CF:EA:FF:D6:79","sha256":"BF:B9:B8:7D:88:1F:DD:8C:90:2E:AA:A2:8B:32:66:A1:A8:DD:34:18:95:0C:5F:8B:36:94:31:F6:A7:07:4E:DA"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: sportytrend.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/\r\nCookie: wp-dark-mode-device=light\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4912\r\netag: \"58ea-692f5aec-1a3ca7;br\"\r\nlast-modified: Tue, 02 Dec 2025 21:32:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RJBtHoVvk%2Bz1%2B61L7Y8MR9Hj%2FNCHN0BeZdujgAfxZhsKE8cS5JYSEZcqM7QPoHl8kRI%2FSmX8ippNl%2FrbzpbBowz2hTkqTC0QPREr41w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53e2ffb056b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-05-28T17:38:01.702356Z","times_seen":247232,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"sportytrend.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/firefox-addon?clickid=5816236252044654910\u0026utm_source=admaven\u0026utm_term=1045621\u0026campaign_id=AM_1045621","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://embedsports.top/ad.html","date":"2025-12-19T22:27:31.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /firefox-addon?clickid=5816236252044654910\u0026utm_source=admaven\u0026utm_term=1045621\u0026campaign_id=AM_1045621 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: http://dreamytabs.com/firefox-addon/?clickid=5816236252044654910\u0026utm_source=admaven\u0026utm_term=1045621\u0026campaign_id=AM_1045621\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nexpires: Fri, 19 Dec 2025 23:27:31 GMT\r\ncache-control: max-age=3600\r\nx-redirect-by: WordPress\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: upgrade-insecure-requests\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6clHSfQR2bg66QPz%2FB5aWrqseE5wjOFbDrdobkgD3jrKQarjH4%2BkHZGUSDXlsAOywIGJnVMHt0NMNcfW%2FZwhPYnjHeWzYcquVyKkog%3D%3D\"}]}\r\ncf-ray: 9b0a53ea3c24712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-28T17:37:38.968108Z","times_seen":15830666,"resource_available":true,"data":null}},"time_used":542,"timings":{"blocked":114,"dns":60,"connect":1,"send":0,"wait":304,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://embedsports.top/ad.html","date":"2025-12-19T22:27:31.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nlink: \u003chttp://dreamytabs.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttp://dreamytabs.com/wp-json/wp/v2/pages/1179\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttp://dreamytabs.com/?p=1179\u003e; rel=shortlink\r\nreferrer-policy: no-referrer-when-downgrade\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DIUwTZWCRAWKdonHs96oxwiUcG3XKNia5OQ3J51o3TlcRUUlp4tTu%2BmTimijRJqrmzlc6kA%2FqUtknjkONTIRRgmRWUcaaRy9Qyb3sQ%3D%3D\"}]}\r\ncontent-security-policy: upgrade-insecure-requests\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9b0a53ea3c26712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Elementor:3.19.1","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.6.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"W3 Total Cache","description":"W3 Total Cache (W3TC) improves the SEO and increases website performance and reducing load times by leveraging features like content delivery network (CDN) integration and the latest best practices.","website":"https://www.w3-edge.com/wordpress-plugins/w3-total-cache","common_platform_enumeration":"","icon":"W3 Total Cache.png","categories":["Caching","WordPress plugins"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32885,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856), with CRLF, LF line terminators","md5":"677ad85a3b2ae8a5db57eb39622645f4","sha1":"984bd3923a038ecc4be6a0bbbe9ed6656ed9b04b","sha256":"10516a2c067bdfdefcb733f0d0a6c5c267bc98702f489d290049f655d7f6e175","sha512":"3611edfcd91402f3036e0846a734e8269acf18e4b3c5017b75d80180a035ffb7ff602c5960e252a2b8ed9721add4475e399406b9726cbb8cf4f929f1276663aa","ssdeep":"768:K0jZdapzL6xBGEosVdjUYPW6N9vWm9ei6NCyD:japv6xBGEosVdjUYPW0vWmL6NCyD","tlshash":"35e2d633b42a04663b5f97aed053331de4d88aa3d640d7f5b4fda02856b0df222e3659","first_seen":"2025-12-19T22:28:12.594243Z","last_seen":"2025-12-19T22:28:12.594243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":85,"dns":38,"connect":1,"send":0,"wait":356,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.19.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.19.1 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Nov 2024 07:57:02 GMT\r\netag: W/\"6729cfce-1cf66\"\r\nexpires: Thu, 12 Nov 2026 16:39:34 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 3217677\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Xv8haqBQV7XolVWp9BxYGN5cWdwubs3O%2BssX4%2Be1j4kvGx3GZx%2B1soamKzJiLq6rV5AUyhv8gjpvJ3vk%2FGl66uWbzKHjUF7CTuWJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee3b0d56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118630,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65496)","md5":"c5b9ebe20f0be886fa487cab1bddc3f8","sha1":"23bfd7cc853704b82e2288fd6f65816b9d52e916","sha256":"6a57cc22ef308177d37421829acb390c809b152020ef0a04fe3508e73d786bee","sha512":"e741094396b3da892a05422d791ce3f4f7bef819731f2c69dbfff9e2ba6695622b3c9919d177245b62fe9cefa1fdaabe0a93f75347284990cb853720139a3d19","ssdeep":"768:tGnP5Kb3tgnl6T5sZQ8tQfJjCqn/0ginSla6T8L47YwbuXh7+:tGTtQxWqn/snSla6T8L47YwbuXhS","tlshash":"83c353923d07622a662f5e3f4a87769c53a445c1da437ad6f442c413d2feee1372a823","first_seen":"2024-02-06T06:20:16Z","last_seen":"2026-05-27T18:28:46.242676Z","times_seen":233,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dreamytabs.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.17.1","fqdn":"dreamytabs.com","domain":"dreamytabs.com","tld":"com"},"ip":{"addr":"104.18.9.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dreamytabs.com/firefox-before-you-continue/?clickid=6598704413605621485\u0026utm_source=admaven\u0026utm_term=1229910\u0026campaign_id=AM_1229910","date":"2025-12-19T22:27:32.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamytabs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:36:13 GMT","end":"Sun, 15 Feb 2026 12:34:54 GMT"},"fingerprint":{"sha1":"76:FD:4E:11:F3:67:97:A8:90:C0:6C:DE:AA:A8:C9:9D:30:C0:9D:4F","sha256":"23:BA:65:22:BD:39:E8:FF:FC:95:3E:6B:94:6A:6F:C7:67:C7:81:A3:3D:FE:3A:4D:0B:B4:0F:AF:90:F2:56:47"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.17.1 HTTP/1.1\r\nHost: dreamytabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dreamytabs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:32 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Nov 2023 11:26:34 GMT\r\netag: W/\"6554aaea-6062\"\r\nexpires: Sun, 22 Nov 2026 03:23:11 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 2401460\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XhmySWRP6TCsf6xMN8DINSNlepku185UndLVQdRDCgIXzTlOTGSV7X1HaXCJVR3uNWgPi9kuYrxCcguWBB1vKt%2Bepk62PvyWtQ0hVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a53ee4b3256a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24674,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24630)","md5":"59ab277efa930785720a63e9007677aa","sha1":"144750f1e4d88d5d0bf93704ffebd349dd02e653","sha256":"c7267d9f9b72944e2b3772a521fd1b8882ca17b124de63549fbf591167efbd25","sha512":"153577744897d8e897e0321d562ab727fa71b8be776da89a6e3443618ee58c952e50d23b90b7f0e275bb3626452947b20df4dbbadd82c1fad1c5e23355b90169","ssdeep":"768:gTLX+EV2m6SbdndptaQ9HuGJswyV/pkTAQYtDT6HJiwknOsN7KOljuOzQYqEbzGv:gtV2m6Sb94Q9HuG2iiwkOsN7KOljuOzS","tlshash":"71b2d8063163a87a50cfc157e067420e7b374895740570ed7abc6ceba5b8d9a32eb335","first_seen":"2023-11-01T17:10:30Z","last_seen":"2026-05-27T13:00:04.101289Z","times_seen":2130,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripquestapp.com/_next/static/chunks/873-70d5376a1a2f81bf.js","fqdn":"www.tripquestapp.com","domain":"tripquestapp.com","tld":"com"},"ip":{"addr":"104.18.20.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072","date":"2025-12-19T22:27:32.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tripquestapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 14:50:44 GMT","end":"Mon, 26 Jan 2026 15:49:21 GMT"},"fingerprint":{"sha1":"BE:D1:5B:10:14:EE:08:0F:B0:23:46:F9:DA:47:B6:80:49:37:FF:78","sha256":"F1:96:83:66:9D:CE:6B:B0:DF:67:01:9A:55:C3:4F:B8:E2:E5:FD:AD:58:1E:4A:32:39:01:45:12:89:08:21:3C"}}},"request":{"raw":"GET /_next/static/chunks/873-70d5376a1a2f81bf.js HTTP/1.1\r\nHost: www.tripquestapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tripquestapp.com/firefox-addon/?clickid=4910579670831158697\u0026utm_source=admaven\u0026utm_term=1230072\u0026campaign_id=AM_1230072\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:31 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 08 May 2025 08:55:19 GMT\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=14400\r\nage: 184\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WnKjs10e%2BfPTCtWAtoPFbBbDjfIz5saTDDURjB8glXvWjgR4z%2BNqjVJ7TdC7pIvvfKcKakxABnLwEPY8iEwNq4QE5liA8WEGnCUCoEQfZf58sg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b0a53ecebfe0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1735848,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ffe5af9f2a34cc8b589fe3942903dac1","sha1":"59e11d56fd0159bc883b868df5c01d7c3356ed87","sha256":"1d6cd6e57c74b1d531cb0c4886f0b2974a777efb696f5742e8cf4f98d50cab2a","sha512":"e9bd2d85c17dfa4812ea768d4d66a9f497bc588f1d5eb1f3d912520dfdd445369791d7f183757592913d54269a321348a186d478a6af9422dfe4f5d5dd6ebd27","ssdeep":"24576:y/UoOBKnoUI/yMUNF1c1T6mbos4ZbMpE8bkFqjjD:x1IS54l+IoD","tlshash":"c325ae662c4d573eb22d0c6efb07613e7ea42cecba8c5dcf689f30e9c9968549151c90","first_seen":"2025-08-12T21:09:16.666602Z","last_seen":"2026-04-11T21:10:00.661212Z","times_seen":8,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://st.chatango.com/h5/gz/r1214250536/id.html","date":"2025-12-19T22:27:39.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"DF:9F:85:F6:4A:53:64:E2:D3:A4:9C:9B:0A:4D:88:F2:DD:8C:92:6C","sha256":"99:65:94:2E:11:0B:3A:F6:B6:E7:38:F9:58:D0:01:2A:B6:CA:D4:2D:38:BB:87:ED:72:23:CA:63:32:85:95:35"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Dec 2025 22:27:39 GMT\r\ndate: Fri, 19 Dec 2025 22:27:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26935,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"51e82f70d1b655f1447b6881fc12c970","sha1":"d07fb502aaf2635cd74dd1ad42d916b2bfe923c1","sha256":"9c313d568db4279e917f0ed107f57397c1e14d5e2f29667f207f31c409658440","sha512":"60b0345cf672afd26c41e56155e3fefc18e6f92e1d969f25dd33d6aa5e49c624e7017f9dc49d5f35ba2f85886546c1fcb93e7303d045618e3508bb3f0f6d1e5a","ssdeep":"768:DFSFjFGFUFB4FiLFZF1Fn8XguBSivFRa1KRzBfiiMgFK1GIBEiNnr7gr8yBOijh1:WCJiWp","tlshash":"8bc20fa1041b500057834ce223cebf34fe1f52507142d0b5abfdab6badcbc6652693ad","first_seen":"2025-11-19T00:27:59.992265Z","last_seen":"2026-02-19T18:18:33.653497Z","times_seen":1142,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sportytrend.net/c1-jake-paul-vs-anthony-joshua/","date":"2025-12-19T22:27:40.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 07:43:05 GMT","end":"Sun, 01 Feb 2026 08:42:55 GMT"},"fingerprint":{"sha1":"BE:9D:76:9E:9E:2C:F2:8E:38:C4:E9:42:11:6A:45:24:E9:59:0A:5F","sha256":"D1:C5:0F:C4:11:DF:FE:54:9C:EF:8C:40:56:6C:79:4E:F3:E6:0B:24:15:B8:E1:60:2B:49:C2:41:96:C9:79:83"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sportytrend.net/\r\nOrigin: https://sportytrend.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 22:27:40 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b0a5420882c569d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-28T17:38:37.112406Z","times_seen":91846,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":43,"dns":21,"connect":1,"send":0,"wait":109,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}