{"report_id":"e13fa50e-893d-4331-a9ac-1d45187ffd99","version":6,"status":"done","tags":[],"date":"2025-12-03T13:40:07Z","url":{"schema":"http","addr":"cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":0,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"title":"Shape Your Career Path: Take Our Survey","dom":{"size":124795,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"56e4b61c306fc03e8024c195c3ca6920","sha1":"2e7dd9b909229f5df1da5742d837aa77c408302c","sha256":"f2f321b35c24b414c88c3a1dd52ac027ece78146901727214dbe5585d146bd18","sha512":"fb5ff6d8a1a26febd3ebce71d44ee597e906de6963b3675f5f401c3e4995a474e526d073d3979e741df405922e26ddd9b3c076c845923e74b7a6f431c52ade2a","ssdeep":"3072:iYGfrfbvMqgHzQeaSIgIhBTs1qcFTi9IP+ssj2Jb4:dAfg5H0eaSIgIhBTs1qui9IP+ssj2d4","tlshash":"09c31a4b96b306292d2e77a0d092fb04e15bf74ff7e67bd4687900216bc25d93a73680","dom_hash":"domhash335194464a38bdc109ed72cdcb0f9fee","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":0,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-07T13:40:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-03","alert":"Sinkholed","trigger":"cdntechone.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.yxrcr.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2022-04-19","domain_rank":0,"first_seen":"2025-08-13T23:36:23.150529Z","last_seen":"2025-11-26T09:47:37.317465Z","alert_count":0,"request_count":58,"received_data":617701,"sent_data":24436,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Astro:5.12.3","description":"Astro is a new JavaScript-based static site builder.","website":"https://astro.build","common_platform_enumeration":"","icon":"Astro.svg","categories":["Static site generator","JavaScript frameworks"]}]},{"fqdn":"fmscc.com","ip":{"addr":"104.18.37.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-03-03","domain_rank":56637,"first_seen":"2025-05-23T16:04:51.866057Z","last_seen":"2025-12-03T03:09:42.918236Z","alert_count":0,"request_count":2,"received_data":2467,"sent_data":935,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"datatechonert.com","ip":{"addr":"139.45.195.253","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-12-24","domain_rank":17968,"first_seen":"2021-12-24T16:44:17Z","last_seen":"2025-12-03T13:26:07.944614Z","alert_count":0,"request_count":1,"received_data":482,"sent_data":551,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdntechone.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-12-24","domain_rank":31929,"first_seen":"2021-12-24T17:09:58Z","last_seen":"2025-12-02T15:57:46.521526Z","alert_count":1,"request_count":1,"received_data":17282,"sent_data":378,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-12-01T03:02:39.026329Z","alert_count":0,"request_count":1,"received_data":834,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/fc03843e1-uKiSnrbr.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ddb08ad6fcb495956ecb5a55ba472d9a","sha1":"c5ddb6e22c1d5c337d4a6fd5acfaed754027b2b3","sha256":"8b7814b13adc6d7caf9d50533aa86899827e596a04ac827d2f276294a05306dc","sha512":"7688e93e884751699f683cece75af94dafe4a219c19ceae2fb3d90f38f2e63abf4668bfbe2000b3735f28c567801580d06f0d27c73289abcd8e758b0a3cc9dfd","ssdeep":"","tlshash":"e3e0e5984ae09ad9419e26ded616540265c81863179c4f61a6b80a382775bceca08347","size":421,"data":"","first_seen":"2025-06-24T19:07:51.329462Z","last_seen":"2025-12-16T11:57:19.837877Z","times_seen":1806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/p372743-Df4R5fHR.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0642319f3c49337628a14cf7ba6c1af","sha1":"5b89e792bc5299012956abb0d86add9f88cb79d5","sha256":"af300047142a18cf9d6ea731062479e99421b3ebf366ce78824e2cc3490b3960","sha512":"224cf98559534f48eac74a80992ebc1d75d608c0c9897fd590532a69befaefa6c4431fc35817fe4683a63f94c91cda2135db4426b2ea2f53de0b4556f6868e58","ssdeep":"","tlshash":"a641774175f96070c7a119fec1701132b539991337ac8987a26d29342fa7d5af127b23","size":2071,"data":"","first_seen":"2025-12-03T13:04:46.209011Z","last_seen":"2025-12-03T13:40:11.14492Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/s915559a65-DQiv_8De.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"65257e3a239e73818afc43635d9672fb","sha1":"7db92460c1b9cae0a357c85d5dabc81b064d591e","sha256":"e26637f9430ceda7ec904d0d5b9a9b19e5f65b35ec5859105260b4e9b0477f99","sha512":"d0608e05b26614dbe4831ea1a8ddca2ba9da145e41d56bc73ba1933e86fb321d8b7a79120093c28a12a3d625a832293b0261532a65fa04b60f77f207ac1030df","ssdeep":"96:u2xUzz6zuxzFo4Bb9QQMqgNS7SH/GSxRq2:u4UzGSzFXB1Bl7SGYg2","tlshash":"9291348fb57920fc7a97c69da133e1a31a3725152d89c1b4e4e74f380760289a33bb47","size":4306,"data":"","first_seen":"2025-12-03T13:04:46.142576Z","last_seen":"2025-12-03T13:40:11.128319Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/a6e8fedad5-QJ_l978d.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4a4d0e660f2578fad426b49ba6e2e22f","sha1":"909d0809774b67a102235a5574404f1b7a8c6c6d","sha256":"d39aa886af4c9d8d85e81589cb380b06ccdd92372a074d57fa4a933cfbb8854f","sha512":"cde28ae2c70b4237ae0ee3eb02d16d97882cf8756524bded94bee023173d20feb95de9d339ae22a92fe448e5e84f9ebaba5c188a4808b04c050dbf4bc2509f1e","ssdeep":"","tlshash":"112167c9b1e043ad490710edd73d500a38960263df9d8b56e2fc237c1f9789e9a15bc6","size":1172,"data":"","first_seen":"2025-12-03T13:15:25.459822Z","last_seen":"2025-12-03T13:40:11.135474Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/de5498b5-B6Jq1Bz5.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"34e17f0d6aa3bb03bab437b44958433f","sha1":"18124da5a3b51c530f84d12b614b8836b8856ff2","sha256":"b243b2c9267161756b9024c30cfbd774a523db53a80052c0b1d908f193959b14","sha512":"06977bc6437bd0f93c58aca61aa9ba42293d302a4cdb77832ec37d07232653346bc7b3158f56d0ab71307ac8b7a60b5e2ae02b946a2dbf4f0c299e1748aa4ba5","ssdeep":"96:j9H73icAMgCa3Ies+NFHAJw5jfj20Dpf+2zS8dwCyT:5H73hTgCEIeNdAmbv7S","tlshash":"08c1765ce1792578b02b9ddcd63a121767353323e989daf0a4be2e2013c5b4467867f3","size":5688,"data":"","first_seen":"2025-12-03T13:15:25.475815Z","last_seen":"2025-12-03T13:40:11.162444Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/l1bef1d752-DmsO4YX5.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a36249d23ea21e6750b0c73a821954a3","sha1":"bb20f3ef3be926971f4f35d22dfc16cfad816e7d","sha256":"ac29acc46fef57c20ab6535cd099316ead157ce41738b0d3f54304139b8ca0a9","sha512":"a93a39644d1e11c474416b7cf1a219f7e45f3c260808c6cec547288223b0f559cf6a1d487f57829c89f6ca493027d8e34e77a1b064b774863d2fb4f8a25bff0a","ssdeep":"","tlshash":"f1f05c895fe41a588077239cd9225540b38a0437678d0f61a27d1a3b63aaecdc840283","size":451,"data":"","first_seen":"2025-12-03T13:40:11.147867Z","last_seen":"2025-12-03T13:40:11.147867Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/m7d2219c0-BfyeUlAM.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3427fbbf741cf33a72480ddd8bfc610d","sha1":"1122da34ca5c33f86122e4bee862615f685dc79c","sha256":"c288faa16f6063d02a6dd3c0721298a7a6eae69211444717277ce1641eeaea84","sha512":"aaf0797fb609f5dac2cf74f34ba4f6cb0656d0ffd614399b0ed2a3b9b3e7470af12a1530c6b49a77fa46fb81234a91f9a4e0a11d4d340e0e083c4572e2d8755c","ssdeep":"","tlshash":"94f0c07a06f01a99c11b26eec71e5351307b416ba68ccf22f1bc17341f61eade911683","size":550,"data":"","first_seen":"2025-12-03T13:04:46.190455Z","last_seen":"2025-12-03T13:40:11.144176Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/cb475a-D56QfEdH.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"672719d308937f306ad0460f95e21043","sha1":"73128c4580af1fc643e1e258aee5810cb4682876","sha256":"532df177aaf1a553fd382ad09e4d57a1df650748cb8a07dbc61e5c8b5f008a80","sha512":"75efe0c8daa535b26a98e6fb6f6d8f5eed58ecbc120b01b5a9aa1fcea39221717b251004bb8cd117c719797d8c976913e751378a23fbf7728f1e0d6226ab5b78","ssdeep":"","tlshash":"085196bf45d4a879054db29dd636d2a23e1838423c1dc4e2a87c4d2d67e60d6e239f2b","size":2742,"data":"","first_seen":"2025-12-03T13:04:46.199808Z","last_seen":"2025-12-03T13:40:11.164661Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/y32a846-BINv_GMi.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a16a7a10da88c28f5be175a314d8781","sha1":"ebeb01bd23a323583b36f46e12b55c76b81a4731","sha256":"3c60799e90619d8a7978f12da3d3f24288472678f4d6d01d1b5e3d96b3d70861","sha512":"3526966f27bdd42eb46c2af599e7a89fc1a250fb0bdb3de8d854132f0b5ba70bc6846b6513e9a6162ce1a8159d4607dd77fc666c399f27a6d1973ef5adfa4084","ssdeep":"192:53kDqH0Dx7bCmX+R/9W17qSd1EEsOeDIuX3eJrsg5Oc1s0RNnyWvB2TPm2:53kDqH0Dx7bCmX+R/97Sd1EEsOeD5X84","tlshash":"87022b6870c65d3cd0c64de9a9a4c025b63e495de48bc58ee39d6cbc01d9a01a2f3f8f","size":8873,"data":"","first_seen":"2025-12-03T13:04:46.179567Z","last_seen":"2025-12-03T13:40:11.11691Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/aefad919-9oJLFYXt.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"1f791ac2958156aeb24e1321949a1f53","sha1":"4697d2199e48a9bcddc6e7d3992ea93e04b026ea","sha256":"4d496ebd48dbd3cd3273df2ff800672181c02e24fb56b816ca281e3f1672f727","sha512":"fd86d53e15c35bf1e90594d3875a5efff4f7f943e34091058902f5e82d005c8eaa0a436093cd164e5f850a542af0f96b6338e311565646e8c29115f0c7d2c4c9","ssdeep":"","tlshash":"8951128fd02610595f94cfbdbc7525273ee6c22a3dc6894863c4943c01e8bda227f7a5","size":3070,"data":"","first_seen":"2025-12-03T13:04:46.206249Z","last_seen":"2025-12-03T13:40:11.118502Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/j459e88-Yl1rJNuc.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a867c819db02e37accd117e82196a17d","sha1":"2869305920b302f6e314d16ca6ba038e0f1e6b4b","sha256":"35405581e2f7c3fd47734f35a18f102e128c090acb8d9062074ca9f0bd5a73d2","sha512":"35866d50efc4f03b26378096eda180b7310dda466da5b020cc30b82227684ffeb48c8ffd974bb192688a18f4bb81389c61c7c0d4c279410ccedeeb14114ab035","ssdeep":"768:T5FCDDOqykJ7QNp4N70H1KcvXCyLHWxA9k/eWj8kcj6tKwtZHNMSgz6lDNwnfZRc:zeqs7QX4qz4PNcj6ftZHNMSZZ","tlshash":"3e534a687056203a03ef51e6e0bf6a4bf2356912e48dc644e316cef06fb465d4267f2d","size":63522,"data":"","first_seen":"2025-12-03T13:04:46.159396Z","last_seen":"2025-12-03T13:40:11.11773Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdntechone.com/stattag.js","fqdn":"cdntechone.com","domain":"cdntechone.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80d7433dbc2b7708f2fa4e6a9943a116","sha1":"350c6e2bb1cbd07de260856f918f4ececcd96894","sha256":"54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251","sha512":"6c065d9d4d04b7c4a11ae28751a711a064410055e1db34daed1c74d98f0257a304481bbf2af96b0845075f43d43bafeab34a49241a2a63f967fc0867748f6052","ssdeep":"384:WDC77FbFjbRN8h+eYFCatOJ39BEisNWP7gDhlPQ5EKQIkT8:d771Ff8h+eYFC/JNYa71","tlshash":"ac72e8c631a474afc6c292f04a7f092ef768509060be2986c1d5b4ec5ab51cee7c3f95","size":16490,"data":"","first_seen":"2024-07-11T14:08:01Z","last_seen":"2026-04-03T10:34:56.693266Z","times_seen":9003,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fbb7dbae3c20bc81da1b8bf41c13e8e","sha1":"f333d36b1dbecd026483e78eac843bdeb2dde04c","sha256":"eeeffffc79c48f4fbe510fc3fcdae29885a18a48ae121968e03fe502fb48fecc","sha512":"1e82716fa5da363b595ffc7b569caaa347df281bc89fb9d62dd89d2dec789280d9574694f6f78d250922e8d0d3bdc8a637f5748d7c4f4e5cb4e5465106542e0c","ssdeep":"","tlshash":"9ff0998af3c8b623410666e5321b801be67e1851b407a864a0a088e2ac7a449c189f3a","size":636,"data":"","first_seen":"2025-03-04T04:04:04.143618Z","last_seen":"2026-04-03T10:34:56.738183Z","times_seen":3281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/z991d8185-BuU5c0SS.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6c07a5ff1e8b338ad5e57395f7407dff","sha1":"6f9ce70983be0a78131dba6467cf48a0bc01767a","sha256":"4917d986434237ee6f7d63ff93137dbd8170e4922ddbcc6aef5f6d091afade34","sha512":"f79f843b2ebc71b91a5650954c604a8d82c8ac8e20faf629674c20df48f8939a8397614b8e90e2d00d6888e762c4ea5c4833445fccb73109fac0191ad0c6438b","ssdeep":"","tlshash":"9d61236951f93f6f4c9b27f6424cc10f1e2e988ba489d630ad87cb2cf95848c34b1b61","size":3230,"data":"","first_seen":"2025-12-03T13:04:46.145127Z","last_seen":"2025-12-03T13:40:11.097166Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/b7bd656-BR6NftF4.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c36265df290dbabe13ba8ed60c2047f5","sha1":"4c31c20c18b69fdca2a8b0ee8d2ccbaf6cc9c1fd","sha256":"49232cc3149a243190cfbfb024bfe8629cfe2634e7eaa1158fca7e109f1a7942","sha512":"4a70a68915a9715d06eea0c5449132e508e0e8e4b4a861853f35b95f89d7c0788919e9f2cd620e08035cdf0276f76be2a98077dae71ca16efb575c04f5f233ee","ssdeep":"","tlshash":"64410203b132d1b56156698bcb61720efa709b672aa8c5b4fc344c2057da58b8b2e729","size":2399,"data":"","first_seen":"2025-12-03T13:04:46.184798Z","last_seen":"2025-12-03T13:40:11.139703Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/c8f18c1-CsB3X8XT.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b80dec40b25d8c515b2aeedae1cea7dd","sha1":"113e0819e7954326f5bc9a59c3ca14de25d10a39","sha256":"631e353bdf6acc2a69875faeb1b3821b37a1cf532c4b6e8eee6ad1fa5dc7e527","sha512":"ab34072d6576f37ba23dbec07ed043f33b765b559da643663066b419e6aac0b971c18402d3aa5fd448980aef82612bcfff0ce57d2250c6eb6271910a2b05410a","ssdeep":"","tlshash":"8921618e9c7091fcc03a8dfce116e032871837af1649c270854e4e75132168ab63b703","size":1345,"data":"","first_seen":"2025-12-03T13:04:46.161727Z","last_seen":"2025-12-03T13:40:11.152493Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/i1ffb4cb2-BRXSBCPo.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8173c403eadbb5f817eb003934878ac3","sha1":"9592314f4c3b05b69846419f6fbf0e90e4cac384","sha256":"bfd90fe2b9d078b1086b66a61a8bb7695404e64acf7ab3dc524182405308218b","sha512":"c40d51fa0dbb83bc2e47fa274bf35d72cba8feb534ffa1fff0c356d700f073a711216b67b5af37e4d2b98ee3750f78423e435f57235602cae10ee742b41c2334","ssdeep":"","tlshash":"eb41956c81f881b4c1d56beed226f932349a4833346cce95d27e8e3417bee9561b4632","size":2194,"data":"","first_seen":"2025-12-03T13:04:46.211983Z","last_seen":"2025-12-03T13:40:11.160601Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/a065ddf3-B9BiO6Di.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d0878aa0505a9047f67087cc9164dba7","sha1":"3878cb46e8142ad8c9adf5cde22b626829a1fb37","sha256":"a70e937699764a13f0bdc7a7bab285eb220f2dfc634e10ea29f92cc0c2b3ca81","sha512":"88e2852c475c8fcb02f3fe9f32f4fe200c9f3036ee103afcb6a06dd6655e2bb16c2594ab6d75ab76595367c3ccc62daafaeb4b3f20393a6e2ea9abc283dabf51","ssdeep":"768:1kVidN2wzomSfftqh2vprvxWhMt3gBInlCEkkq2ZBC7ATx+EvTP1fNKLVtp4zvKd:6VzwzVGWhsgATx+E6WbhIxggfPw7w","tlshash":"d6435e9ed2529fe989b31788b91c2a11b32d0d0ded4891a0ecdf0f16176ec87217b79d","size":60460,"data":"","first_seen":"2025-12-03T13:04:46.151268Z","last_seen":"2025-12-03T13:40:11.146101Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/d79f8f8-DBTjP6tj.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"31633ff8d887abbedf32a0ac2e3e7390","sha1":"2ef9d42ad7e708e89329d95f8f8628b853e5be40","sha256":"f79ce87bfb9f83eede017de7df18364d997b64df259e434bf9d33eea9362dd37","sha512":"8e814678ea74e4592c32a5086ce0540bba1629ee4035e0af4f18e56d6ffe5fef68848a542a11325cdfacbe7e21d7a67198f2a204e41d662cbba7b2993f472f56","ssdeep":"","tlshash":"d2f05c8466b40e94815a23acc382d541359f0173529d4f11f1bc4bba937afcde900383","size":452,"data":"","first_seen":"2025-12-03T13:40:11.122954Z","last_seen":"2025-12-03T13:40:11.122954Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8dc0295a18a3b4af7d7f4ae0ed4aa4e8","sha1":"e94352347d7087e6a4ebffdca78f4a1e189cdbeb","sha256":"1bd536279d2baabca4f3cb4cd61600346da01c00e0b010cf45171e5761242ebe","sha512":"a61c436276d6e1688c8bf83283e38c600ef8d9d9a745a446965ebd9c5537db20d5beadf0a5a6c0b75c996ef796a4545a278f9cfddad6da83ea27663da665b333","ssdeep":"","tlshash":"fd21969b531e3348b820e43809bcfa10910f5ca868e9500e9ec34e856521f1fb9fc9b9","size":1149,"data":"","first_seen":"2025-12-03T13:40:11.166522Z","last_seen":"2025-12-03T13:40:11.166522Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4c1af0f7b285642bb8af9be1358ccdf","sha1":"99684de7c628cfb3226e2859359829cd59044f4f","sha256":"1232c8f0c830c49e369ad8e76abf02d09bf431195fc82201480edc1515c217db","sha512":"b474f80e218865474416415cc857664a6f1e0934a4aa82ab217111f4baba262f92b0b9b69c5e5eeff8677b28bed39967e8752d16310a6b2d3bb60bd431603fcf","ssdeep":"192:8r3c1SyRoFCbsFOEzBr4WuVuYoe21WUfcdova4EUAMRjlehEeVGcnW/RGGb5ao8o:8XCbPm0WuVuYoe21Wucdova4+MRj8hDY","tlshash":"d922d6463ee7f2412e2467b1c07b9111b3f25952316ab192b91b7522786108fc3f3fba","size":10465,"data":"","first_seen":"2025-07-24T08:17:40.839961Z","last_seen":"2025-12-09T05:17:14.075084Z","times_seen":1721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/o1d8f7f-CMHktH-V.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ced4e4953b4c78cbc95f2fba186e2461","sha1":"6426ba25b2fee237476d54bbcd0a863ad23e1c8c","sha256":"8b2bf95993b7a3be15ed27e9a3df47819e11bcff50948bf8156a531dd6bee36b","sha512":"27a641b90f3bc9bfb70392c87d94c1e247fa337edbb0095046727f1459b1eb29d3f8d61ea4aaac76ecf5fddf2f9a2907e56ea56e7d82ff5177a689f2db4eb757","ssdeep":"","tlshash":"cb312e8926e16931845920edf6377081f0be2066758e85d0c12d4f363a9d8cfc275a8b","size":1750,"data":"","first_seen":"2025-12-03T13:15:25.499381Z","last_seen":"2025-12-03T13:40:11.159724Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/s26e8bb97-Vh4d0FP1.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f3186f33f422f775fdd0e59306486384","sha1":"6ad1add52502ffde8eca6c0e815cbf134f9f3ea9","sha256":"0803e0a62fc35c078991623b7aeae877d905ce3c36317f7cc09010826bc35ed6","sha512":"62456bb368acfd0ba4774e0cf95347f6adcf63615009eb07424b477984317ef4422191f22db2b6e387d3c61a2bcda701995f59002c433bbd4b0f53202e4a504e","ssdeep":"","tlshash":"a4f0208d86f16622008e53ecc106504329401317e3cc4fcaf07c07342365d8e7616b43","size":553,"data":"","first_seen":"2025-12-03T13:15:25.513304Z","last_seen":"2025-12-03T13:40:11.121487Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/d42e812fe-6tHt3BX8.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"273e9dee4157167ef34b4d1766925d7a","sha1":"9ba3762d2e9ec83246e0ae766b3ac6dba290ac98","sha256":"0f2a23660e6e4d20ee2c07bcd23f6bd621c85b660db654275724e0dd4b18df26","sha512":"7c72c20b9cf1083fd0cdb5c234848bcd5ca254381de256ecb9a7cf5ce733c37fa35ae28b3466f28df712ccf7652e1365eb9fd51ef68805db5dafbe35bf584568","ssdeep":"192:Cq3k+aH7QVbXtWYSNoqRwTMUVkQQaiESpfxr3ceQzez8L:j3k+aH7QVb9PS1UMUVkQQaExr1Qzez8L","tlshash":"4802080aa1700bbe74074ce8d4b1e1164335af15d64eee68f69d0a2536e810823df79b","size":8707,"data":"","first_seen":"2025-12-03T13:40:11.13193Z","last_seen":"2025-12-03T13:40:11.13193Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/i36b4f59-aO1gXv8i.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"34fb28722ec3993514519887130f79da","sha1":"e85237995b9b18b8a48f7de46f200b4cbba1d88f","sha256":"bcaef1f75b4adff777a26162e7545541dfffd2fb761421ef4fcf23cad0890bd5","sha512":"8d2dd4eec5cfd5179c719958357abc189373025a7ecc7ff98bc764f2dff9da0099e1342b9eb277361c4c76e39c9b971bf40d45749487f4db083537506268f889","ssdeep":"","tlshash":"a071c8cdc8e5c478519e22da5028126076be8f1b753d8384a17d0f398f5de0d9086f6b","size":3729,"data":"","first_seen":"2025-12-03T13:04:46.216133Z","last_seen":"2025-12-03T13:40:11.133643Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/b92c2f411-DlmV8hFi.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b31003d37e0e740781dfa03b77122031","sha1":"68add70c2c03b9296fc1c9f93ea631858cc93f75","sha256":"25cd170387d91749ba79e5c5f3fbabc8ba6d86e0d6d9b9ce21b8d5e539b23cb8","sha512":"a713eacb1c95e385bd8e3d6b3c5befef370fc0bfee53da82e2d11bb10c1e330265aafd37d73dc5676e06f6798ce2150e3942b1c1297efbc9edf23a58182697be","ssdeep":"","tlshash":"9b211181b2b2b07807f9579ce4223343f5554a2513ccc7d0a1ba027a2ed4d9b9c3061b","size":1348,"data":"","first_seen":"2025-12-03T13:04:46.186578Z","last_seen":"2025-12-03T13:40:11.158776Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/t357516d66-BiQTmzQ3.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78e7250156bb45f54826966604f16e56","sha1":"526275a719446761857803a38b84e83f371ae913","sha256":"cd18ef51ce30ee83fbfce7b6512da11f279a2192147943d9b51a4fbd84554b13","sha512":"51011436d3c44e04bc633e0d4f581a5d02544cf3f6b54666f8c9084cb3135d58035b7ac6fd09c0fa30eb7d666a7b0f34eb12e8a366b6e4047b79e606960066a8","ssdeep":"","tlshash":"1c41b7a9b1652b7cf00f444ef62d828bf017b786db4dca50f0bc49192b198917747f85","size":2205,"data":"","first_seen":"2025-12-03T13:04:46.222704Z","last_seen":"2025-12-03T13:40:11.119977Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/b9be5b00-hZTFctWr.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"5168ac7ce5687b5d02f4aa08da5033d1","sha1":"36690d1ff547f5c0c401fb16531614c2613db85c","sha256":"5fe83c9811ab707a7d931a89f4b1dc69babf4114e5322745b04f3e516886831c","sha512":"0f85e40e3b53fa242bdece3593072e37c3d861dde2a7c3f80fe7951845cb16a055896c26dece8a2ac43f786d72783a4d6792f19839f41bd23f6c8317dcf01ad3","ssdeep":"","tlshash":"3c31658dd9b062fc41aa09edc15ce921232d02576a89e6e0902e4f39172eecff117b43","size":1503,"data":"","first_seen":"2025-12-03T13:04:46.188603Z","last_seen":"2025-12-03T13:40:11.124532Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/c488ba53-BzfKEHqB.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8e7a55244faa33389a8f0bbee91c750e","sha1":"527848b041e2a36ac7cdc7cd9c7b416f2fc1fcbb","sha256":"be547f36a6daf0a3ae7fad5ff074c037ce90b3676c6cb12eaf2d1df1e29a509f","sha512":"e6c2418d41e33681bfa1f66989ea4a6a72722cf7cecb34bbc7dde4619f0168689a0e2697b0ae43ef303a6564d05e3adb6fb33e589a3bdde93029375e974edd31","ssdeep":"","tlshash":"3031b9bd44b94c3872cd4598a6395a022379120374e88e57e22adbe0165cccf8b1673f","size":1870,"data":"","first_seen":"2025-12-03T13:04:46.226812Z","last_seen":"2025-12-03T13:40:11.161503Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/f54b30-RhhnAy9W.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0354a168acef75c51bfded9c9f55251a","sha1":"0e27202beaecbfd208dbb0430de7b5a3cd6a6479","sha256":"70846aeaeb273a40730db02d62a92cafbb94070934808287f2071f8b20a3b482","sha512":"9f3639f42a48f379b70a5efe3616870591de3f0aa84e1b646f9c5a0074ca425cb0866df48555ca5ee077294e67b42a5be63794d33148d329078152d17b13a4e4","ssdeep":"1536:pr2RivKGOUC9dpjXOnlVS+NLcgzAyOx+XuPqTeJcvmzhRQ8:piRMnlM+NLcgzAye+XuPqKJcY+8","tlshash":"0a63f88b3391a1145ba9409514ba0443e399fe9e705994e4f6ee54cefb8ccc5f23bb38","size":73303,"data":"","first_seen":"2025-12-03T13:04:46.148734Z","last_seen":"2025-12-03T13:40:11.107764Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/da56efc-iCrrKZup.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b931b0eb17f4c54c7c76bd3b7c96c0a","sha1":"5f1e2f2482ed3e77a78656c8cbe1ae8dc648a73b","sha256":"fe3ed08e63af0ff279c714e1c60fdf94681e6bdbde7179a647ad3c378b2a1397","sha512":"b020862a701c1d162c682476e083ee78ff515a8cd1e22beed98d8473c9682e469d432119cc818d0f9f7e00e6c0aa852867ca810a3e18540b167c55e4f2517020","ssdeep":"","tlshash":"89f05c876bf4aa15503a23ace55315417aa8122b57dc0f52d1b80a3a83ee9cf5822283","size":452,"data":"","first_seen":"2025-12-03T13:40:11.149698Z","last_seen":"2025-12-03T13:40:11.149698Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f9b308d2b60038830ad23a38fe7378d2","sha1":"ffff1b947bf97ed50c37cf709358ddbef1327e24","sha256":"fa4cd9592f1e4e853c12a8de14d6f85f6892fa44e799f6351efad08fdf29ae82","sha512":"423f6918b76e8a6344cd7eb7896b65aa65ffefcecbdc6d3abaef00ea4569c18db324ace0bb3df64c0e6950b57852df7b8d775d8ad706b31165605a39135ecfe5","ssdeep":"384:8MLg4o4MvMD9S2YVKqFnQ7cjuGys4+GISTZ4Ex3ly0eqnatI8MfZGpsuVe6:8MLghh92YVPFnQ7cCGys4+GISTZ4ExVm","tlshash":"a082ecd69f5316443b2ce752e2678121f65c6c80f3d8b630782e5a41e8d0cea8b775bb","size":19205,"data":"","first_seen":"2025-11-07T18:38:32.601423Z","last_seen":"2025-12-08T13:03:51.548614Z","times_seen":547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/a6c6e6da3-9wdkIjrs.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a274f110e0837a8d89f55743b7444726","sha1":"9c031eb830f36db3472455f8128ee777573dec1a","sha256":"4c299137c83426579e77c98deb5d3f5d9bab3101e35adf9a90c5cd6fa1bb2bc0","sha512":"fb07991c68d01320f723349d68e139f8dca0adc9fd82f37d041fd2877a76b729426abb54c5fbc57955c0d4b453ba315bc41eb0b3e092fd5e58cc4bb945c41e03","ssdeep":"","tlshash":"40014e4b01f81244c40260bfd116a3623021412b32cc8f6be13c8b3c1321e9a9a62fc7","size":689,"data":"","first_seen":"2025-12-03T13:04:46.201184Z","last_seen":"2025-12-03T13:40:11.138988Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/c3feb4-BNW8hXLl.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"247040f4901b4554e3b162c57988cadc","sha1":"b8052cd826a69dd8857bc6c612ed6d87c63eda2c","sha256":"96a3b68b37fe8cc0d37489c12192565e52812c4ab57a0dfdb104e3fad169ff26","sha512":"543dd36c1ff579534336260cd7d7bbe94c7e4128518716d8a2de7af6fb29137574a8f214ef98294d2e2be19a8579ffa13d223aef40f660d46fd14b9393d4f4e4","ssdeep":"","tlshash":"2301c08bc9f0935c944a66ddc83620137a5025a74fcd1b90f07d15385bba5db651eb03","size":721,"data":"","first_seen":"2025-12-03T13:04:46.140105Z","last_seen":"2025-12-03T13:40:11.12755Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/e73dde1c-CCaMdUDt.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"caec8ec47182c726b88f371fb7677f80","sha1":"de44d06829f897bc76762c32f19ccb86c80b4e3d","sha256":"958bb22301071645aa3648b0abe4798e242d980e30cf8da006f12f3d0ca86cb0","sha512":"9f16a18bb266e9e5c994f4247337911262a0fa62d71a72f659fc35ae1f93c8440330d3ad4550e096c7ae80a4305ebe44e712b2f8e5a3c8b2f94853de9b465ba2","ssdeep":"","tlshash":"d1515599b0b26f7c743f2acce42e5842f30e2b5597494e81a16da83027840d97f2a38d","size":3115,"data":"","first_seen":"2025-12-03T13:40:11.155228Z","last_seen":"2025-12-03T13:40:11.155228Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/cbe168f75-8BP2z0VR.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa7c2e6f3cdb0767f050aca3e6607963","sha1":"8d165f398bce73caf50ac13668e0a4558ebdc2d7","sha256":"1920499c82e04ed10f8bff81994cdd9ad37df197742c191019d5b668af9bd1e3","sha512":"cf18260c9256cce904d08352aee1eb9b76984ed6b3b02efa52d3a0875a2023f02cf473cc7d570350200eaf7a25c4ada0f75362765fad24c79373efea4d385afe","ssdeep":"","tlshash":"eaf05c415af16d08c079239dd6964451b65e013302dc4f21e2785abaa365ac95650383","size":451,"data":"","first_seen":"2025-12-03T13:40:11.098722Z","last_seen":"2025-12-03T13:40:11.098722Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/r925c28f4-CzkUZpD0.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfcb191afea26cc27971603c285a2789","sha1":"94549bd2a95e41c1e07c8ea8b93ec55606a51891","sha256":"3715d30afd596afb6ce30f0287cdbe798c28edbf50786706303d16b97bcd131a","sha512":"f4487dd56d9d084e0b860e2da88cd984f36934b57fa2f7386c618f29397f6ccbe87afe6802f12d1c542979fbd719db17c8e7b6cbdebb14850d6321c6538abc89","ssdeep":"","tlshash":"8cf023841ff0af24403d029cc016090079b8017302ce8f21e2b80ab683f4fcf4810747","size":452,"data":"","first_seen":"2025-12-03T13:40:11.140414Z","last_seen":"2025-12-03T13:40:11.140414Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"091fcea2ce8db1aa7fe44a4051e96b41","sha1":"4d1b368bcbddf456742d0abacd23ee510e609158","sha256":"433585662f852c8c76ded9e6f52054e1a120c78c7c0ecb8048fd3b99faa897f7","sha512":"765886ace161a524d53d770197f9f99de2c574df18129c8f32c3d4805f4680e2bd3c538527c6ed7e053b462fd1482e2eae75fcdf545bbeb795feff24d9c77d7f","ssdeep":"","tlshash":"14c02b9512f3e130f2a741c5c3cf32430000725602f841d351055c70401cc8a55a4f30","size":130,"data":"","first_seen":"2023-07-22T04:09:49Z","last_seen":"2026-04-03T19:02:22.732336Z","times_seen":8154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/b8df4ec-B1deeT5i.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"45e9ce36960e89c30696106e45e9b207","sha1":"5859375412755ae852bab105c6d93f4d5ca70d42","sha256":"b2721b557ef04d533f25499556c283b5e1707760f905c0938f77321b3522a71b","sha512":"320ecabb61048099aeb063fe4c4cae2b3dac43061c798881db805800b1c1c9a61f7c6e245da377193035f0212c792235b1d5bf9840e3f0fb7e6746473d4bf295","ssdeep":"","tlshash":"c1f05c892ef05585422f129cc267bc01396851b7478c8b90e178473c3b7edbfa910353","size":466,"data":"","first_seen":"2025-12-03T13:04:46.168749Z","last_seen":"2025-12-03T13:40:11.15154Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/x3eebe9d1c-Cq9W-ePu.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"679bea0ae9364ec5a764fb2c0d54c505","sha1":"d988f4b50dd36f3958914995f54a347b40ea0b87","sha256":"4f2604d0c88f22fc529b9d1ab2dec56fed545e11ae60f57d75ab823961fab31a","sha512":"81fce6083ba5eed66aafb64d8c87211d945f8c95de613aa34659a2e83fa24cd5f260fea7158079db8af9cd1cec9f5add337ee2518aee30accd582b8e597a7cb3","ssdeep":"","tlshash":"d411508a94f0b0b9c00925cdc51e62743936516763cc8faaf09e1a381b6d19d9b31783","size":954,"data":"","first_seen":"2025-12-03T13:04:46.183112Z","last_seen":"2025-12-03T13:40:11.129918Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/l32b115be-D7nfL9C_.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"949320eb3d62f3359a1747f3473b5892","sha1":"f045fceb177d1dd8eaab0226307ad6b36f7b43e9","sha256":"d2439be248faa93dc43232031d88654a43708605256bf127946b1ebcccf40a63","sha512":"70baa676593ad8232844d2b3f8e0cd39c5fe60cf24196fa9168be5a14286874de07d39b707fa9844d5e2d330d5bb0df1be49e5b544cfc78198b2b2b670778149","ssdeep":"","tlshash":"8211674f40e09359c01b59dee13a60373469542363cc9fc6e6bc0f741f2198e7321a4a","size":924,"data":"","first_seen":"2025-12-03T13:04:46.217666Z","last_seen":"2025-12-03T13:40:11.106448Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/a8dff14-4r0qFoOD.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"59c845973ca375ade0eb97ec68f68f76","sha1":"2c8d146eb6bea20f0108ade0653b6f6ba96944e6","sha256":"e54d14dab1f37374b8903306f80ffa2e11c5e61b98bc2b326dea4ea24336526b","sha512":"ba96646d9bc2ca7d9ba2a21e2c6ffc3cc7c3e32f74be6eaade4e05b5545923ced008d33732afd77db4359b43ba88b2f0aa7ab8a011e49e20cdda875b408d78cf","ssdeep":"96:7DpRkHRatOb/QIlnnUjOfez9YTGDQjgHQjski8Qj5IVzxJY6M9ysxmgUV+sszEQu:7UXDPntfez9Yan/8sIVzM6M9vxmgUV+2","tlshash":"d2b1a5c5d0a9dabd0dfbaade2590d15173504e033c8ad934f2a54c1927f9c0a61ab747","size":5341,"data":"","first_seen":"2025-12-03T13:04:46.18147Z","last_seen":"2025-12-03T13:40:11.122274Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/b35dd5f-y5QleHM0.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8f645a7d44d96ef52c7bc6a5ce35a015","sha1":"42555efdc90fa2da96e1d08450fd8075b27e8153","sha256":"d60644e87981705695fc0988e5ae0fd2f33537a539db09454d656f12e402b835","sha512":"d89af74f3226c047fb08429debdc61a7e2ada0b9f05e0e7a2557e8ac09bcc6d030cb4ca07dc6f019e4b3cdc8ea0c345b6e6526e7b070571d965c41c0eae3dae4","ssdeep":"","tlshash":"4c011084a6f07708c01a239dd119a00579450456a7ccdfc1d2bc4f2a43d9ad6e364b1b","size":713,"data":"","first_seen":"2025-12-03T13:15:25.447343Z","last_seen":"2025-12-03T13:40:11.134371Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/l973aba5d5-tbAJjVSF.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"98f8b14c7652bea67054c8b9e92c9ba6","sha1":"d80b0c4b429de80c58122821a0762dba6c8abc75","sha256":"22a6fcb7819075a52f479246a16944d3edae435f99620bf932e03b92c03e9a99","sha512":"504c768bd5ec152f66828fed7355847bcdcdd458ab69a5993e6aa49e9eab8e91dd7f50208f90f41429e9d4501d604ba19107e2a312365ecee927f02e303938f2","ssdeep":"","tlshash":"3d1132cf84e06174045745eee66ea72231201a13a78d8b54e27d0e787b25ddbd112acf","size":1023,"data":"","first_seen":"2025-12-03T13:04:46.192555Z","last_seen":"2025-12-03T13:40:11.13818Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"15505b2350e129b787d479f7507edee9","sha1":"09ccb3a84e7f25a30bf97594c9c98b6878fd4483","sha256":"53b6bbda82ae145cfc0fb1941cb035359d1c8b298798339cf53f5a543836ad65","sha512":"970991ac74c61bd2a25fe8a331be62b328d99d1f04b87a83cf50deda9d4d6b68a04403ba120796b1e2f9de04af78d640626fb95d2370907f4b626385f0562178","ssdeep":"","tlshash":"3a61947813111bb33ddda0a9dd286ec3dda51834859a887e784e5cf30658e4381bebb9","size":3462,"data":"","first_seen":"2025-06-11T22:43:11.360804Z","last_seen":"2026-04-03T19:02:22.737459Z","times_seen":7176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/q75caf95b-Cn_B8ecp.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8be749fee08148f71be2885070e6aeee","sha1":"fbfef88784d8cb29dbbbbd4fe0de3292e123fa1a","sha256":"df455d9e063fb3243a132f9fd766a5a90e2cd49875750c19801384acf2714db1","sha512":"bcf6c7367139f65218eaa19ae985b40b0bdfe456dedfaa1823a9f755fdeef13a309a5d67b216649c4098ef59bf45bf5736603dabbee4e2684fd0273d3709899a","ssdeep":"","tlshash":"40113549ba64285e00250aecc024b814124571666bc44fe1e1be55783f7addebd12b43","size":1059,"data":"","first_seen":"2025-12-03T13:04:46.225119Z","last_seen":"2025-12-03T13:40:11.130656Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/f388a1ec-D1fcIv-_.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b9bf4a7dab5a97c88f76c311411f635d","sha1":"f192988ef4983bf26e6bfd75546a211ecec5486b","sha256":"f7590ffe68596d70faac9e92ac04884ba68bfb0f77b0402f7fc2cfdd71cb74f6","sha512":"5dc0c8c95b3ebb75ff2dd24ff1ed7c29e0eb59528db4ebafbb1dc7b32569c3fc05eb1b4eaf00f7716f3f47a2c5300db39d1a58404c4f2c86866fc570baef25ac","ssdeep":"","tlshash":"7231769ce860e79d943529edc26d11252f00376b53dbcb00d1f9343a13552cdb622f93","size":1652,"data":"","first_seen":"2025-12-03T13:04:46.210388Z","last_seen":"2025-12-03T13:40:11.119252Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/z104af606-DO1s_KrQ.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ae9e2d1a771aec477ace8ce99900c1c0","sha1":"cbc0cc381cc07ed6a24f4f550de0ca9313615498","sha256":"e979f54bf0eb7396b934850451910dff8a06e3deb7178a4b3e2ad7efbcfd1a6b","sha512":"efd56dc98a3c053ee7a38b0606ca1fc08443f63833af8e6121a0786e93e6a7a43f9ecebd3720f1d7e31ca958b1e755d32be15e5a4a52e0d21bc5ea522f42b309","ssdeep":"192:U45ZLn0fa/P5dN8Qm2M5yero9V6UWT950zy12/ro6AQNpAF8HKCHuKXVmFyvO4+K:RjnxN8X2KrbUE950OUToPmiN+V/vON/i","tlshash":"aa92fbf0931c51d5d51e07bdea3d60e1a2392effbbcd828072a86d95546c2d52e08fd1","size":19688,"data":"","first_seen":"2025-12-03T13:15:25.500123Z","last_seen":"2025-12-03T13:40:11.108718Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/v45db03-CeHlBOG-.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f2944b18a724da79ef5b3a2370b2d6c","sha1":"dc07f631bf4230d4c9582256aadc807ec612a16a","sha256":"95cbc2826057a811b406ca06c7f703187bd3f60e5d447b57a6ad1d8f6dd26fbd","sha512":"9047db5aea9c4318c4ffcabc4e34a208994361b1b9036981ea19147c96290931722ec526969bc76e27c5c7906157791304cb93357464e4668649b7685d364578","ssdeep":"","tlshash":"f33162dd8092667c946f0ba4c07e605ab7042bb3e7af4f94e2bd98342716ca0630bf51","size":1820,"data":"","first_seen":"2025-12-03T13:04:46.170888Z","last_seen":"2025-12-03T13:40:11.146992Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/r2d3e895fc-CfDfgKc2.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"83b9b6ec51f3c6181fa0f09e9cca46ae","sha1":"df7c004c67f3f9bed8516f02b178406f50ce11d7","sha256":"3df8719b4e79a665fdf493c0a37ac81eb8fbfaa56671735602d0a36001708079","sha512":"2794423d21719403269e41662d89a1640c9f947963d003d68b11ae50a60676901f94a4c556231d5ba4dbedaf066f416981f7dc5c3709936f1dc2a36ff8bccce7","ssdeep":"","tlshash":"09f05c806ef42e4851b912ddd55b6504734c006746ed1f91d3ba0a3e536a7efdd11783","size":452,"data":"","first_seen":"2025-12-03T13:40:11.114404Z","last_seen":"2025-12-03T13:40:11.114404Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/l3e1d4b10-DT42t3sP.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d05464c8802931d7d59472a93c38626","sha1":"cc0656f0174eae65ba60a3b6aaf9ab04c290bbff","sha256":"eb3523a79f04c2c17abcf80f9a25a3a87feb1a460e269949f61b32bad7bf52f3","sha512":"f7d76a5f39b720cbdf27ea7d5e4dc7ebb31344137c1428b3f311840c4a337223acec32c7e27e0e183732c549273de6a9685d1795969eee2a5d79378c65cbcf04","ssdeep":"","tlshash":"acf05cb43bf46e58802e52edd9965d0537e80177429c0f12d2b80b39e36aec9ad04383","size":451,"data":"","first_seen":"2025-12-03T13:40:11.14194Z","last_seen":"2025-12-03T13:40:11.14194Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba0f4e77cb3d1968e8bb09e81cc6345e","sha1":"c3dabda4cfc7ed18627ba989f8ae8766b1ce4933","sha256":"7885d6bc09b192bdb9d4b2599239e210ae4b70f1773646a96c97a9a21c184487","sha512":"57baf1a1c836348e36fb6c38e649c142601110dd231faea9bc2a5c9c653c4b014dc4d02b3bbd7dad06a67eb2418bde568ca6f698086f9ce179718b5b1c56261a","ssdeep":"","tlshash":"f3c02bd612f36130f3ab40c7838f31c300207016027840d351014c70101c4494594e30","size":130,"data":"","first_seen":"2023-07-23T05:20:44Z","last_seen":"2026-04-03T16:15:24.27591Z","times_seen":6595,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/z991d8185-BuU5c0SS.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/z991d8185-BuU5c0SS.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-c9e\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3230,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3229)","md5":"6c07a5ff1e8b338ad5e57395f7407dff","sha1":"6f9ce70983be0a78131dba6467cf48a0bc01767a","sha256":"4917d986434237ee6f7d63ff93137dbd8170e4922ddbcc6aef5f6d091afade34","sha512":"f79f843b2ebc71b91a5650954c604a8d82c8ac8e20faf629674c20df48f8939a8397614b8e90e2d00d6888e762c4ea5c4833445fccb73109fac0191ad0c6438b","ssdeep":"","tlshash":"9d61236951f93f6f4c9b27f6424cc10f1e2e988ba489d630ad87cb2cf95848c34b1b61","first_seen":"2025-12-03T13:04:46.145127Z","last_seen":"2025-12-03T13:40:11.097166Z","times_seen":6,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/cbe168f75-8BP2z0VR.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/cbe168f75-8BP2z0VR.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-1c3\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":451,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (451), with no line terminators","md5":"fa7c2e6f3cdb0767f050aca3e6607963","sha1":"8d165f398bce73caf50ac13668e0a4558ebdc2d7","sha256":"1920499c82e04ed10f8bff81994cdd9ad37df197742c191019d5b668af9bd1e3","sha512":"cf18260c9256cce904d08352aee1eb9b76984ed6b3b02efa52d3a0875a2023f02cf473cc7d570350200eaf7a25c4ada0f75362765fad24c79373efea4d385afe","ssdeep":"","tlshash":"eaf05c415af16d08c079239dd6964451b65e013302dc4f21e2785abaa365ac95650383","first_seen":"2025-12-03T13:40:11.098722Z","last_seen":"2025-12-03T13:40:11.098722Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/sync-metrics","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1063\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1063,"data":"[{\"app\":\"landings\",\"event\":\"adex_script_load\",\"usid\":\"19ae470bbef0e08563b98c1\",\"sub_id\":\"1020077707683180545\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"career-survey\",\"event_source\":1,\"request_var\":\"1020077707683180545\",\"landing_domain\":\"cdn.yxrcr.com\",\"landing_url\":\"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d\",\"source_zone_id\":5042647,\"config_id\":1880,\"build_version\":\"v0.0.595-verticals\",\"landing_load_date_time\":\"2025-12-03 13:39:45.000117 +00:00\",\"design_id\":1,\"vertical\":\"finance\",\"events_history\":[{\"timeStamp\":1764769184749,\"event\":\"start\",\"timeOrigin\":0},{\"timeStamp\":1764769185116,\"event\":\"adex_init\",\"timeOrigin\":367},{\"timeStamp\":1764769185124,\"event\":\"load\",\"timeOrigin\":8},{\"timeStamp\":1764769185252,\"event\":\"adex_script_load\",\"timeOrigin\":128}]}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: df0092f670be529b88a18b8c39bd5339\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-03T19:28:29.736895Z","times_seen":114915,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/q90089639-Ce0NAr8b.webp","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/q90089639-Ce0NAr8b.webp HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1636\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: \"69302546-664\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1636,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5a1adcee8a49f5914328c4e2d64e63f1","sha1":"345da1a9fd93368a561aa05f7f1441dc14667127","sha256":"3dfd33d676d8ef7f093a3baeac061ea7fab7b3ff8d254daa99dce64441c71571","sha512":"7568a1fffe2bbda318bc956796aeb4894748a878275094a3b1d4d722d1ed280db039e7c3f54b68bdae9a62feb890a3d763d8ca66450bac0d01a89b06764fc9d7","ssdeep":"","tlshash":"4231b53a17050f07d5b00bbe96501729af5b3e734ea9c2ab564144172f818d4ed28ae3","first_seen":"2025-01-12T23:36:31.203165Z","last_seen":"2026-04-03T10:34:56.717161Z","times_seen":411,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/l32b115be-D7nfL9C_.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/l32b115be-D7nfL9C_.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-39c\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":924,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (923)","md5":"949320eb3d62f3359a1747f3473b5892","sha1":"f045fceb177d1dd8eaab0226307ad6b36f7b43e9","sha256":"d2439be248faa93dc43232031d88654a43708605256bf127946b1ebcccf40a63","sha512":"70baa676593ad8232844d2b3f8e0cd39c5fe60cf24196fa9168be5a14286874de07d39b707fa9844d5e2d330d5bb0df1be49e5b544cfc78198b2b2b670778149","ssdeep":"","tlshash":"8211674f40e09359c01b59dee13a60373469542363cc9fc6e6bc0f741f2198e7321a4a","first_seen":"2025-12-03T13:04:46.217666Z","last_seen":"2025-12-03T13:40:11.106448Z","times_seen":6,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/f54b30-RhhnAy9W.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/f54b30-RhhnAy9W.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-11e57\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73303,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0354a168acef75c51bfded9c9f55251a","sha1":"0e27202beaecbfd208dbb0430de7b5a3cd6a6479","sha256":"70846aeaeb273a40730db02d62a92cafbb94070934808287f2071f8b20a3b482","sha512":"9f3639f42a48f379b70a5efe3616870591de3f0aa84e1b646f9c5a0074ca425cb0866df48555ca5ee077294e67b42a5be63794d33148d329078152d17b13a4e4","ssdeep":"1536:pr2RivKGOUC9dpjXOnlVS+NLcgzAyOx+XuPqTeJcvmzhRQ8:piRMnlM+NLcgzAye+XuPqKJcY+8","tlshash":"0a63f88b3391a1145ba9409514ba0443e399fe9e705994e4f6ee54cefb8ccc5f23bb38","first_seen":"2025-12-03T13:04:46.148734Z","last_seen":"2025-12-03T13:40:11.107764Z","times_seen":6,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/z104af606-DO1s_KrQ.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/z104af606-DO1s_KrQ.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-4ce8\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19688,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19687)","md5":"ae9e2d1a771aec477ace8ce99900c1c0","sha1":"cbc0cc381cc07ed6a24f4f550de0ca9313615498","sha256":"e979f54bf0eb7396b934850451910dff8a06e3deb7178a4b3e2ad7efbcfd1a6b","sha512":"efd56dc98a3c053ee7a38b0606ca1fc08443f63833af8e6121a0786e93e6a7a43f9ecebd3720f1d7e31ca958b1e755d32be15e5a4a52e0d21bc5ea522f42b309","ssdeep":"192:U45ZLn0fa/P5dN8Qm2M5yero9V6UWT950zy12/ro6AQNpAF8HKCHuKXVmFyvO4+K:RjnxN8X2KrbUE950OUToPmiN+V/vON/i","tlshash":"aa92fbf0931c51d5d51e07bdea3d60e1a2392effbbcd828072a86d95546c2d52e08fd1","first_seen":"2025-12-03T13:15:25.500123Z","last_seen":"2025-12-03T13:40:11.108718Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-03T13:39:44.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Astro:5.12.3","description":"Astro is a new JavaScript-based static site builder.","website":"https://astro.build","common_platform_enumeration":"","icon":"Astro.svg","categories":["Static site generator","JavaScript frameworks"]}],"data":{"size":122946,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"492539269aeb926897158fca7ca52d15","sha1":"2d385feb3618903f12453815e5b3afeeae46706c","sha256":"a27905ffa63a7ae9a8fe8a73ca2f38f9ac2b3dee51c5acf9553cfdc29516bb3f","sha512":"d824b1970573fcf79306bd7faa8f6a8994d08da9e3183d08808ece55a5ba5c4ccc111f4ebb4f55397be4d4a63092bc89311e44033d3948361216d50f512d2b31","ssdeep":"3072:BYGfrfbvMqgHzQeaSIgIhBTs1qcFTi9IP+ssj2lFH:iAfg5H0eaSIgIhBTs1qui9IP+ssj2zH","tlshash":"8ec30a4b96b306292d2e77a0d096bb04e15bf74ff7a67bd4683900216bc25dd3b73680","first_seen":"2025-12-03T13:40:11.110701Z","last_seen":"2025-12-03T13:40:11.110701Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/fc03843e1-uKiSnrbr.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/fc03843e1-uKiSnrbr.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302545-1a5\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":421,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (421), with no line terminators","md5":"ddb08ad6fcb495956ecb5a55ba472d9a","sha1":"c5ddb6e22c1d5c337d4a6fd5acfaed754027b2b3","sha256":"8b7814b13adc6d7caf9d50533aa86899827e596a04ac827d2f276294a05306dc","sha512":"7688e93e884751699f683cece75af94dafe4a219c19ceae2fb3d90f38f2e63abf4668bfbe2000b3735f28c567801580d06f0d27c73289abcd8e758b0a3cc9dfd","ssdeep":"","tlshash":"e3e0e5984ae09ad9419e26ded616540265c81863179c4f61a6b80a382775bceca08347","first_seen":"2025-06-24T19:07:51.329462Z","last_seen":"2025-12-16T11:57:19.837877Z","times_seen":1806,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/r2d3e895fc-CfDfgKc2.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/r2d3e895fc-CfDfgKc2.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-1c4\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":452,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (452), with no line terminators","md5":"83b9b6ec51f3c6181fa0f09e9cca46ae","sha1":"df7c004c67f3f9bed8516f02b178406f50ce11d7","sha256":"3df8719b4e79a665fdf493c0a37ac81eb8fbfaa56671735602d0a36001708079","sha512":"2794423d21719403269e41662d89a1640c9f947963d003d68b11ae50a60676901f94a4c556231d5ba4dbedaf066f416981f7dc5c3709936f1dc2a36ff8bccce7","ssdeep":"","tlshash":"09f05c806ef42e4851b912ddd55b6504734c006746ed1f91d3ba0a3e536a7efdd11783","first_seen":"2025-12-03T13:40:11.114404Z","last_seen":"2025-12-03T13:40:11.114404Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fmscc.com/sync-do","fqdn":"fmscc.com","domain":"fmscc.com","tld":"com"},"ip":{"addr":"104.18.37.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fmscc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 14:43:32 GMT","end":"Fri, 13 Feb 2026 15:43:23 GMT"},"fingerprint":{"sha1":"17:EE:8D:B0:F0:B7:85:35:B3:2D:BD:DF:4C:F2:53:75:F4:51:D9:A8","sha256":"BE:13:9C:0C:8C:E2:C9:67:5E:D2:D4:0F:E0:12:7F:E3:0D:B5:DB:0A:3A:3C:3A:3B:7F:FD:31:CF:FC:6E:34:12"}}},"request":{"raw":"POST /sync-do HTTP/1.1\r\nHost: fmscc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 240\r\nOrigin: https://cdn.yxrcr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":240,"data":"[{\"name\":\"lead-cross\",\"check\":true,\"prefix\":\"career-survey\",\"defaultTtl\":604800},{\"name\":\"lead-teenage-cross\",\"check\":true,\"prefix\":\"career-survey\",\"defaultTtl\":604800},{\"name\":\"view-count\",\"check\":true,\"prefix\":\"1880\",\"defaultTtl\":604800}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: 9a8378d1dc225695-OSL\r\nvary: Accept-Encoding\r\nx-trace-id: 5994fb3e1f750ff9cdc902f3d47f6b37\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://cdn.yxrcr.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=Og7S.i.e9cc4G6h1xDffj5oRi7kSMl5j1woi2HnWNdc-1764769185-1.0.1.1-hwVmd7M.oFqrfbB045A51s1ZAS10KP1.lfscvMpjNVLjKYPvnHT8.OAArdOg_CXl6NiGsmFoYX0RiFcD0Z0lHOJXB14ujgRe2XSooagbJKc; path=/; expires=Wed, 03-Dec-25 14:09:45 GMT; domain=.fmscc.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":267,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"71b87650dcc098099504aeb500d83c82","sha1":"1a9643d9c5e52dc826dcdf45f4c2a75fffef8200","sha256":"d3a8cc67680cef1603b26de64be9e21c5dd27db1dd97a4e1b1a70d5b88a6f17e","sha512":"f1e5d367ed2dc04649cf4254b84614c1923476ad5a5be2f4ac0b63508644bcd3b0cae06fd98799b5b7c2c2cd6e8d5783d2bfc81f4946b09512ef72daa2c82daa","ssdeep":"","tlshash":"bad05b1e560d18ffc90119cc39d125d4bfc3c1053ca88c86c043cd5a2bc134104367ce","first_seen":"2025-09-25T10:53:06.771626Z","last_seen":"2025-12-08T15:00:55.832251Z","times_seen":96,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":20,"connect":1,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/y32a846-BINv_GMi.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/y32a846-BINv_GMi.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-22a9\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8873,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8872), with no line terminators","md5":"3a16a7a10da88c28f5be175a314d8781","sha1":"ebeb01bd23a323583b36f46e12b55c76b81a4731","sha256":"3c60799e90619d8a7978f12da3d3f24288472678f4d6d01d1b5e3d96b3d70861","sha512":"3526966f27bdd42eb46c2af599e7a89fc1a250fb0bdb3de8d854132f0b5ba70bc6846b6513e9a6162ce1a8159d4607dd77fc666c399f27a6d1973ef5adfa4084","ssdeep":"192:53kDqH0Dx7bCmX+R/9W17qSd1EEsOeDIuX3eJrsg5Oc1s0RNnyWvB2TPm2:53kDqH0Dx7bCmX+R/97Sd1EEsOeD5X84","tlshash":"87022b6870c65d3cd0c64de9a9a4c025b63e495de48bc58ee39d6cbc01d9a01a2f3f8f","first_seen":"2025-12-03T13:04:46.179567Z","last_seen":"2025-12-03T13:40:11.11691Z","times_seen":6,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/j459e88-Yl1rJNuc.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/j459e88-Yl1rJNuc.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-f822\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63522,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (38455)","md5":"a867c819db02e37accd117e82196a17d","sha1":"2869305920b302f6e314d16ca6ba038e0f1e6b4b","sha256":"35405581e2f7c3fd47734f35a18f102e128c090acb8d9062074ca9f0bd5a73d2","sha512":"35866d50efc4f03b26378096eda180b7310dda466da5b020cc30b82227684ffeb48c8ffd974bb192688a18f4bb81389c61c7c0d4c279410ccedeeb14114ab035","ssdeep":"768:T5FCDDOqykJ7QNp4N70H1KcvXCyLHWxA9k/eWj8kcj6tKwtZHNMSgz6lDNwnfZRc:zeqs7QX4qz4PNcj6ftZHNMSZZ","tlshash":"3e534a687056203a03ef51e6e0bf6a4bf2356912e48dc644e316cef06fb465d4267f2d","first_seen":"2025-12-03T13:04:46.159396Z","last_seen":"2025-12-03T13:40:11.11773Z","times_seen":6,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/aefad919-9oJLFYXt.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/aefad919-9oJLFYXt.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302545-bfe\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3070,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3069)","md5":"1f791ac2958156aeb24e1321949a1f53","sha1":"4697d2199e48a9bcddc6e7d3992ea93e04b026ea","sha256":"4d496ebd48dbd3cd3273df2ff800672181c02e24fb56b816ca281e3f1672f727","sha512":"fd86d53e15c35bf1e90594d3875a5efff4f7f943e34091058902f5e82d005c8eaa0a436093cd164e5f850a542af0f96b6338e311565646e8c29115f0c7d2c4c9","ssdeep":"","tlshash":"8951128fd02610595f94cfbdbc7525273ee6c22a3dc6894863c4943c01e8bda227f7a5","first_seen":"2025-12-03T13:04:46.206249Z","last_seen":"2025-12-03T13:40:11.118502Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/f388a1ec-D1fcIv-_.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/f388a1ec-D1fcIv-_.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302545-674\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1652,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1652), with no line terminators","md5":"b9bf4a7dab5a97c88f76c311411f635d","sha1":"f192988ef4983bf26e6bfd75546a211ecec5486b","sha256":"f7590ffe68596d70faac9e92ac04884ba68bfb0f77b0402f7fc2cfdd71cb74f6","sha512":"5dc0c8c95b3ebb75ff2dd24ff1ed7c29e0eb59528db4ebafbb1dc7b32569c3fc05eb1b4eaf00f7716f3f47a2c5300db39d1a58404c4f2c86866fc570baef25ac","ssdeep":"","tlshash":"7231769ce860e79d943529edc26d11252f00376b53dbcb00d1f9343a13552cdb622f93","first_seen":"2025-12-03T13:04:46.210388Z","last_seen":"2025-12-03T13:40:11.119252Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/sync-metrics","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 857\r\nOrigin: https://cdn.yxrcr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":857,"data":"[{\"app\":\"landings\",\"event\":\"start\",\"usid\":\"19ae470bbef0e08563b98c1\",\"sub_id\":\"1020077707683180545\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"career-survey\",\"event_source\":1,\"request_var\":\"1020077707683180545\",\"landing_domain\":\"cdn.yxrcr.com\",\"landing_url\":\"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d\",\"source_zone_id\":5042647,\"config_id\":1880,\"build_version\":\"v0.0.595-verticals\",\"landing_load_date_time\":\"2025-12-03 13:39:44.000751 +00:00\",\"design_id\":1,\"vertical\":\"finance\",\"events_history\":[{\"timeStamp\":1764769184749,\"event\":\"start\",\"timeOrigin\":0}]}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: 35cdd971e4e1ce261f685b6598167be0\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-03T19:28:29.736895Z","times_seen":114915,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/t357516d66-BiQTmzQ3.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/t357516d66-BiQTmzQ3.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-89d\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2205,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2203)","md5":"78e7250156bb45f54826966604f16e56","sha1":"526275a719446761857803a38b84e83f371ae913","sha256":"cd18ef51ce30ee83fbfce7b6512da11f279a2192147943d9b51a4fbd84554b13","sha512":"51011436d3c44e04bc633e0d4f581a5d02544cf3f6b54666f8c9084cb3135d58035b7ac6fd09c0fa30eb7d666a7b0f34eb12e8a366b6e4047b79e606960066a8","ssdeep":"","tlshash":"1c41b7a9b1652b7cf00f444ef62d828bf017b786db4dca50f0bc49192b198917747f85","first_seen":"2025-12-03T13:04:46.222704Z","last_seen":"2025-12-03T13:40:11.119977Z","times_seen":4,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/s26e8bb97-Vh4d0FP1.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/s26e8bb97-Vh4d0FP1.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302545-229\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":553,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (552)","md5":"f3186f33f422f775fdd0e59306486384","sha1":"6ad1add52502ffde8eca6c0e815cbf134f9f3ea9","sha256":"0803e0a62fc35c078991623b7aeae877d905ce3c36317f7cc09010826bc35ed6","sha512":"62456bb368acfd0ba4774e0cf95347f6adcf63615009eb07424b477984317ef4422191f22db2b6e387d3c61a2bcda701995f59002c433bbd4b0f53202e4a504e","ssdeep":"","tlshash":"a4f0208d86f16622008e53ecc106504329401317e3cc4fcaf07c07342365d8e7616b43","first_seen":"2025-12-03T13:15:25.513304Z","last_seen":"2025-12-03T13:40:11.121487Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/a8dff14-4r0qFoOD.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/a8dff14-4r0qFoOD.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-14dd\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5341,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5341), with no line terminators","md5":"59c845973ca375ade0eb97ec68f68f76","sha1":"2c8d146eb6bea20f0108ade0653b6f6ba96944e6","sha256":"e54d14dab1f37374b8903306f80ffa2e11c5e61b98bc2b326dea4ea24336526b","sha512":"ba96646d9bc2ca7d9ba2a21e2c6ffc3cc7c3e32f74be6eaade4e05b5545923ced008d33732afd77db4359b43ba88b2f0aa7ab8a011e49e20cdda875b408d78cf","ssdeep":"96:7DpRkHRatOb/QIlnnUjOfez9YTGDQjgHQjski8Qj5IVzxJY6M9ysxmgUV+sszEQu:7UXDPntfez9Yan/8sIVzM6M9vxmgUV+2","tlshash":"d2b1a5c5d0a9dabd0dfbaade2590d15173504e033c8ad934f2a54c1927f9c0a61ab747","first_seen":"2025-12-03T13:04:46.18147Z","last_seen":"2025-12-03T13:40:11.122274Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/sync-metrics","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 979\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":979,"data":"[{\"app\":\"landings\",\"event\":\"load\",\"usid\":\"19ae470bbef0e08563b98c1\",\"sub_id\":\"1020077707683180545\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"career-survey\",\"event_source\":1,\"request_var\":\"1020077707683180545\",\"landing_domain\":\"cdn.yxrcr.com\",\"landing_url\":\"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d\",\"source_zone_id\":5042647,\"config_id\":1880,\"build_version\":\"v0.0.595-verticals\",\"landing_load_date_time\":\"2025-12-03 13:39:45.000117 +00:00\",\"design_id\":1,\"vertical\":\"finance\",\"events_history\":[{\"timeStamp\":1764769184749,\"event\":\"start\",\"timeOrigin\":0},{\"timeStamp\":1764769185116,\"event\":\"adex_init\",\"timeOrigin\":367},{\"timeStamp\":1764769185124,\"event\":\"load\",\"timeOrigin\":8}]}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: 17f7c0f046ce88f326d724f2db5cb070\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-03T19:28:29.736895Z","times_seen":114915,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/d79f8f8-DBTjP6tj.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/d79f8f8-DBTjP6tj.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-1c4\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":452,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (452), with no line terminators","md5":"31633ff8d887abbedf32a0ac2e3e7390","sha1":"2ef9d42ad7e708e89329d95f8f8628b853e5be40","sha256":"f79ce87bfb9f83eede017de7df18364d997b64df259e434bf9d33eea9362dd37","sha512":"8e814678ea74e4592c32a5086ce0540bba1629ee4035e0af4f18e56d6ffe5fef68848a542a11325cdfacbe7e21d7a67198f2a204e41d662cbba7b2993f472f56","ssdeep":"","tlshash":"d2f05c8466b40e94815a23acc382d541359f0173529d4f11f1bc4bba937afcde900383","first_seen":"2025-12-03T13:40:11.122954Z","last_seen":"2025-12-03T13:40:11.122954Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/b9be5b00-hZTFctWr.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/b9be5b00-hZTFctWr.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-5df\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1503,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1503), with no line terminators","md5":"5168ac7ce5687b5d02f4aa08da5033d1","sha1":"36690d1ff547f5c0c401fb16531614c2613db85c","sha256":"5fe83c9811ab707a7d931a89f4b1dc69babf4114e5322745b04f3e516886831c","sha512":"0f85e40e3b53fa242bdece3593072e37c3d861dde2a7c3f80fe7951845cb16a055896c26dece8a2ac43f786d72783a4d6792f19839f41bd23f6c8317dcf01ad3","ssdeep":"","tlshash":"3c31658dd9b062fc41aa09edc15ce921232d02576a89e6e0902e4f39172eecff117b43","first_seen":"2025-12-03T13:04:46.188603Z","last_seen":"2025-12-03T13:40:11.124532Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/favicon.svg","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 28447\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: \"69302546-6f1f\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28447,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cfad15d30dae3df09e5cdf3b91556214","sha1":"5c451c15700279f2a2bf7d58261eff6ba6c2d4dc","sha256":"9a353afca57aed8c872145fc3d8686a2a27c80655d3c5306bb03a5fde1e5cfda","sha512":"3dde52c8ab8bc6b9603c7111f50895700d410d03c5838666cbc3f95aba7592a1ebe9b6b544191b80967e2aaf95551463c1232b8929fb8355b4b43a4ff35c5226","ssdeep":"768:hKAtKOZ5G2H6P/8awFZkU9pDaFy2nbhoAmF:PtKe6MawFZkUbKy2bh7mF","tlshash":"05d2e0b064bf4b5c47658a05f22bcc1cacc6faa3051d53f35be8663269888f44b7dd92","first_seen":"2025-09-22T03:35:17.75072Z","last_seen":"2026-03-26T17:02:07.810508Z","times_seen":1041,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fmscc.com/sync-do","fqdn":"fmscc.com","domain":"fmscc.com","tld":"com"},"ip":{"addr":"104.18.37.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fmscc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 14:43:32 GMT","end":"Fri, 13 Feb 2026 15:43:23 GMT"},"fingerprint":{"sha1":"17:EE:8D:B0:F0:B7:85:35:B3:2D:BD:DF:4C:F2:53:75:F4:51:D9:A8","sha256":"BE:13:9C:0C:8C:E2:C9:67:5E:D2:D4:0F:E0:12:7F:E3:0D:B5:DB:0A:3A:3C:3A:3B:7F:FD:31:CF:FC:6E:34:12"}}},"request":{"raw":"OPTIONS /sync-do HTTP/1.1\r\nHost: fmscc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://cdn.yxrcr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-length: 0\r\ncf-ray: 9a8378d1891a1525-OSL\r\naccess-control-allow-origin: https://cdn.yxrcr.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=sv8S0DIMwz.nj4zacgvtU6WXc6WaSSCTAs1xj7tBEAE-1764769185-1.0.1.1-ASBAjJxEPvK32EXZM3Lbr479U.p_Id3oCqmFo.k3y1ZCZdBrJG3Cw97e9VDYg7SUQs6mpWej3F5Zr04YWEdKtVrFh5500A7dUzRp4uQ8WjE; path=/; expires=Wed, 03-Dec-25 14:09:45 GMT; domain=.fmscc.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":43,"dns":19,"connect":5,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a\u0026ruid=16c76eb6-cf39-4cf4-88e3-015f5ceb1fa2","fqdn":"datatechonert.com","domain":"datatechonert.com","tld":"com"},"ip":{"addr":"139.45.195.253","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datatechonert.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 11 Dec 2024 00:00:00 GMT","end":"Tue, 23 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"ED:87:7A:7D:70:58:7C:01:53:C0:A9:07:3B:14:A3:60:48:86:04:72","sha256":"A3:45:F2:05:D1:B6:89:92:B3:05:C2:75:20:48:5F:3C:AA:EB:B3:A9:32:5E:CF:38:C4:37:CD:C0:B9:57:CA:E8"}}},"request":{"raw":"POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a\u0026ruid=16c76eb6-cf39-4cf4-88e3-015f5ceb1fa2 HTTP/1.1\r\nHost: datatechonert.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1691\r\nOrigin: https://cdn.yxrcr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1691,"data":"L\u001bRR\u001f\u001c\u0026\u001c\u0014\u0005g\u001f\u001cK\u0012\u0003\u0001\u0005P\u000eL_\u0003\u000e\u0011\u001aX\u0016\u0010JO@T\u0005\u000fT\u0011\u0003\u001e\u000eP\u0018L\u001fA\u001b\t\u00147\u0001\n\tWN\u001a\u001b\tICP_[^\u0016\u001a\u0017X\u001b\t\u0006VF\u000e\u001fWX\t[A\tMH\u0019\u0003P\u000e_]\u0005\r\u001f\u0014\r\r\u000eJOS\nQI\u0015C\u001d\u0007\u0003P\u000e_]\u0005\r\u001f\u0014\r\u001c[REN\u001a\u001e\u0000\u001b[ZBI\u001bLLW\u0007\u0015\u0011A\u001c\u0007[REN\u001a\u001a\u0018QCP_[@\u0000BODQ\u0011\fKTK\\Y@K\u001e[\u0003PXV[^\u0016\u001d\f@\u001b\t\u0007H\\IDW\u0016K6\u001d\\\u0015\u000f\r\u001f\u0017PLW\u0007\u0015\u0011\\\t\u0011\u0018JO@u\u0006\u0003P\r\u0006\u000fDG\u001a^M\u001fnZX\u001e\u000b\u000e\u001bU,lIH\tOZUK%]\u0000[\u0003\u0002\u0013NLPBH\u0007\u0014\u0002XJ\rOZGK5Q\r\u0006X\u0016\u0001\u0006KTIYES\u0018/\u0010K\u0004\f\u0001\u0013]\u0005]Y\u0019\t\u0011\u001aX\n\tJOS\u0014K\t]CPL\u0002\u001c@\u000b\u001fYX_\u001b\n\u0000\u001fE\u0003\u000b]\u001e\u001cK[\u0003\u001d;;\u000f\u0007\u0003C\\AX\u001b\bT\u0018\u0011\u0004\u0015\u001f\u0010\\\u0016\u000f\u001cQ\u001bG\u003e$\fP]B\u001f\u0016\u0017\t\u0019OH\r\u001f\u0014\u0017\u0003\u000b\u001c\u0017FT\u0004Diz\r\u0013\n\r\r\u0007\fY\u0005TI\u0005\fC\u001d\u001bQ\u0019\bE\u0003ZE*-B\u0001\u001b\u0016]\u001b\u0017X\rG\u001e\u000f\u0014\u0019\u0018\u0004RNVD@\r\n8\u003cY\u001aE[L\b\u000eLQ\u001cA\u0002\u0001\u001b\u001bWD\u001cFCJWN\u001a\u0019\u0015\u001b[H\u0006\u001f\u0006D\u001dW\u0018\u0016PR\u0014J\u0000\u0010\u0007\u0001JG\u001aV\fE\r\u0007\u001bW\u0005\bE\u0016\u0002\u000eLUV\r\u001bLP\u001d\u0014U^\u0010S^B\u0000\\[\u0003\u000e\u0015@\u001b\u0016DYEP\bYN\u000eVZY]J\u0007_U\u0007\f\u0007\u0003\\\u0012\u0018\u001a*Q\u0005PL\u000eR\\\\X-\u0000\u001f#~~C\u0001\u001c\u0017LN\u0016\rM\u0007\rK\u0018W/:TGS\\\u0007\u000b\u0003\u0006MSNXBT\u0000ZH\u0001Q_Z^TG\u0018\fE\u0004\u0002\u0001LPN^LS\rZ_J\u0012\u0001S_@\f\u000f]\u000f_\u0005T\u0018\u0006JXAS[X\u001b\u000eQ\t_S\u0017\u0003X\bT]\u0002\u0004OB\u0014\f@_b\u0003\u0015T.-7[\u003cN(\u0006zTu[  \u0011\u000285m]7n+\u0007#\u00067\u0005#\u0007_R}b3W7\u0002\u001eD]\u0011\tP\u0013\u000f\u001dVC\u0003XY\u0000\u000f\n\u0003CQ_\u0012\u0011\u0007S\u001bDc6 \u0004%6m_7s|Iy.\u003e\u0013\u0026\u0018,S'\u0003s\u000b'):\n{)(\u0002ct|\u0012)\u0013\"\u001e/U\u003c_J\u0015\u000f\u001d\u001fO\u0003\n\bQ\b\nU\u001eQ\u001c]B\u0004\b\nM\fUZV\rDQ\\\b\u0000\n\u0003SLP\u001dJY@V\u000e[\u0003QFL\u001f\b\u0016TObmp\u0014VF\u0017\nWX\tE[W\u0000\u001aLQPc\u0007\u0003\u0004\u000b\u0011\u001aX\u0014\rJOR\u0014K\u001cO\u0000\u0006LQA\u0003BO_Z\u0011\fN\\UJ\u0011\u000f\u001aST\bMH\u001c\u001f\u0006\u0016T@\u0006\u0015\u0011U\u0012;\u0016\n\u001f@\u0002YU\u001b\u000f\u001dLQC\u0018L\u001aS\u001b\tP\u001b\b\n\rY@W\u001a\u001aI\u0014HTI\u003e]\u0000\u0018O\u0019K\u000eL;O\\WN\u001a\u0001\u0010]\u0005\u000f\u0000IHR\u000f\u0001D\\\u001f\u0014\u0019\f\u0026\u0007\u0017\bg\u0000\u0017]\u0004\u0012LQ_\u0005BO@P]i\u0011\u0001\u0000\u001b*\u000e]\u0007\u001eM\tHTY@\u0000BOTV_Y\b;\u001d\r\u0005\u0016PKC\u000bUFL\u001d\u0017Z\n\u0002E\u001b\t\u0014XH[\u000f\u0014\u000f]\u0019\u0018]\u0012HT[^\u0016\u0000\u0001\u0015\u0003\u0011S\u0014I,;WN\u001a\u0007\u0015JCPL\u000e\u001c\u0019;\u003e\u001b\\]\u0014VF\u001a\u0007\u0019\rJ6\u001eX\f\u001f\u001aIH\u0016\u001d\u001fP[\u0011\u001aX\u0014\u001f\u0004WX\u001aKU\u001b\u0002\u0006\u001aIHO\u0013A\u0015I_W\u000e\u0002\u0016\u001a\u0018=\\\f\r\\\u0002\u001e\u0001\u0019P\u000e\u0015O^JlW\u0014\u0000\u000b\u0007\u001c\u0006\u001aS\u001fX\r\u0019\u000bGP]\u001d2CKZR\u001f\n\rJO\u0004Y\u0005\n\\MH\u0007\u0018-W\u0006\u001fXTZC\u0017;A^*\rJ6\u0017\\\u0016\u000f\u001cIHR\u000f\u0001D\\\u001f\u0014\u0013\u0017\u0026\u000b\u001d\u0010W\u0004\u0010L\fHT\r\u0013X\u001d\b\u001b\u001bZE%\u0001\u001d\u000f\u0010@\u0002\u000f\u0018U\u0012\u000fBI\u001bG1\nRZXYX^\r\u001a\u0000\u0007\u0014K\u0010J\u003e\u001d\u000b\t-_\u0007\u0019\u0015\u0003UW\u0016\u0017\u001cDW\u000bK6\u000e\\\u00035\u0005\u0002\u0006kX]\u0001f\\D%\n\u001c\u001f\u0010\u0010\u001aS\u001fX\r\u0019\u000bGP]\u001d2S\\@]\u000e\u000b\t7\u0006\u0003^\b\u000bPCP\b\n\u001eG\u000bA\u0015P@i\u0019\f\u000b\u0007\u0018\u000bM\u0004\u0026V\u0011\u000f\u001c\nP\u000e\b\f[JVKVF\u0017\r\u0006@\u0002KM\u0001W_YXA\u0007XO\u001b\u001bPZ\u0013\u0001\u0017\u001c*\u000b\\KC\u001b\u0004\u000b\r\rA\u0002\n\f\u001aZ\u0003\u0000\u001eIM\fBS\u0015PIZ\u0002GVS\u0017\u0007^\u000eS\r\u0001\u0002J\u0005[DW\u0003^\u000f\u0010U\b\u000b\u001a\u000e-]\nO\r\u001b\u0011\u001aX\u0010\u000b\t\u0013\u0004Q\n\u0026J\u000e\u001f\u001c\b\u0017k\u0007\t\u0015\u0003\u0011\u0003JPK^AU\u001aE[X\u0005\u001c\u000b\u0019\u0006]\u001d\bEfZRX^[JY@[\b\u0014I\u0000\u0003\t\u0005-]\nO\r\u001b\u0011\u001aX\u0007\f\u001b\u0001\rU6\u0010]\u003e[LQP\u0005^_\u0007\t\u0004\u0001MTN^MQ\tQI\fU_LGPW\u001b\u001eCV^i\u0013\u0000\u0026ZWX\u001aKU\u001b\u0002\u0006\u0007\b\u0019k\u0007\t\u0015\u0003\u0011\u0007JVIXBU\u000fYN\u000fYY_SB\u0001ZX\u0015\u0015\u0011U\u0015\u0017\rJO@\u001aE[T\u0004\u001e\u0006\u0004\u0016\u0016TO]JGW\u001dFUJ\u0007=M\u0000\u001d\u001b[H_]\u0011\u0003X\bU\u000f\u001eU\u001cW@EA\u0001^]T\u0001Y\u000f]FB\u0005[\u000b\u0002ZVTK\u0002\u0018ZWN\u001a\u0006\u0018f\b\u000eLQP\u0016BOV]W_\u000e\r\u0016\u0006\u0014\u000eg\u0000\u001dJCP56\u000f"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Wed, 03 Dec 2025 13:39:45 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://cdn.yxrcr.com\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adb4650bfc9d2a73d4dd69583b0ceb14","sha1":"1ce399d6e936232aaf2192cd7903a279c5015f22","sha256":"21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed","sha512":"3fbce22572bbed1aada0f7c6706f16a97e7c0ea132dfee1a7eb80f5e68da1cc63c891a5bc3ea8e87f0c97be3002212a0efbb2af9553acb45e0d447a685cd805b","ssdeep":"","tlshash":"436000000c3000000cc00c0000c00030ff300f00000f00c0000c00f003030c0c00c000","first_seen":"2023-04-05T07:30:31Z","last_seen":"2026-04-03T19:29:32.511911Z","times_seen":55964,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":143,"dns":28,"connect":26,"send":0,"wait":49,"receive":2,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/sync-metrics","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1217\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=canke3nkmvff379bng3ns9dfdzo8ebs; syncedCookie=true; oaidts=1764769185\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1217,"data":"[{\"app\":\"landings\",\"event\":\"adex_status_success\",\"usid\":\"19ae470bbef0e08563b98c1\",\"sub_id\":\"1020077707683180545\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"career-survey\",\"event_source\":1,\"request_var\":\"1020077707683180545\",\"landing_domain\":\"cdn.yxrcr.com\",\"landing_url\":\"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d\",\"source_zone_id\":5042647,\"config_id\":1880,\"build_version\":\"v0.0.595-verticals\",\"landing_load_date_time\":\"2025-12-03 13:39:45.000117 +00:00\",\"design_id\":1,\"vertical\":\"finance\",\"events_history\":[{\"timeStamp\":1764769184749,\"event\":\"start\",\"timeOrigin\":0},{\"timeStamp\":1764769185116,\"event\":\"adex_init\",\"timeOrigin\":367},{\"timeStamp\":1764769185124,\"event\":\"load\",\"timeOrigin\":8},{\"timeStamp\":1764769185252,\"event\":\"adex_script_load\",\"timeOrigin\":128},{\"timeStamp\":1764769185438,\"event\":\"cookies_sync_success\",\"timeOrigin\":186},{\"timeStamp\":1764769185713,\"event\":\"adex_status_success\",\"timeOrigin\":275}]}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: 58434fa9676a4a84eeda0a6fda9712f7\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-03T19:28:29.736895Z","times_seen":114915,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/c3feb4-BNW8hXLl.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/c3feb4-BNW8hXLl.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-2d1\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (720)","md5":"247040f4901b4554e3b162c57988cadc","sha1":"b8052cd826a69dd8857bc6c612ed6d87c63eda2c","sha256":"96a3b68b37fe8cc0d37489c12192565e52812c4ab57a0dfdb104e3fad169ff26","sha512":"543dd36c1ff579534336260cd7d7bbe94c7e4128518716d8a2de7af6fb29137574a8f214ef98294d2e2be19a8579ffa13d223aef40f660d46fd14b9393d4f4e4","ssdeep":"","tlshash":"2301c08bc9f0935c944a66ddc83620137a5025a74fcd1b90f07d15385bba5db651eb03","first_seen":"2025-12-03T13:04:46.140105Z","last_seen":"2025-12-03T13:40:11.12755Z","times_seen":6,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/s915559a65-DQiv_8De.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/s915559a65-DQiv_8De.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-10d2\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4306,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4305)","md5":"65257e3a239e73818afc43635d9672fb","sha1":"7db92460c1b9cae0a357c85d5dabc81b064d591e","sha256":"e26637f9430ceda7ec904d0d5b9a9b19e5f65b35ec5859105260b4e9b0477f99","sha512":"d0608e05b26614dbe4831ea1a8ddca2ba9da145e41d56bc73ba1933e86fb321d8b7a79120093c28a12a3d625a832293b0261532a65fa04b60f77f207ac1030df","ssdeep":"96:u2xUzz6zuxzFo4Bb9QQMqgNS7SH/GSxRq2:u4UzGSzFXB1Bl7SGYg2","tlshash":"9291348fb57920fc7a97c69da133e1a31a3725152d89c1b4e4e74f380760289a33bb47","first_seen":"2025-12-03T13:04:46.142576Z","last_seen":"2025-12-03T13:40:11.128319Z","times_seen":6,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-03T13:39:44.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Astro:5.12.3","description":"Astro is a new JavaScript-based static site builder.","website":"https://astro.build","common_platform_enumeration":"","icon":"Astro.svg","categories":["Static site generator","JavaScript frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":122946,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"492539269aeb926897158fca7ca52d15","sha1":"2d385feb3618903f12453815e5b3afeeae46706c","sha256":"a27905ffa63a7ae9a8fe8a73ca2f38f9ac2b3dee51c5acf9553cfdc29516bb3f","sha512":"d824b1970573fcf79306bd7faa8f6a8994d08da9e3183d08808ece55a5ba5c4ccc111f4ebb4f55397be4d4a63092bc89311e44033d3948361216d50f512d2b31","ssdeep":"3072:BYGfrfbvMqgHzQeaSIgIhBTs1qcFTi9IP+ssj2lFH:iAfg5H0eaSIgIhBTs1qui9IP+ssj2zH","tlshash":"8ec30a4b96b306292d2e77a0d096bb04e15bf74ff7a67bd4683900216bc25dd3b73680","first_seen":"2025-12-03T13:40:11.110701Z","last_seen":"2025-12-03T13:40:11.110701Z","times_seen":1,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":150,"dns":107,"connect":19,"send":0,"wait":42,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/x3eebe9d1c-Cq9W-ePu.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/x3eebe9d1c-Cq9W-ePu.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302545-3ba\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":954,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (954), with no line terminators","md5":"679bea0ae9364ec5a764fb2c0d54c505","sha1":"d988f4b50dd36f3958914995f54a347b40ea0b87","sha256":"4f2604d0c88f22fc529b9d1ab2dec56fed545e11ae60f57d75ab823961fab31a","sha512":"81fce6083ba5eed66aafb64d8c87211d945f8c95de613aa34659a2e83fa24cd5f260fea7158079db8af9cd1cec9f5add337ee2518aee30accd582b8e597a7cb3","ssdeep":"","tlshash":"d411508a94f0b0b9c00925cdc51e62743936516763cc8faaf09e1a381b6d19d9b31783","first_seen":"2025-12-03T13:04:46.183112Z","last_seen":"2025-12-03T13:40:11.129918Z","times_seen":4,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/q75caf95b-Cn_B8ecp.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/q75caf95b-Cn_B8ecp.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-423\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1059,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1059), with no line terminators","md5":"8be749fee08148f71be2885070e6aeee","sha1":"fbfef88784d8cb29dbbbbd4fe0de3292e123fa1a","sha256":"df455d9e063fb3243a132f9fd766a5a90e2cd49875750c19801384acf2714db1","sha512":"bcf6c7367139f65218eaa19ae985b40b0bdfe456dedfaa1823a9f755fdeef13a309a5d67b216649c4098ef59bf45bf5736603dabbee4e2684fd0273d3709899a","ssdeep":"","tlshash":"40113549ba64285e00250aecc024b814124571666bc44fe1e1be55783f7addebd12b43","first_seen":"2025-12-03T13:04:46.225119Z","last_seen":"2025-12-03T13:40:11.130656Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/sync-metrics","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1282\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=canke3nkmvff379bng3ns9dfdzo8ebs; syncedCookie=true; oaidts=1764769185\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1282,"data":"[{\"app\":\"landings\",\"event\":\"adex_status_bad\",\"usid\":\"19ae470bbef0e08563b98c1\",\"sub_id\":\"1020077707683180545\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"career-survey\",\"event_source\":1,\"request_var\":\"1020077707683180545\",\"landing_domain\":\"cdn.yxrcr.com\",\"landing_url\":\"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d\",\"source_zone_id\":5042647,\"config_id\":1880,\"build_version\":\"v0.0.595-verticals\",\"landing_load_date_time\":\"2025-12-03 13:39:45.000117 +00:00\",\"design_id\":1,\"vertical\":\"finance\",\"events_history\":[{\"timeStamp\":1764769184749,\"event\":\"start\",\"timeOrigin\":0},{\"timeStamp\":1764769185116,\"event\":\"adex_init\",\"timeOrigin\":367},{\"timeStamp\":1764769185124,\"event\":\"load\",\"timeOrigin\":8},{\"timeStamp\":1764769185252,\"event\":\"adex_script_load\",\"timeOrigin\":128},{\"timeStamp\":1764769185438,\"event\":\"cookies_sync_success\",\"timeOrigin\":186},{\"timeStamp\":1764769185713,\"event\":\"adex_status_success\",\"timeOrigin\":275},{\"timeStamp\":1764769185714,\"event\":\"adex_status_bad\",\"timeOrigin\":1}]}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: afc3002183456b91aea2ddb9a5f1a0fa\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-03T19:28:29.736895Z","times_seen":114915,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/d42e812fe-6tHt3BX8.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/d42e812fe-6tHt3BX8.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-2203\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8707,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8299)","md5":"273e9dee4157167ef34b4d1766925d7a","sha1":"9ba3762d2e9ec83246e0ae766b3ac6dba290ac98","sha256":"0f2a23660e6e4d20ee2c07bcd23f6bd621c85b660db654275724e0dd4b18df26","sha512":"7c72c20b9cf1083fd0cdb5c234848bcd5ca254381de256ecb9a7cf5ce733c37fa35ae28b3466f28df712ccf7652e1365eb9fd51ef68805db5dafbe35bf584568","ssdeep":"192:Cq3k+aH7QVbXtWYSNoqRwTMUVkQQaiESpfxr3ceQzez8L:j3k+aH7QVb9PS1UMUVkQQaExr1Qzez8L","tlshash":"4802080aa1700bbe74074ce8d4b1e1164335af15d64eee68f69d0a2536e810823df79b","first_seen":"2025-12-03T13:40:11.13193Z","last_seen":"2025-12-03T13:40:11.13193Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/i36b4f59-aO1gXv8i.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/i36b4f59-aO1gXv8i.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-e91\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3729,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3729), with no line terminators","md5":"34fb28722ec3993514519887130f79da","sha1":"e85237995b9b18b8a48f7de46f200b4cbba1d88f","sha256":"bcaef1f75b4adff777a26162e7545541dfffd2fb761421ef4fcf23cad0890bd5","sha512":"8d2dd4eec5cfd5179c719958357abc189373025a7ecc7ff98bc764f2dff9da0099e1342b9eb277361c4c76e39c9b971bf40d45749487f4db083537506268f889","ssdeep":"","tlshash":"a071c8cdc8e5c478519e22da5028126076be8f1b753d8384a17d0f398f5de0d9086f6b","first_seen":"2025-12-03T13:04:46.216133Z","last_seen":"2025-12-03T13:40:11.133643Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/b35dd5f-y5QleHM0.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/b35dd5f-y5QleHM0.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-2c9\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":713,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (712)","md5":"8f645a7d44d96ef52c7bc6a5ce35a015","sha1":"42555efdc90fa2da96e1d08450fd8075b27e8153","sha256":"d60644e87981705695fc0988e5ae0fd2f33537a539db09454d656f12e402b835","sha512":"d89af74f3226c047fb08429debdc61a7e2ada0b9f05e0e7a2557e8ac09bcc6d030cb4ca07dc6f019e4b3cdc8ea0c345b6e6526e7b070571d965c41c0eae3dae4","ssdeep":"","tlshash":"4c011084a6f07708c01a239dd119a00579450456a7ccdfc1d2bc4f2a43d9ad6e364b1b","first_seen":"2025-12-03T13:15:25.447343Z","last_seen":"2025-12-03T13:40:11.134371Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/a6e8fedad5-QJ_l978d.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/a6e8fedad5-QJ_l978d.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-494\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1172,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1171)","md5":"4a4d0e660f2578fad426b49ba6e2e22f","sha1":"909d0809774b67a102235a5574404f1b7a8c6c6d","sha256":"d39aa886af4c9d8d85e81589cb380b06ccdd92372a074d57fa4a933cfbb8854f","sha512":"cde28ae2c70b4237ae0ee3eb02d16d97882cf8756524bded94bee023173d20feb95de9d339ae22a92fe448e5e84f9ebaba5c188a4808b04c050dbf4bc2509f1e","ssdeep":"","tlshash":"112167c9b1e043ad490710edd73d500a38960263df9d8b56e2fc237c1f9789e9a15bc6","first_seen":"2025-12-03T13:15:25.459822Z","last_seen":"2025-12-03T13:40:11.135474Z","times_seen":5,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdntechone.com/stattag.js","fqdn":"cdntechone.com","domain":"cdntechone.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdntechone.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 12:09:26 GMT","end":"Tue, 03 Mar 2026 13:06:54 GMT"},"fingerprint":{"sha1":"20:CF:7E:0A:3E:60:76:64:CB:13:89:D1:7A:4D:C6:25:CD:DC:95:B7","sha256":"86:F2:8E:50:0F:AF:F9:1A:C3:2C:76:6A:A5:AB:D9:74:D8:CB:8A:FE:B7:B6:76:80:83:09:2F:8E:9A:2A:BC:74"}}},"request":{"raw":"GET /stattag.js HTTP/1.1\r\nHost: cdntechone.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Jul 2024 10:23:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nlink: \u003chttps://datatechone.com/\u003e; rel=preconnect; crossorigin, \u003chttps://datatechonert.com/\u003e; rel=preconnect; crossorigin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g1kog%2BLOrrHRBaoUkpgE%2FC4G3qaMWadazH7zvjQvQsif1zhoRhDp4OMqU4cwi6Wia8eFLQr4RJ3rf5n0nJF2JD0hgQFKiXd%2B%2F0qadQ%3D%3D\"}]}\r\nage: 2324\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"668fb2b6-406a\"\r\ncontent-encoding: br\r\ncf-ray: 9a8378cf6dab712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16490,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15840)","md5":"80d7433dbc2b7708f2fa4e6a9943a116","sha1":"350c6e2bb1cbd07de260856f918f4ececcd96894","sha256":"54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251","sha512":"6c065d9d4d04b7c4a11ae28751a711a064410055e1db34daed1c74d98f0257a304481bbf2af96b0845075f43d43bafeab34a49241a2a63f967fc0867748f6052","ssdeep":"384:WDC77FbFjbRN8h+eYFCatOJ39BEisNWP7gDhlPQ5EKQIkT8:d771Ff8h+eYFC/JNYa71","tlshash":"ac72e8c631a474afc6c292f04a7f092ef768509060be2986c1d5b4ec5ab51cee7c3f95","first_seen":"2024-07-11T14:08:01Z","last_seen":"2026-04-03T10:34:56.693266Z","times_seen":9003,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":57,"dns":34,"connect":1,"send":0,"wait":12,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-03","alert":"Sinkholed","trigger":"cdntechone.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js?userId=canke3nkmvff379bng3ns9dfdzo8ebs","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 15:37:01 GMT","end":"Sat, 24 Jan 2026 16:36:49 GMT"},"fingerprint":{"sha1":"84:49:FF:DC:BD:D8:BA:3D:2F:25:0B:EF:CA:E4:6D:73:79:8C:F9:7D","sha256":"AF:21:94:4D:14:07:CF:FC:E5:3C:3C:F4:AC:47:9E:83:98:6A:62:87:FB:8C:27:43:25:FB:97:CC:47:15:99:4A"}}},"request":{"raw":"GET /gid.js?userId=canke3nkmvff379bng3ns9dfdzo8ebs HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cdn.yxrcr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://cdn.yxrcr.com\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=canke3nkmvff379bng3ns9dfdzo8ebs; expires=Thu, 03 Dec 2026 13:39:45 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9a8378cf6833723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f1e7cd272a9103b636c0b65b86e55bbb","sha1":"1b8438bc28ba5b1a33cbb5ae9d3bad2792ffe99c","sha256":"504f020cfd6ebce6126dd51ed55616892960c2d1cd108eb75d795fde5a02fde2","sha512":"0f2e2bd8c49703cd8c218dc7eef8467194ef1da283702048d7a809013980d6103d33b84084c227b180a0758b7e10a02ff35caec004d8bd319b3a3802c689f86a","ssdeep":"","tlshash":"dca0028019591ec8006c2667699baf2981f41483986ea22586d8561125c615f58a6653","first_seen":"2025-12-03T13:40:11.136758Z","last_seen":"2025-12-03T13:40:11.136758Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":56,"dns":34,"connect":1,"send":0,"wait":41,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/l973aba5d5-tbAJjVSF.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/l973aba5d5-tbAJjVSF.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-3ff\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1023,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1022)","md5":"98f8b14c7652bea67054c8b9e92c9ba6","sha1":"d80b0c4b429de80c58122821a0762dba6c8abc75","sha256":"22a6fcb7819075a52f479246a16944d3edae435f99620bf932e03b92c03e9a99","sha512":"504c768bd5ec152f66828fed7355847bcdcdd458ab69a5993e6aa49e9eab8e91dd7f50208f90f41429e9d4501d604ba19107e2a312365ecee927f02e303938f2","ssdeep":"","tlshash":"3d1132cf84e06174045745eee66ea72231201a13a78d8b54e27d0e787b25ddbd112acf","first_seen":"2025-12-03T13:04:46.192555Z","last_seen":"2025-12-03T13:40:11.13818Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/a6c6e6da3-9wdkIjrs.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/a6c6e6da3-9wdkIjrs.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-2b1\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":689,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (688)","md5":"a274f110e0837a8d89f55743b7444726","sha1":"9c031eb830f36db3472455f8128ee777573dec1a","sha256":"4c299137c83426579e77c98deb5d3f5d9bab3101e35adf9a90c5cd6fa1bb2bc0","sha512":"fb07991c68d01320f723349d68e139f8dca0adc9fd82f37d041fd2877a76b729426abb54c5fbc57955c0d4b453ba315bc41eb0b3e092fd5e58cc4bb945c41e03","ssdeep":"","tlshash":"40014e4b01f81244c40260bfd116a3623021412b32cc8f6be13c8b3c1321e9a9a62fc7","first_seen":"2025-12-03T13:04:46.201184Z","last_seen":"2025-12-03T13:40:11.138988Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/b7bd656-BR6NftF4.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/b7bd656-BR6NftF4.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-95f\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2399,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2398)","md5":"c36265df290dbabe13ba8ed60c2047f5","sha1":"4c31c20c18b69fdca2a8b0ee8d2ccbaf6cc9c1fd","sha256":"49232cc3149a243190cfbfb024bfe8629cfe2634e7eaa1158fca7e109f1a7942","sha512":"4a70a68915a9715d06eea0c5449132e508e0e8e4b4a861853f35b95f89d7c0788919e9f2cd620e08035cdf0276f76be2a98077dae71ca16efb575c04f5f233ee","ssdeep":"","tlshash":"64410203b132d1b56156698bcb61720efa709b672aa8c5b4fc344c2057da58b8b2e729","first_seen":"2025-12-03T13:04:46.184798Z","last_seen":"2025-12-03T13:40:11.139703Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/sync-metrics","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 926\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":926,"data":"[{\"app\":\"landings\",\"event\":\"adex_init\",\"usid\":\"19ae470bbef0e08563b98c1\",\"sub_id\":\"1020077707683180545\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"career-survey\",\"event_source\":1,\"request_var\":\"1020077707683180545\",\"landing_domain\":\"cdn.yxrcr.com\",\"landing_url\":\"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d\",\"source_zone_id\":5042647,\"config_id\":1880,\"build_version\":\"v0.0.595-verticals\",\"landing_load_date_time\":\"2025-12-03 13:39:45.000117 +00:00\",\"design_id\":1,\"vertical\":\"finance\",\"events_history\":[{\"timeStamp\":1764769184749,\"event\":\"start\",\"timeOrigin\":0},{\"timeStamp\":1764769185116,\"event\":\"adex_init\",\"timeOrigin\":367}]}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: b0f429310b4a0bd603bc9c6eea25d4b5\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-03T19:28:29.736895Z","times_seen":114915,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/r925c28f4-CzkUZpD0.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/r925c28f4-CzkUZpD0.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302545-1c4\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":452,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (452), with no line terminators","md5":"bfcb191afea26cc27971603c285a2789","sha1":"94549bd2a95e41c1e07c8ea8b93ec55606a51891","sha256":"3715d30afd596afb6ce30f0287cdbe798c28edbf50786706303d16b97bcd131a","sha512":"f4487dd56d9d084e0b860e2da88cd984f36934b57fa2f7386c618f29397f6ccbe87afe6802f12d1c542979fbd719db17c8e7b6cbdebb14850d6321c6538abc89","ssdeep":"","tlshash":"8cf023841ff0af24403d029cc016090079b8017302ce8f21e2b80ab683f4fcf4810747","first_seen":"2025-12-03T13:40:11.140414Z","last_seen":"2025-12-03T13:40:11.140414Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/l3e1d4b10-DT42t3sP.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/l3e1d4b10-DT42t3sP.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-1c3\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":451,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (451), with no line terminators","md5":"5d05464c8802931d7d59472a93c38626","sha1":"cc0656f0174eae65ba60a3b6aaf9ab04c290bbff","sha256":"eb3523a79f04c2c17abcf80f9a25a3a87feb1a460e269949f61b32bad7bf52f3","sha512":"f7d76a5f39b720cbdf27ea7d5e4dc7ebb31344137c1428b3f311840c4a337223acec32c7e27e0e183732c549273de6a9685d1795969eee2a5d79378c65cbcf04","ssdeep":"","tlshash":"acf05cb43bf46e58802e52edd9965d0537e80177429c0f12d2b80b39e36aec9ad04383","first_seen":"2025-12-03T13:40:11.14194Z","last_seen":"2025-12-03T13:40:11.14194Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/fbe3a695-WUggEIoU.webp","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/fbe3a695-WUggEIoU.webp HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5004\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: \"69302546-138c\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5004,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eb0e8d921b8b8ce75be4fbe630ebaa82","sha1":"d4817274b33ef5ac7cc350babbc77f1fa84c5fbd","sha256":"6f83342ed01d498e4c79260aa1f8818a10430300b8cf9862056c73b8532b268a","sha512":"eb5ad49f3375a60f54cf486066d634d1ef74138e2cf747a1664fd717fad7bd36f6b1a84a021b647096b35d8a9b1f368dfdc9f90293843dc31503b07c8f617dee","ssdeep":"96:D0zkkY1s0tgj90I6RiNudHj7nxiBOEZz8Vht4kkt:ozQ1i6iN2DbfEZ8tk","tlshash":"b2a18e3dea92feadc03743b89344af75f5841b6647d4a3ba12cd540dc6c8e44f6481e5","first_seen":"2025-01-12T23:36:31.206085Z","last_seen":"2026-04-03T10:34:56.736934Z","times_seen":411,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/m7d2219c0-BfyeUlAM.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/m7d2219c0-BfyeUlAM.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-226\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":550,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (550), with no line terminators","md5":"3427fbbf741cf33a72480ddd8bfc610d","sha1":"1122da34ca5c33f86122e4bee862615f685dc79c","sha256":"c288faa16f6063d02a6dd3c0721298a7a6eae69211444717277ce1641eeaea84","sha512":"aaf0797fb609f5dac2cf74f34ba4f6cb0656d0ffd614399b0ed2a3b9b3e7470af12a1530c6b49a77fa46fb81234a91f9a4e0a11d4d340e0e083c4572e2d8755c","ssdeep":"","tlshash":"94f0c07a06f01a99c11b26eec71e5351307b416ba68ccf22f1bc17341f61eade911683","first_seen":"2025-12-03T13:04:46.190455Z","last_seen":"2025-12-03T13:40:11.144176Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/p372743-Df4R5fHR.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/p372743-Df4R5fHR.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-817\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2071,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2071), with no line terminators","md5":"b0642319f3c49337628a14cf7ba6c1af","sha1":"5b89e792bc5299012956abb0d86add9f88cb79d5","sha256":"af300047142a18cf9d6ea731062479e99421b3ebf366ce78824e2cc3490b3960","sha512":"224cf98559534f48eac74a80992ebc1d75d608c0c9897fd590532a69befaefa6c4431fc35817fe4683a63f94c91cda2135db4426b2ea2f53de0b4556f6868e58","ssdeep":"","tlshash":"a641774175f96070c7a119fec1701132b539991337ac8987a26d29342fa7d5af127b23","first_seen":"2025-12-03T13:04:46.209011Z","last_seen":"2025-12-03T13:40:11.14492Z","times_seen":4,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/a065ddf3-B9BiO6Di.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/a065ddf3-B9BiO6Di.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-ec2c\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60460,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (60460), with no line terminators","md5":"d0878aa0505a9047f67087cc9164dba7","sha1":"3878cb46e8142ad8c9adf5cde22b626829a1fb37","sha256":"a70e937699764a13f0bdc7a7bab285eb220f2dfc634e10ea29f92cc0c2b3ca81","sha512":"88e2852c475c8fcb02f3fe9f32f4fe200c9f3036ee103afcb6a06dd6655e2bb16c2594ab6d75ab76595367c3ccc62daafaeb4b3f20393a6e2ea9abc283dabf51","ssdeep":"768:1kVidN2wzomSfftqh2vprvxWhMt3gBInlCEkkq2ZBC7ATx+EvTP1fNKLVtp4zvKd:6VzwzVGWhsgATx+E6WbhIxggfPw7w","tlshash":"d6435e9ed2529fe989b31788b91c2a11b32d0d0ded4891a0ecdf0f16176ec87217b79d","first_seen":"2025-12-03T13:04:46.151268Z","last_seen":"2025-12-03T13:40:11.146101Z","times_seen":6,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/v45db03-CeHlBOG-.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/v45db03-CeHlBOG-.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-71c\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1820,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1819)","md5":"3f2944b18a724da79ef5b3a2370b2d6c","sha1":"dc07f631bf4230d4c9582256aadc807ec612a16a","sha256":"95cbc2826057a811b406ca06c7f703187bd3f60e5d447b57a6ad1d8f6dd26fbd","sha512":"9047db5aea9c4318c4ffcabc4e34a208994361b1b9036981ea19147c96290931722ec526969bc76e27c5c7906157791304cb93357464e4668649b7685d364578","ssdeep":"","tlshash":"f33162dd8092667c946f0ba4c07e605ab7042bb3e7af4f94e2bd98342716ca0630bf51","first_seen":"2025-12-03T13:04:46.170888Z","last_seen":"2025-12-03T13:40:11.146992Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/l1bef1d752-DmsO4YX5.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/l1bef1d752-DmsO4YX5.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302545-1c3\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":451,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (451), with no line terminators","md5":"a36249d23ea21e6750b0c73a821954a3","sha1":"bb20f3ef3be926971f4f35d22dfc16cfad816e7d","sha256":"ac29acc46fef57c20ab6535cd099316ead157ce41738b0d3f54304139b8ca0a9","sha512":"a93a39644d1e11c474416b7cf1a219f7e45f3c260808c6cec547288223b0f559cf6a1d487f57829c89f6ca493027d8e34e77a1b064b774863d2fb4f8a25bff0a","ssdeep":"","tlshash":"f1f05c895fe41a588077239cd9225540b38a0437678d0f61a27d1a3b63aaecdc840283","first_seen":"2025-12-03T13:40:11.147867Z","last_seen":"2025-12-03T13:40:11.147867Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/da56efc-iCrrKZup.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/da56efc-iCrrKZup.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-1c4\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":452,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (452), with no line terminators","md5":"8b931b0eb17f4c54c7c76bd3b7c96c0a","sha1":"5f1e2f2482ed3e77a78656c8cbe1ae8dc648a73b","sha256":"fe3ed08e63af0ff279c714e1c60fdf94681e6bdbde7179a647ad3c378b2a1397","sha512":"b020862a701c1d162c682476e083ee78ff515a8cd1e22beed98d8473c9682e469d432119cc818d0f9f7e00e6c0aa852867ca810a3e18540b167c55e4f2517020","ssdeep":"","tlshash":"89f05c876bf4aa15503a23ace55315417aa8122b57dc0f52d1b80a3a83ee9cf5822283","first_seen":"2025-12-03T13:40:11.149698Z","last_seen":"2025-12-03T13:40:11.149698Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/b8df4ec-B1deeT5i.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/b8df4ec-B1deeT5i.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-1d2\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":466,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (466), with no line terminators","md5":"45e9ce36960e89c30696106e45e9b207","sha1":"5859375412755ae852bab105c6d93f4d5ca70d42","sha256":"b2721b557ef04d533f25499556c283b5e1707760f905c0938f77321b3522a71b","sha512":"320ecabb61048099aeb063fe4c4cae2b3dac43061c798881db805800b1c1c9a61f7c6e245da377193035f0212c792235b1d5bf9840e3f0fb7e6746473d4bf295","ssdeep":"","tlshash":"c1f05c892ef05585422f129cc267bc01396851b7478c8b90e178473c3b7edbfa910353","first_seen":"2025-12-03T13:04:46.168749Z","last_seen":"2025-12-03T13:40:11.15154Z","times_seen":6,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/c8f18c1-CsB3X8XT.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/c8f18c1-CsB3X8XT.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-541\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1345,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1345), with no line terminators","md5":"b80dec40b25d8c515b2aeedae1cea7dd","sha1":"113e0819e7954326f5bc9a59c3ca14de25d10a39","sha256":"631e353bdf6acc2a69875faeb1b3821b37a1cf532c4b6e8eee6ad1fa5dc7e527","sha512":"ab34072d6576f37ba23dbec07ed043f33b765b559da643663066b419e6aac0b971c18402d3aa5fd448980aef82612bcfff0ce57d2250c6eb6271910a2b05410a","ssdeep":"","tlshash":"8921618e9c7091fcc03a8dfce116e032871837af1649c270854e4e75132168ab63b703","first_seen":"2025-12-03T13:04:46.161727Z","last_seen":"2025-12-03T13:40:11.152493Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/favicon-96x96.png","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /favicon-96x96.png HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 6015\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: \"69302546-177f\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6015,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, interlaced","md5":"cacd53100e7d31ae7b404a98e84ffe07","sha1":"f847c273bcf0e46bf55210e2ad9c98f108a16f6a","sha256":"9a13272a282dbcb3640a3e39a2bb1ba96c6ba5c7ff730d84d7d9ddd8a291724c","sha512":"d1717a6c9a90c6cc084d0f976d1cfed82d73fe08cdc280c97b680d60628090975de5da35c0dd32cb9f1205b4522dba9977c3ba7cb9d8a97770fc1a5b38b17b25","ssdeep":"96:pq0fSwKYPmvGmB6J3vW2/EPL1albpwAxLmkEfeU37ICI2FidSryKfOZCepkOpZNr:pq+SwKYPmvV69lcPL1a3wKmk2evCdQd9","tlshash":"75c18d96cd231027da329832247307cecd4af43bd9922395629205a61fd9c8caf8e793","first_seen":"2025-10-06T18:06:11.210074Z","last_seen":"2026-03-26T17:02:07.818752Z","times_seen":1027,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/e73dde1c-CCaMdUDt.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/e73dde1c-CCaMdUDt.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-c2b\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3115,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3105)","md5":"caec8ec47182c726b88f371fb7677f80","sha1":"de44d06829f897bc76762c32f19ccb86c80b4e3d","sha256":"958bb22301071645aa3648b0abe4798e242d980e30cf8da006f12f3d0ca86cb0","sha512":"9f16a18bb266e9e5c994f4247337911262a0fa62d71a72f659fc35ae1f93c8440330d3ad4550e096c7ae80a4305ebe44e712b2f8e5a3c8b2f94853de9b465ba2","ssdeep":"","tlshash":"d1515599b0b26f7c743f2acce42e5842f30e2b5597494e81a16da83027840d97f2a38d","first_seen":"2025-12-03T13:40:11.155228Z","last_seen":"2025-12-03T13:40:11.155228Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/d9ceeed3-CnIU5txI.webp","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/d9ceeed3-CnIU5txI.webp HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4538\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: \"69302546-11ba\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4538,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"30cff9c43d012b1619cc092d54379a0a","sha1":"2ef41df1c08e0a14fff271ae431cc90d806dbdc7","sha256":"58c8cf23b5c2a9e5d4cbc27fd3e97752d2c1fd9afc3ccd161781a4f00ff4cb52","sha512":"8bbc0164b81e626beb98e99bf559e3cafde62860c73a959d0b55f7b4a95bda00292547fa93c11655bacb3aa179dcc5e915d7ac3c4d36dfd00b675d91c703fec8","ssdeep":"96:70zGXtAcXJWW2FJP0JJVjSPuJBNbxxA8H/gFQjYNS3R/:wzYtA6JWWCiquJVxA8HaQk8/","tlshash":"48917d7447a3df09e8b382f2b5470b50cf473db8e644a31a432610de8e5154ed2cc654","first_seen":"2025-01-12T23:36:31.229067Z","last_seen":"2026-04-03T10:34:56.71786Z","times_seen":411,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/sync-metrics","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1143\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=canke3nkmvff379bng3ns9dfdzo8ebs; syncedCookie=true; oaidts=1764769185\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1143,"data":"[{\"app\":\"landings\",\"event\":\"cookies_sync_success\",\"usid\":\"19ae470bbef0e08563b98c1\",\"sub_id\":\"1020077707683180545\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"career-survey\",\"event_source\":1,\"request_var\":\"1020077707683180545\",\"landing_domain\":\"cdn.yxrcr.com\",\"landing_url\":\"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d\",\"source_zone_id\":5042647,\"config_id\":1880,\"build_version\":\"v0.0.595-verticals\",\"landing_load_date_time\":\"2025-12-03 13:39:45.000117 +00:00\",\"design_id\":1,\"vertical\":\"finance\",\"events_history\":[{\"timeStamp\":1764769184749,\"event\":\"start\",\"timeOrigin\":0},{\"timeStamp\":1764769185116,\"event\":\"adex_init\",\"timeOrigin\":367},{\"timeStamp\":1764769185124,\"event\":\"load\",\"timeOrigin\":8},{\"timeStamp\":1764769185252,\"event\":\"adex_script_load\",\"timeOrigin\":128},{\"timeStamp\":1764769185438,\"event\":\"cookies_sync_success\",\"timeOrigin\":186}]}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: 2ed96a765f434e727c542c8cd6357c4f\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-03T19:28:29.736895Z","times_seen":114915,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/b92c2f411-DlmV8hFi.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/b92c2f411-DlmV8hFi.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-544\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1348,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1348), with no line terminators","md5":"b31003d37e0e740781dfa03b77122031","sha1":"68add70c2c03b9296fc1c9f93ea631858cc93f75","sha256":"25cd170387d91749ba79e5c5f3fbabc8ba6d86e0d6d9b9ce21b8d5e539b23cb8","sha512":"a713eacb1c95e385bd8e3d6b3c5befef370fc0bfee53da82e2d11bb10c1e330265aafd37d73dc5676e06f6798ce2150e3942b1c1297efbc9edf23a58182697be","ssdeep":"","tlshash":"9b211181b2b2b07807f9579ce4223343f5554a2513ccc7d0a1ba027a2ed4d9b9c3061b","first_seen":"2025-12-03T13:04:46.186578Z","last_seen":"2025-12-03T13:40:11.158776Z","times_seen":6,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/o1d8f7f-CMHktH-V.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/o1d8f7f-CMHktH-V.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-6d6\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1749)","md5":"ced4e4953b4c78cbc95f2fba186e2461","sha1":"6426ba25b2fee237476d54bbcd0a863ad23e1c8c","sha256":"8b2bf95993b7a3be15ed27e9a3df47819e11bcff50948bf8156a531dd6bee36b","sha512":"27a641b90f3bc9bfb70392c87d94c1e247fa337edbb0095046727f1459b1eb29d3f8d61ea4aaac76ecf5fddf2f9a2907e56ea56e7d82ff5177a689f2db4eb757","ssdeep":"","tlshash":"cb312e8926e16931845920edf6377081f0be2066758e85d0c12d4f363a9d8cfc275a8b","first_seen":"2025-12-03T13:15:25.499381Z","last_seen":"2025-12-03T13:40:11.159724Z","times_seen":5,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/i1ffb4cb2-BRXSBCPo.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/i1ffb4cb2-BRXSBCPo.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-892\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2194,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2193)","md5":"8173c403eadbb5f817eb003934878ac3","sha1":"9592314f4c3b05b69846419f6fbf0e90e4cac384","sha256":"bfd90fe2b9d078b1086b66a61a8bb7695404e64acf7ab3dc524182405308218b","sha512":"c40d51fa0dbb83bc2e47fa274bf35d72cba8feb534ffa1fff0c356d700f073a711216b67b5af37e4d2b98ee3750f78423e435f57235602cae10ee742b41c2334","ssdeep":"","tlshash":"eb41956c81f881b4c1d56beed226f932349a4833346cce95d27e8e3417bee9561b4632","first_seen":"2025-12-03T13:04:46.211983Z","last_seen":"2025-12-03T13:40:11.160601Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/c488ba53-BzfKEHqB.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/c488ba53-BzfKEHqB.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-74e\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1870,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1870), with no line terminators","md5":"8e7a55244faa33389a8f0bbee91c750e","sha1":"527848b041e2a36ac7cdc7cd9c7b416f2fc1fcbb","sha256":"be547f36a6daf0a3ae7fad5ff074c037ce90b3676c6cb12eaf2d1df1e29a509f","sha512":"e6c2418d41e33681bfa1f66989ea4a6a72722cf7cecb34bbc7dde4619f0168689a0e2697b0ae43ef303a6564d05e3adb6fb33e589a3bdde93029375e974edd31","ssdeep":"","tlshash":"3031b9bd44b94c3872cd4598a6395a022379120374e88e57e22adbe0165cccf8b1673f","first_seen":"2025-12-03T13:04:46.226812Z","last_seen":"2025-12-03T13:40:11.161503Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/de5498b5-B6Jq1Bz5.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:45.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/de5498b5-B6Jq1Bz5.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-1638\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5688,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5462)","md5":"34e17f0d6aa3bb03bab437b44958433f","sha1":"18124da5a3b51c530f84d12b614b8836b8856ff2","sha256":"b243b2c9267161756b9024c30cfbd774a523db53a80052c0b1d908f193959b14","sha512":"06977bc6437bd0f93c58aca61aa9ba42293d302a4cdb77832ec37d07232653346bc7b3158f56d0ab71307ac8b7a60b5e2ae02b946a2dbf4f0c299e1748aa4ba5","ssdeep":"96:j9H73icAMgCa3Ies+NFHAJw5jfj20Dpf+2zS8dwCyT:5H73hTgCEIeNdAmbv7S","tlshash":"08c1765ce1792578b02b9ddcd63a121767353323e989daf0a4be2e2013c5b4467867f3","first_seen":"2025-12-03T13:15:25.475815Z","last_seen":"2025-12-03T13:40:11.162444Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/cb475a-D56QfEdH.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/clicker/1861/en.html?z=5042647\u0026var=1020077707683180545\u0026var_3=9573623_4qNIGp7fs5\u0026country=AQ\u0026s=1020077707683180545\u0026svar=1764769153\u0026ssk=428a08f6bbb3041c1b70c18e76ecd125\u0026md5=ZjlmOGY0NzFkMmFmZDhjMWU4NWJmMmE1MjhkNTI3Njk\u0026expires=1764769595\u0026zdekr=ZWJjNDY1ZDEzOTZjNmNkNzJjMGQxOGE5ZGJhMjJkMmU\u0026stest=7def19cd5e57f0c45408f6e2e730e64d","date":"2025-12-03T13:39:44.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:32:59 GMT","end":"Sat, 21 Feb 2026 02:32:58 GMT"},"fingerprint":{"sha1":"31:F5:82:94:27:41:F7:00:6B:D8:71:C2:99:07:8D:54:8F:96:E8:51","sha256":"BB:0F:CA:E0:AD:77:6A:A4:AA:F2:B0:A9:DD:BB:31:0E:3D:59:F4:DB:BB:9E:74:B0:D4:48:AF:F7:DA:25:48:09"}}},"request":{"raw":"GET /_astro/cb475a-D56QfEdH.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Dec 2025 13:39:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 03 Dec 2025 11:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302546-ab6\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 05 Dec 2025 13:39:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2742,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2741)","md5":"672719d308937f306ad0460f95e21043","sha1":"73128c4580af1fc643e1e258aee5810cb4682876","sha256":"532df177aaf1a553fd382ad09e4d57a1df650748cb8a07dbc61e5c8b5f008a80","sha512":"75efe0c8daa535b26a98e6fb6f6d8f5eed58ecbc120b01b5a9aa1fcea39221717b251004bb8cd117c719797d8c976913e751378a23fbf7728f1e0d6226ab5b78","ssdeep":"","tlshash":"085196bf45d4a879054db29dd636d2a23e1838423c1dc4e2a87c4d2d67e60d6e239f2b","first_seen":"2025-12-03T13:04:46.199808Z","last_seen":"2025-12-03T13:40:11.164661Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}