{"report_id":"e363ffe1-9fea-4a87-a2f8-21587f022045","version":6,"status":"done","tags":[],"date":"2026-03-04T20:54:14Z","url":{"schema":"http","addr":"399913.loan/","fqdn":"399913.loan","domain":"399913.loan","tld":"loan"},"ip":{"addr":"103.224.182.189","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=399913.loan","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"title":"Mamma.com Search - Trust Mamma to provide the best search results","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"399913.loan/","fqdn":"399913.loan","domain":"399913.loan","tld":"loan"},"ip":{"addr":"103.224.182.189","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T20:54:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":8}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-04T20:53:53Z","timestamp":1772657633,"ip_dst":{"addr":"Client IP","port":33818,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"34.199.234.25","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2026-03-04T20:53:53.250648+0000\",\"flow_id\":107381092559149,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"34.199.234.25\",\"src_port\":443,\"dest_ip\":\"172.18.0.28\",\"dest_port\":33818,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.sd559908.js.rsocdomains.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"52:B6:98:6D:01:6C:36:05:DE:97:BF:E1:AA:7D:D0:67\",\"fingerprint\":\"ea:71:3d:ec:fb:1b:e3:ce:69:f9:00:4f:34:6e:df:3a:95:11:14:5a\",\"sni\":\"obs.sd559908.js.rsocdomains.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-01-14T00:00:00\",\"notafter\":\"2026-04-14T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"80d47c47e3ce91bc3bd0a026dbd1664d\",\"string\":\"771,49196,5-65281-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3934,\"start\":\"2026-03-04T20:53:52.960813+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"obs.sd559908.js.rsocdomains.com","ip":{"addr":"34.199.234.25","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2025-10-30","domain_rank":0,"first_seen":"2025-11-29T06:04:21.715008Z","last_seen":"2026-03-01T05:29:02.402802Z","alert_count":9,"request_count":3,"received_data":4459,"sent_data":7813,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":2,"received_data":98306,"sent_data":1116,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-03-01T22:26:39.665209Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":712,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ob.sd559908.js.rsocdomains.com","ip":{"addr":"52.84.50.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-10-30","domain_rank":0,"first_seen":"2025-11-29T06:04:21.718439Z","last_seen":"2026-03-01T05:29:02.428054Z","alert_count":3,"request_count":1,"received_data":121557,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-03-01T22:48:56.265504Z","alert_count":0,"request_count":3,"received_data":841277,"sent_data":1304,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-03-01T22:34:33.541148Z","alert_count":0,"request_count":2,"received_data":1682,"sent_data":2098,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dynadot.rsocdomains.com","ip":{"addr":"103.224.182.74","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"2025-10-30","domain_rank":0,"first_seen":"2026-01-30T09:17:15.422663Z","last_seen":"2026-02-27T09:52:47.146339Z","alert_count":6,"request_count":3,"received_data":42126,"sent_data":1788,"comment":"","tags":null,"fingerprints":[{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"t.contentsquare.net","ip":{"addr":"52.84.50.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-02-16","domain_rank":18964,"first_seen":"2017-11-15T12:53:17Z","last_seen":"2026-02-26T01:37:19.62531Z","alert_count":0,"request_count":2,"received_data":458137,"sent_data":901,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"ep2.adtrafficquality.google","ip":{"addr":"192.178.25.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-11-17","domain_rank":3229,"first_seen":"2024-08-13T12:56:28Z","last_seen":"2026-03-02T01:08:58.591122Z","alert_count":0,"request_count":2,"received_data":37507,"sent_data":992,"comment":"","tags":null,"fingerprints":null},{"fqdn":"expired.mamma.com","ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"1996-07-31","domain_rank":0,"first_seen":"2025-12-17T02:37:38.466476Z","last_seen":"2026-02-27T06:01:37.205045Z","alert_count":0,"request_count":19,"received_data":7914930,"sent_data":21887,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Contentsquare","description":"Contentsquare is an enterprise-level UX optimisation platform.","website":"https://contentsquare.com","common_platform_enumeration":"","icon":"Contentsquare.svg","categories":["Analytics","A/B Testing"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI:1.14.0","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}]},{"fqdn":"399913.loan","ip":{"addr":"103.224.182.189","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"2025-02-27","domain_rank":0,"first_seen":"2026-03-04T20:54:18.652447Z","last_seen":"2026-03-04T20:54:18.652447Z","alert_count":0,"request_count":1,"received_data":3021,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":47154,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ep1.adtrafficquality.google","ip":{"addr":"142.251.142.226","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-11-17","domain_rank":3093,"first_seen":"2024-07-24T04:17:49Z","last_seen":"2026-03-01T23:21:39.541229Z","alert_count":0,"request_count":1,"received_data":11251,"sent_data":535,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-01T22:20:53.525798Z","alert_count":0,"request_count":2,"received_data":792988,"sent_data":891,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pro.fontawesome.com","ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":56192,"first_seen":"2018-03-17T18:03:41Z","last_seen":"2026-02-25T22:56:48.643244Z","alert_count":0,"request_count":2,"received_data":348419,"sent_data":1026,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-03-01T22:26:33.479606Z","alert_count":0,"request_count":1,"received_data":132082,"sent_data":426,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=399913.loan","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.74","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"889ca9e2c79a3ce7aaadbcdfd0ce4ef5","sha1":"b05c2c051bae71f80cb8c289e5a42d4f96d323fa","sha256":"6477acf082d26199b6ce8346b93149b1b999233d9fe76b0340ebf43317cf98f8","sha512":"122a494d50a5e8077cdda40e8d6edb442bb9d89fff078852aad7f84fe24f1c58fe693f0388ca6c9453d1b33036da0b9c4e9fb394a18268e254d306ffc2ca57a3","ssdeep":"","tlshash":"46a002d4b4ed8125564583390104d91cf936c934c0d5701873f0466ca6e700a53610b2","size":62,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-04T12:48:54.533233Z","times_seen":332211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=399913.loan","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.74","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e5d8c139688b25ef77b263d88ea99150","sha1":"7abc9c61c4966543f66d150c0155bfac575f86a7","sha256":"53e5f34ac520035c7f124076d1e68c70a85c83cf68a339fa713b872b54126148","sha512":"1cd4eb192d987ea1b21f3b553eea3881c807f8bf4a5299982675d57314a0eaa084db1722c38d02eb73178660ecb1ca3667a795a512527f843f2526dc0a99dc20","ssdeep":"","tlshash":"7440000000003000033c0000000000c0000c00000000000000000c00030000000c0000","size":7,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-04T12:48:54.522834Z","times_seen":332263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/js/app.js","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6afc09e7619e556d54d1cb17a5a70022","sha1":"173e9d33730b6732ab48f87575fafccc1997254c","sha256":"6cd89b0651a4a6584cc98859b12e37d3df207ecf7ac621c4ade4e4c6b7469f3e","sha512":"93f964b9280cd93d8cfe439f13eeefac92d8590a6c3a286a9c667ec3f67bf870d3b652347705724b68e0f3d447b169400e4738b2ab3fa6174e252a688719f03e","ssdeep":"","tlshash":"1121eef8c87390d144b7206f86ae21a425a1197baa48f883388db5927fd8f7e15306f4","size":1155,"data":"","first_seen":"2025-07-02T03:33:37.427114Z","last_seen":"2026-04-04T09:28:43.665228Z","times_seen":3364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.contentsquare.net/uxa/3e73dd2905556.js","fqdn":"t.contentsquare.net","domain":"contentsquare.net","tld":"net"},"ip":{"addr":"52.84.50.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"381f2cb14e1e892c95419a8bd02f3948","sha1":"3c7eecfe5143af1a1a8dcbc407e994039591389a","sha256":"d815e428a3adb827cef26bf3bcf59b4f08030f734820e4c250a895e6a7104aef","sha512":"4501584af507044d1475aca4b0a86feb434cec4f1990db3399877920ec5918b4524175a7433f4ba751e7e1285389336cf7af4e112a8abce7858b40052145a39d","ssdeep":"6144:bUARE9BJLz9r/67/TYKSFpZ38fPQAqGse5x2RjaDDgWZkIMicrTc3mwj:bUARU9r4qqwk8ReVrhj","tlshash":"dba42bd973a6b0b68799c1ead0360102b33979a97409003cf1adecfb35a4d4572f6b79","size":454265,"data":"","first_seen":"2026-03-04T15:38:16.980119Z","last_seen":"2026-03-05T09:39:45.725413Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=399913.loan","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.74","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bde173e62df67637436196cebfcf8776","sha1":"9b07579b8f16da4c743c7023f8c7d9205df1cdfd","sha256":"c72c8ccb95779a7c4faff6dde50f8aca62f460ced8a6da830904365739bf6e08","sha512":"f5a0d0e4577475c7a40ed918d15de9999b3a3b4d3100513eedf80bb63c85b774feaa2688d6782a5e95130c5a8e0bb487601c76482248f585b9a39514a6d123ef","ssdeep":"","tlshash":"5e017b1a35b3901159abe025573f3d0928bfa507190ad9113c1d4b8ccfa069ab4226f6","size":789,"data":"","first_seen":"2026-03-04T20:54:22.567093Z","last_seen":"2026-03-04T20:54:22.567093Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=399913.loan","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.74","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-04-04T12:48:54.532571Z","times_seen":352878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ob.sd559908.js.rsocdomains.com/i/58518ef7cff0c8433a35a3a4a06ac5dd.js","fqdn":"ob.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"52.84.50.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d3715fbc6351a6f06aa0c8d5ddf067c","sha1":"6d5fc7501ab5b3988a155c9790ae1c89ddf76da4","sha256":"571048f845de8fe69262ea6788eb5accaef086dc1b0cfa3d2ff9fc1243939faa","sha512":"dd1b551eba63623cc822b26ca7475716ddf69b9439079040efcca2a4b59269a7b0cd6b3a198b715819c175e224281b2a555fa51a3d856a5e3b1bd8b1fd4e260f","ssdeep":"1536:5wxeb5bdwL+phFz9FSUsqLon8NYgetcVPkx2cnYteolbFr3rd6TcWmuZUfFi8AiZ:5m5+dzfVP9ftrdruZ5QZ3fao8r0","tlshash":"53c3d6ddb2e27025439324a5157f410ae27b2e553c4b8290d17ee9d4ac7ce8e817bfac","size":121031,"data":"","first_seen":"2026-03-01T19:25:53.52879Z","last_seen":"2026-03-08T12:05:15.27578Z","times_seen":471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=399913.loan","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"57f27d78b1f47d5e8a5dc7c9779ff2ad","sha1":"161da2ee6e76f34fa4a959efd540ad171f9c9c1d","sha256":"6753e44c8aa3b471a2811e81da9ba6f8fe3fa4c347adf6330230c2dc9717468e","sha512":"d52b4093d8d4f2bf73d85cc84552d204057518e28b90aeae6341107621e1220059baedb32964c6d701ee7cea8a8d938bbf83348ebbbb92f66bea53d0c605dcfe","ssdeep":"","tlshash":"33c02bccf08351ea30722030cb7308070831937b08c4c0413009027d1f72c07024bb0c","size":137,"data":"","first_seen":"2024-08-21T07:24:10.333614Z","last_seen":"2026-04-04T09:28:43.687444Z","times_seen":3378,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=399913.loan","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf1a0b319850914ec37db3662478aac8","sha1":"a01a3bd40e2b408259650ede8440f7250edfd635","sha256":"66e579dfdcb2d80a606bec2549a0b9bd17ea9dc3e44bcb4fa7902381ee723eb2","sha512":"7f9f089679a0ecb8a1e0323c879baedef1f5fb33ca073f58d4ce49eeaa9a623978b68c300f3b992fad938db4d4b18f7638d2a005aaeab64ba9c2137079089b74","ssdeep":"","tlshash":"56e0c0eb74164872629f85b633b5a1257253290d78091c22fdfd8c246e58687481719c","size":358,"data":"","first_seen":"2025-09-28T06:57:47.637874Z","last_seen":"2026-04-04T09:28:43.688026Z","times_seen":3368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"12e87d2f3a4c8b347ab13a0764d420a3","sha1":"4be715e11048c057fdf2ee0fbbfad4dbf3504c55","sha256":"78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe","sha512":"fa4d699e582de05d47f0beeddf3f79a37fca3bea3bf083447174db9e8250fc5d95a835615a86a256697f3841eff47b1583151a556f886e264f50941f17f63167","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPfz:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAV","tlshash":"e954a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","size":285314,"data":"","first_seen":"2023-09-15T16:51:13Z","last_seen":"2026-04-04T11:32:29.918242Z","times_seen":15945,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.14.0/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b90421cbb9666fd2558c5b57b2994a4","sha1":"3cca9d56f9bb1f973dd3ec9212de21c296cd5e21","sha256":"bb42fc680e84bf76d8d87238cb4080cabf47f05456817e2167df8aec2da7cdd7","sha512":"731467ffb3be2564aabc138678e0da0bebfdc2bed1165944c1de92040b9be59b813c4cc1b586574f1e3a28d9e5cef11f1b8d82cdbc1fb1c6c161961c82b5ca34","ssdeep":"12288:/aemHFgymcpIyHCcmMY/W/EEMPlQRgkrVhDdRtn:WIyHCcmMY/W/EEMPt0hDdRtn","tlshash":"ebb4b7c9f39c265a867a32594c2e42cdb23d8075e600587fbc5d59dc29a883c43bbf79","size":518995,"data":"","first_seen":"2024-09-19T22:28:43.042948Z","last_seen":"2026-04-04T09:28:43.66667Z","times_seen":3486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=399913.loan","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0bb74b0b25b907f0209e865e6b5d8d4","sha1":"bdb2dcf8c447197fa53c0b075141126eeb1a89b6","sha256":"27d6832829b065f873b4f2268ed68e65bbf91b4c77b9fd015f4ec1f7f6990fce","sha512":"00b9d36b0bc4d8623f07907b1e409cc83cdf689195a19ce3999f67bae1b3dfac2118a1123649a73cd5e7502650e9ba44ab23877e66cbac26173edf18b24daf2a","ssdeep":"","tlshash":"63113a2fb4e1207741ab29f5b39b864d3b69890754c685323aacc70d6fa755008f3afc","size":1013,"data":"","first_seen":"2025-07-02T03:33:37.463951Z","last_seen":"2026-04-04T09:28:43.688611Z","times_seen":3356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/js/tailwindcss.js","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-04T12:43:23.500881Z","times_seen":28766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=399913.loan","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bd43cf0ae158526c6ab93dc3be79f28","sha1":"15c289e342bd3fdf5b1e95f7abf25a2bc78bf357","sha256":"7a13d5ae0755d86c09084ec300c4a0f1a0a06921f74d9980eba9d966ff17ad38","sha512":"5190eb107c27f5d655eab378cd468228aa031d088f59082f257f41d464a29fbdb23594043afe89a3f9b63ce86d91efad6c2901c816d85196389293a6a5a28521","ssdeep":"","tlshash":"df90040100513554711530d00134c3dd157df075dc4dd335754f57004040405c53c401","size":40,"data":"","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-04-04T12:48:32.02706Z","times_seen":20477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-9WGW9SCFVP\u0026cx=c\u0026gtm=4e6330","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"60dc7bd57bd7c8e4de066c56e558d33b","sha1":"53ccee498dcf3ae394afb517b4d99c3707590dd3","sha256":"2992846e593ffceba96658bfa5ae4e38bdcc1b2c686daef4478456795211af8c","sha512":"85689887782435d8a61a0ee13d0a361517a2c39d17618933a7c42caefcf7734200bfbbe04d61825e0c113fb164bdf0b19f0c5cd24b5435ee095160435258523d","ssdeep":"6144:gsYknWle95I2Ut3PYGx5Lfis8F0nAH8lQlr+mpvibyKEm:V9WI95I2urjis8V6f","tlshash":"caa41ace73c674225396f478503f018ba57b68a2b49cc89af189cce42e7469a4137f7d","size":464076,"data":"","first_seen":"2026-03-04T18:15:35.0154Z","last_seen":"2026-03-04T20:57:54.268029Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/search/ads.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"146ab915cbea4595ffbe807dba14d4a5","sha1":"d4d4f99c2bb08972d97d419b66bfb5f6c862ba7b","sha256":"cc10e9f363d79411f3004357bfb4ec02ca4c29b2c318769d2780d046556a8d28","sha512":"592fa54aa905c91665890b1a24df2b735e85b04b15fd1e8f4c38046f688ae6527776f3df8d7d18c59653aedc3524c89c6a06d21140741d59afbb42b67d0731f2","ssdeep":"1536:MhQZrBdqj29AlypQL6AoeKdC/4Cd0J5Eg2yJAcGu2rhZcDv7MS697aR9jhFkZfS1:4tLY3s/4dJR8yvoSbuSvd","tlshash":"2ad33acdb6a1742243a3a1f5603f014fb139b96aa40c84a4f199d8e47cb4dad4277fbd","size":131366,"data":"","first_seen":"2026-03-04T20:54:22.555334Z","last_seen":"2026-03-05T15:13:23.905912Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2/253/runner.html","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"192.178.25.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c866489327636a36d982c02319dad6a8","sha1":"976987015dc9c62250063bc61ac97ec2bbbb98b3","sha256":"c9febe17b6cbda93dc3a509c0b180ce0247a20f1bc6808d2a106ec8c2fccbf24","sha512":"0c6a1c298b0186fbdb5cd009e668340e3747a18dd6a4ed4c56ce5aae655aca7fd32f5dd6c63336f0d523c42425b74fdb52f950bc40ea2f249a5a15318b54b606","ssdeep":"","tlshash":"6811b1c572a1e0d8817324f6560f504bf538943b589cb51097a0c8f8acb07fb442af57","size":956,"data":"","first_seen":"2026-02-26T09:48:45.396354Z","last_seen":"2026-04-04T13:12:04.17851Z","times_seen":1275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=399913.loan","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.74","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6559111e4eae643ce013ce0821e91a02","sha1":"fa1086c9aa2cb2d14f5c13bceefe21511bcdae5a","sha256":"d72255f7e5ea4dfdf9821df800356367d0bc7df07ecd103bb660018cb1e4f400","sha512":"a6e3e096076dc152b69e95709dad8925c9c2799c23ad226b9ce7b6ee78936bea7300b66c92821ea0728ce7433d4f53787f27f5e7101f97e4d882be0a461fc051","ssdeep":"","tlshash":"407000000380020020c80233a200882af228003c00030200c008888800a808002080c2","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-04T12:48:54.529623Z","times_seen":332162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obs.sd559908.js.rsocdomains.com/ct?id=93106\u0026url=https%3A%2F%2Fdynadot.rsocdomains.com%2Fexpired%3Fd%3D399913.loan\u0026sf=0\u0026tpi=\u0026ch=399913.loan\u0026uvid=\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1772657632953\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=23656210175102250515122976776855205972156961971020685568119152109921962507522136215882622161\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=1gyBn2daxz\u0026pto=1865\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1772657632.KMcvRVaXICZ4Xvua\u0026suid=1.1772657632.qOuQw22HqCRZvJ8w\u0026tuid=1.1772657632.WKU4BpLGEZIKcyET\u0026fbc=-\u0026gtm=-\u0026it=3%2C1459%2C97\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA%2FNjotaGA2Og%3D%3D","fqdn":"obs.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"34.199.234.25","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"60fb3df8dc353c52504f700cc2a6f91b","sha1":"c7e3f6b7eb4b9e959cea290a900aacf8e069e7ae","sha256":"1172991ea35e036ce7e2886fd38661c18a3d173501654fbd5cba7c3a7cffddab","sha512":"91d854e0acb27972d9467062e10002b4b14ff14a34b011e999fd186684424c8b4c86d9f66a88b0d898e60149f42cf432dfa10b06a84cfe0af1bca071aa00f6aa","ssdeep":"","tlshash":"9761f71e222539f8777e8f6be62268502bf25ebd1ccfc81b1867f30a04b76094e20441","size":3431,"data":"","first_seen":"2026-03-04T20:54:22.532341Z","last_seen":"2026-03-04T20:54:22.532341Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NKZMCM7F","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ed4dbab8effe3df90953bf94ecbc8c9","sha1":"c4a1c6e2f3075383e3c9cce342f843a56670ffb7","sha256":"881479eba8d2c3ca421113fbf440e8c6d1e09de87879b517af3f0a7fe6dfe48d","sha512":"ee892a512a5ea1da507ee5376d511dd66a3abac844eea24e2a00ab1f323cc1a7abacb18d1afa70fd7cef89e4c45bcd07e24a5ad4e1eb63de37a96ab3a7396ea9","ssdeep":"6144:LYknWlj5I2Ug3PYGxi18F0eAH8lQlr+m/uL:L9W55I2Hs18Im","tlshash":"30642acdb7d6746243a3a478403f118bb27a7892f88cc895f186d8d42e74a994237f7d","size":327678,"data":"","first_seen":"2026-03-04T18:58:15.970353Z","last_seen":"2026-03-04T20:54:22.55076Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2.js","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"192.178.25.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"622209dbf4750ca1b62b82ee36b4579e","sha1":"5f459d016a540c008b8a4db3ceaaf570a4a2c3d9","sha256":"893c7f6aca9aca8c8aded19a9cd8919cbd7a205cff7f6503d1241b8fa2f721ff","sha512":"cd7a878355f5b1c086eb8c1c9229a7db90ba9b230f30b77112674f3d90593ac4d8f59a24eec59d29afaf45d7277929a53b596e627e8959d658140d18d6a0a6d9","ssdeep":"384:Pyr4MMy/s1OR/lZQkp5d4WFy6auy9fRIjGRSKh6/RW+fzddr7:VySOxl3p5d4Wk669fC6RgW+fzddn","tlshash":"caa295cab6e1b4654363a9f2a13f100ff23e6c6dd84c4858b084d4e0bdb596a4767f78","size":21495,"data":"","first_seen":"2026-03-01T10:14:34.996222Z","last_seen":"2026-04-03T21:45:58.597644Z","times_seen":1842,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"c92a10324374fac681719d63979d00fe","sha1":"aee655773d856fb038536adcfd6472fc7543463e","sha256":"158a323a7ba44870f23d96f1516dd70aa48e9a72db4ebb026b0a89e212a208ab","sha512":"d27859c90f5748d3ec0ef6d4ef49c1755d6ce1ac8035cd4f7dba41b8dd7d440ad8fca164ccc948b5630ef90346ff9279e35d31887e724ab6e0284300a80eb61f","ssdeep":"","tlshash":"8430000000000000000c0000000000000000000003000000c000003000000000000c00","size":4,"data":"","first_seen":"2024-08-20T00:14:53.541497Z","last_seen":"2026-04-04T12:48:32.027586Z","times_seen":16690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2/253/runner.html","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"192.178.25.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:56.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adtrafficquality.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:39:58 GMT","end":"Mon, 27 Apr 2026 08:39:57 GMT"},"fingerprint":{"sha1":"6F:B9:0D:8E:60:A0:97:4B:8A:A6:E3:6B:C9:AD:E4:BA:70:53:FC:6E","sha256":"42:D0:0C:59:91:04:48:D7:9A:45:18:04:CD:A5:E5:38:B1:81:A3:73:73:91:8F:C9:74:DC:40:F7:B9:79:E5:9B"}}},"request":{"raw":"GET /sodar/sodar2/253/runner.html HTTP/1.1\r\nHost: ep2.adtrafficquality.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"adspam-signals-scs\"\r\nreport-to: {\"group\":\"adspam-signals-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs\"}]}\r\ncontent-length: 5450\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 20:20:10 GMT\r\nexpires: Wed, 04 Mar 2026 21:10:10 GMT\r\ncache-control: public, max-age=3000\r\nage: 2026\r\nlast-modified: Thu, 26 Feb 2026 22:42:13 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14614,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2028)","md5":"961379b174afb05d4e2d5f8f12d9536b","sha1":"88bb62ead0bb1ed10734e3964af360fce282bf9d","sha256":"b77745f4a57eb621e30714ec9daf54ab1191ea694bca8898a48b5ce75de5843b","sha512":"64f66f143f05ca66e172078fc7c389456385bb253947a1933fb382fd8aa3eee34fad0e028c002a1b12c9e813eefe138d0189c9dead28d94c45ae18c5bbeabe0c","ssdeep":"192:Glfuae1+vz7yPBdxcx/uS+JTyaQ6b3xDteLB9saDBiIjkLEX/wm0UZENpmUkpbHq:qfuao+k7m/fdTFORpCVGaLJZlX8v","tlshash":"3562548cbea1b4210363e5f1613f040fe23f64bee45c4999b180e9f16cb5a694623f79","first_seen":"2026-03-01T19:05:05.780035Z","last_seen":"2026-04-03T21:45:58.556501Z","times_seen":1812,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obs.sd559908.js.rsocdomains.com/mon","fqdn":"obs.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"34.199.234.25","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://dynadot.rsocdomains.com/expired?d=399913.loan","date":"2026-03-04T20:53:54.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sd559908.js.rsocdomains.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:71:3D:EC:FB:1B:E3:CE:69:F9:00:4F:34:6E:DF:3A:95:11:14:5A","sha256":"CF:05:9C:6B:30:C3:EB:68:09:12:7B:D1:4B:58:DA:50:88:70:45:EA:95:61:8F:B8:03:FA:78:BA:E3:80:C6:A3"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obs.sd559908.js.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2559\r\nOrigin: https://dynadot.rsocdomains.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/\r\nCookie: _cq_duid=4.2d1e90a2b6b88cd58ef96a0d0a8252b8; _cq_suid=1.1772657632.qOuQw22HqCRZvJ8w; cg_uuid=fee90cebb41bf1dc1eb787fe085fe22f; _cq_pvid=4.96d22ec178c5d2d5c83a182b37396d21\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2559,"data":"e=37dfbd8ee84e00126decc130ed41899e9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d57128c6d2117071a10acf9f29f671fd7d680077f6a49ac7c7656d13a8b31c65162022b9404555f3d010993bc691977be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebff079ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b226537a30ca946c75ca92560c2342250509f2dd2d677554a1ae4b2d89f8fd2dc1e153704f2faca5ac92cc75bfcfc248b5038e523b67c4e19abdea26d59ebe799d215695bd896f1209e83526f6c1403baac6b937d055ab19efd5419c0cd59c20992760ded97e9a30c4ddbcfe8ce6ea102bf531eae4ab774328ae873682be43af570454861e05dbc2db9b93aed56a866ad1deedc854c33c3574843873c4dad1592490b025e541f794499167bf7a520b0c8c76f14dddcdee27f8d6639c47b4de90d56a8d550423bd521747754c7dd1a76eb8058c8c8b64ebde60feb122d185e5e85689f0bf1f293ec6a95a44fab9025d0ee2c7e474ae2887f840fda272a076cb309553d61ccbac20da1b25ecb28f6537387c1e290d580bb7e78e6cce1fb0444f5f34ffb54bc3851e0cffd5c3a8e8299bb9f6f694fafbf01e463caa45d4b00b668b10311edf360b786aa77bfb7648cae9c461d868c53999e86994ec1f93690e3f21057b119ac5e3dd3f794bdb6700f494dbb9c88b2067f4f6c775d1dd6f699c974b687bf383d84820b02087599a1de53c990cbcb376fcc8729eecfdb8e13c31a6955f719e64e4cde6b91cf701280447d031515ab0bf4ddbbd509be5c49b0589ded86d6c6210e762f517a054ae933dc370512b403a7d7de9469cc16e04ab65c1bbe775849a0f9e7e72af117e2483fa915718fc7bf592028544625158b63b3090f0943b9e152c909812a3d7c1eddf01891f472814f07e2155958c1e05ec69f5f4c0319d82af1c5779a269200c18dd5514bfdffc12158c702980858d53cddca882\u0026cri=1gyBn2daxz\u0026sf=0\u0026dc=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%3D\u0026ule=pagehide\u0026cp=unload\u0026gtm=-\u0026gac=-\u0026tb=1\u0026ich=1\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=868\u0026mo=0\u0026pn=3211\u0026spn=2341\u0026fp=2356"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://dynadot.rsocdomains.com\r\ncontent-type: application/json\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T12:49:17.462299Z","times_seen":13332134,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/stockX.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/stockX.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=399913.loan\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZiaG9SczdaM3NDellVc1BYc2lFY2c9PSIsInZhbHVlIjoibzErOVAwZU0zQTlnZ0oxSlVSSnNYUWVwYUtmdjJnQlBCWTVuZGw3LythZ1FHWnI0WWwxQ2FWZ2hvTVlBa0VlQ05PYTBaMWZMNFIrU2xzdm44eUV0K2k2Z2xUQ2lxUUN5REFZaXJmejE3eGdzSzdQcHNNdUNhWFpxK3VySlY0Y2MiLCJtYWMiOiI2MTE2NDk4MDdhNDhkMjllMTJmZTI1Y2U4Y2VlMWI0NGFhZjQwZTUwMjdhNjE2ZmY1ODY1NWY5NjRkNjI2ZWNhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IjVBSk5FWmVaN2hXaFF6L2JtVHU1YXc9PSIsInZhbHVlIjoiK0ZzMG5hUk4wbkhDbXIzTjdSODZCaUNNdjh2SURhZEdDeVllTmFHdEtCVmtKWUNXRUl0a2RCMDdBaGx2NlhLMjdFSVl1ckxGRTZXQm40ckJpL3lyYlhrYWo3VVhpV2ZWWHJPdThZRUlsa0k0UnVTMG0zSUZrSmlVbTVSajhLaUYiLCJtYWMiOiI1YmI4ZGU0NTRiNGNkMDY4ZGNjZjQ0YTg1YjUyMmVlZGJlYzc1ZTI2Y2ZmODhhZGM5OTM2NDVlMWRiZDI3OWQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"711-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 1809\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1809,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"3a74e3bc367eca73b987c062d3cc121c","sha1":"a4dd42327e27f6f5b015173c166ea31330aafdb8","sha256":"2b589c966d50e480e5c1e9966c5305f00b63be2b28b83be271ef4a96483da903","sha512":"095664247fcc501d6f766a749ea030ec324d3943511ed9a214b8e47456b6b952ad40d13337285d0980f811349ffb4c8f1d811138e4a16117b07e230ee8809d6c","ssdeep":"","tlshash":"fb31e65f24443d2cc645fa3ace6033b81a129840bb7913454dcbf43e0b0e1873fe9992","first_seen":"2025-07-02T03:33:37.403661Z","last_seen":"2026-04-04T09:24:12.599388Z","times_seen":3309,"resource_available":false,"data":null}},"time_used":798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":798,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/storage/uploads/hero_image/snap_on.png","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /storage/uploads/hero_image/snap_on.png HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZiaG9SczdaM3NDellVc1BYc2lFY2c9PSIsInZhbHVlIjoibzErOVAwZU0zQTlnZ0oxSlVSSnNYUWVwYUtmdjJnQlBCWTVuZGw3LythZ1FHWnI0WWwxQ2FWZ2hvTVlBa0VlQ05PYTBaMWZMNFIrU2xzdm44eUV0K2k2Z2xUQ2lxUUN5REFZaXJmejE3eGdzSzdQcHNNdUNhWFpxK3VySlY0Y2MiLCJtYWMiOiI2MTE2NDk4MDdhNDhkMjllMTJmZTI1Y2U4Y2VlMWI0NGFhZjQwZTUwMjdhNjE2ZmY1ODY1NWY5NjRkNjI2ZWNhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IjVBSk5FWmVaN2hXaFF6L2JtVHU1YXc9PSIsInZhbHVlIjoiK0ZzMG5hUk4wbkhDbXIzTjdSODZCaUNNdjh2SURhZEdDeVllTmFHdEtCVmtKWUNXRUl0a2RCMDdBaGx2NlhLMjdFSVl1ckxGRTZXQm40ckJpL3lyYlhrYWo3VVhpV2ZWWHJPdThZRUlsa0k0UnVTMG0zSUZrSmlVbTVSajhLaUYiLCJtYWMiOiI1YmI4ZGU0NTRiNGNkMDY4ZGNjZjQ0YTg1YjUyMmVlZGJlYzc1ZTI2Y2ZmODhhZGM5OTM2NDVlMWRiZDI3OWQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\nserver: Apache\r\nlast-modified: Sun, 08 Feb 2026 08:34:02 GMT\r\netag: \"1e9956-64a4be27ac8c1\"\r\naccept-ranges: bytes\r\ncontent-length: 2005334\r\ncontent-type: image/png\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2005334,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"0c8ce1f297321ed477ae348d152c981d","sha1":"908fed905c909016872777c1c9f24f366d0e37ef","sha256":"350c60b80a3bf84aaef6fc0d966414c54da72abb53a72125f745b6e07c2d0c71","sha512":"e49026c4705611ec14846196cfe146ad8f280c9306e04409ab5434aaadbff9b818d8b04e2d3859776bbfb3392c8b75d0b0c3bf66cd3dc4c90ce39cc65f84b6bf","ssdeep":"24576:MQY4JcjXzr5dxHHtRQxcyiN0OeyTm/Bt+RKUR0tKVaNC:JZJcTzdvHwiyigiZiNC","tlshash":"0225336cee49ec71c3c6df329955d12977a490c7a3f3100796ca8ecee87ce10992a359","first_seen":"2026-03-04T09:15:28.824099Z","last_seen":"2026-04-04T09:24:12.620241Z","times_seen":217,"resource_available":false,"data":null}},"time_used":1450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":756,"receive":694,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:55.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 19:23:58 GMT\r\nexpires: Thu, 04 Mar 2027 19:23:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 5397\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-04T12:45:43.87952Z","times_seen":199107,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-9WGW9SCFVP\u0026gtm=45je6330v876558862z89192081961za20gzb9192081961zd9192081961\u0026_p=1772657635380\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=1960569593.1772657636\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGA\u0026_s=1\u0026tag_exp=103116026~103200004~115938466~115938468~116024733~117484252~117755069\u0026sid=1772657636\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fexpired.mamma.com%2F%3Fcid%3D99998%26d%3D399913.loan\u0026dr=https%3A%2F%2Fdynadot.rsocdomains.com%2F\u0026dt=Mamma.com%20Search%20-%20Trust%20Mamma%20to%20provide%20the%20best%20search%20results\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=2849","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:56.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-9WGW9SCFVP\u0026gtm=45je6330v876558862z89192081961za20gzb9192081961zd9192081961\u0026_p=1772657635380\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=1960569593.1772657636\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGA\u0026_s=1\u0026tag_exp=103116026~103200004~115938466~115938468~116024733~117484252~117755069\u0026sid=1772657636\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fexpired.mamma.com%2F%3Fcid%3D99998%26d%3D399913.loan\u0026dr=https%3A%2F%2Fdynadot.rsocdomains.com%2F\u0026dt=Mamma.com%20Search%20-%20Trust%20Mamma%20to%20provide%20the%20best%20search%20results\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=2849 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://expired.mamma.com/\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://expired.mamma.com\r\ndate: Wed, 04 Mar 2026 20:53:56 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:171:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:171:0\r\nreport-to: {\"group\":\"ascnsrsggc:171:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:171:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T12:49:17.462299Z","times_seen":13332134,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":56,"dns":0,"connect":21,"send":0,"wait":31,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/js/app.js","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /js/app.js HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=399913.loan\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZiaG9SczdaM3NDellVc1BYc2lFY2c9PSIsInZhbHVlIjoibzErOVAwZU0zQTlnZ0oxSlVSSnNYUWVwYUtmdjJnQlBCWTVuZGw3LythZ1FHWnI0WWwxQ2FWZ2hvTVlBa0VlQ05PYTBaMWZMNFIrU2xzdm44eUV0K2k2Z2xUQ2lxUUN5REFZaXJmejE3eGdzSzdQcHNNdUNhWFpxK3VySlY0Y2MiLCJtYWMiOiI2MTE2NDk4MDdhNDhkMjllMTJmZTI1Y2U4Y2VlMWI0NGFhZjQwZTUwMjdhNjE2ZmY1ODY1NWY5NjRkNjI2ZWNhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IjVBSk5FWmVaN2hXaFF6L2JtVHU1YXc9PSIsInZhbHVlIjoiK0ZzMG5hUk4wbkhDbXIzTjdSODZCaUNNdjh2SURhZEdDeVllTmFHdEtCVmtKWUNXRUl0a2RCMDdBaGx2NlhLMjdFSVl1ckxGRTZXQm40ckJpL3lyYlhrYWo3VVhpV2ZWWHJPdThZRUlsa0k0UnVTMG0zSUZrSmlVbTVSajhLaUYiLCJtYWMiOiI1YmI4ZGU0NTRiNGNkMDY4ZGNjZjQ0YTg1YjUyMmVlZGJlYzc1ZTI2Y2ZmODhhZGM5OTM2NDVlMWRiZDI3OWQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"483-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 1155\r\ncontent-type: text/javascript\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1155,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"6afc09e7619e556d54d1cb17a5a70022","sha1":"173e9d33730b6732ab48f87575fafccc1997254c","sha256":"6cd89b0651a4a6584cc98859b12e37d3df207ecf7ac621c4ade4e4c6b7469f3e","sha512":"93f964b9280cd93d8cfe439f13eeefac92d8590a6c3a286a9c667ec3f67bf870d3b652347705724b68e0f3d447b169400e4738b2ab3fa6174e252a688719f03e","ssdeep":"","tlshash":"1121eef8c87390d144b7206f86ae21a425a1197baa48f883388db5927fd8f7e15306f4","first_seen":"2025-07-02T03:33:37.427114Z","last_seen":"2026-04-04T09:28:43.665228Z","times_seen":3364,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/paramountplus.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/paramountplus.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=399913.loan\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZiaG9SczdaM3NDellVc1BYc2lFY2c9PSIsInZhbHVlIjoibzErOVAwZU0zQTlnZ0oxSlVSSnNYUWVwYUtmdjJnQlBCWTVuZGw3LythZ1FHWnI0WWwxQ2FWZ2hvTVlBa0VlQ05PYTBaMWZMNFIrU2xzdm44eUV0K2k2Z2xUQ2lxUUN5REFZaXJmejE3eGdzSzdQcHNNdUNhWFpxK3VySlY0Y2MiLCJtYWMiOiI2MTE2NDk4MDdhNDhkMjllMTJmZTI1Y2U4Y2VlMWI0NGFhZjQwZTUwMjdhNjE2ZmY1ODY1NWY5NjRkNjI2ZWNhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IjVBSk5FWmVaN2hXaFF6L2JtVHU1YXc9PSIsInZhbHVlIjoiK0ZzMG5hUk4wbkhDbXIzTjdSODZCaUNNdjh2SURhZEdDeVllTmFHdEtCVmtKWUNXRUl0a2RCMDdBaGx2NlhLMjdFSVl1ckxGRTZXQm40ckJpL3lyYlhrYWo3VVhpV2ZWWHJPdThZRUlsa0k0UnVTMG0zSUZrSmlVbTVSajhLaUYiLCJtYWMiOiI1YmI4ZGU0NTRiNGNkMDY4ZGNjZjQ0YTg1YjUyMmVlZGJlYzc1ZTI2Y2ZmODhhZGM5OTM2NDVlMWRiZDI3OWQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"1e076-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 122998\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":122998,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 950 x 950, 8-bit/color RGBA, non-interlaced","md5":"56258cd30601041a360e3a721edb7129","sha1":"2f29d7342998911bdd6f8ca58484548e6d363b32","sha256":"1c13d46b591e6846eaeea09d1d505bb2ac264f4edddca3f4eda06024277750be","sha512":"b7497db239188cfb2e2b32ff81135eb8fdf55d1568dcaec92c7084580795d69ca7aac6f139fa4c33ee416d249a984d146c38c37de58a156790cacbf08efa9b78","ssdeep":"3072:bIJbnu1qWtyhu83Aa2t9pWsjkMVnPq3ny8o6DC+mMH4486XGZNQJVEF0:ccquTR9/j5nGo6DsMfnQGJV7","tlshash":"83c31282a9c25e20d27f727e65cb58498393ce25b367b6b835896512fc1dfc8383413b","first_seen":"2025-07-02T03:33:37.428722Z","last_seen":"2026-04-04T09:24:12.618342Z","times_seen":3311,"resource_available":false,"data":null}},"time_used":802,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":799,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"399913.loan/","fqdn":"399913.loan","domain":"399913.loan","tld":"loan"},"ip":{"addr":"103.224.182.189","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T20:53:51.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jackpot-star-win.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:32:37 GMT","end":"Fri, 29 May 2026 02:32:36 GMT"},"fingerprint":{"sha1":"87:7C:6A:2A:4F:E5:86:B1:30:E4:3C:B1:41:D4:9A:0C:BC:29:BA:E8","sha256":"54:FC:4F:A7:AA:6A:F6:95:D1:A6:40:17:F1:89:1F:AC:4D:0A:6E:74:69:CB:6C:1B:58:BD:BF:70:59:DB:C5:86"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 399913.loan\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\ndate: Wed, 04 Mar 2026 20:53:51 GMT\r\nserver: Apache\r\nset-cookie: __tad=1772657631.3091600; expires=Sat, 01 Mar 2036 20:53:51 GMT; Max-Age=315360000\r\nlocation: https://dynadot.rsocdomains.com/expired?d=399913.loan\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2707,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T12:49:17.462299Z","times_seen":13332134,"resource_available":true,"data":null}},"time_used":1323,"timings":{"blocked":573,"dns":182,"connect":164,"send":0,"wait":177,"receive":0,"ssl":225},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obs.sd559908.js.rsocdomains.com/ct?id=93106\u0026url=https%3A%2F%2Fdynadot.rsocdomains.com%2Fexpired%3Fd%3D399913.loan\u0026sf=0\u0026tpi=\u0026ch=399913.loan\u0026uvid=\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1772657632953\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=23656210175102250515122976776855205972156961971020685568119152109921962507522136215882622161\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=1gyBn2daxz\u0026pto=1865\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1772657632.KMcvRVaXICZ4Xvua\u0026suid=1.1772657632.qOuQw22HqCRZvJ8w\u0026tuid=1.1772657632.WKU4BpLGEZIKcyET\u0026fbc=-\u0026gtm=-\u0026it=3%2C1459%2C97\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA%2FNjotaGA2Og%3D%3D","fqdn":"obs.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"34.199.234.25","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dynadot.rsocdomains.com/expired?d=399913.loan","date":"2026-03-04T20:53:52.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sd559908.js.rsocdomains.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:71:3D:EC:FB:1B:E3:CE:69:F9:00:4F:34:6E:DF:3A:95:11:14:5A","sha256":"CF:05:9C:6B:30:C3:EB:68:09:12:7B:D1:4B:58:DA:50:88:70:45:EA:95:61:8F:B8:03:FA:78:BA:E3:80:C6:A3"}}},"request":{"raw":"GET /ct?id=93106\u0026url=https%3A%2F%2Fdynadot.rsocdomains.com%2Fexpired%3Fd%3D399913.loan\u0026sf=0\u0026tpi=\u0026ch=399913.loan\u0026uvid=\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1772657632953\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=23656210175102250515122976776855205972156961971020685568119152109921962507522136215882622161\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=1gyBn2daxz\u0026pto=1865\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1772657632.KMcvRVaXICZ4Xvua\u0026suid=1.1772657632.qOuQw22HqCRZvJ8w\u0026tuid=1.1772657632.WKU4BpLGEZIKcyET\u0026fbc=-\u0026gtm=-\u0026it=3%2C1459%2C97\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA%2FNjotaGA2Og%3D%3D HTTP/1.1\r\nHost: obs.sd559908.js.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/\r\nCookie: _cq_duid=1.1772657632.KMcvRVaXICZ4Xvua; _cq_suid=1.1772657632.qOuQw22HqCRZvJ8w\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Wed, 04 Mar 2026 20:53:53 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: cg_uuid=fee90cebb41bf1dc1eb787fe085fe22f; Max-Age=29030400; Path=/; Expires=Wed, 03 Feb 2027 20:53:53 GMT; HttpOnly; Secure; SameSite=None\r\ntiming-allow-origin: https://dynadot.rsocdomains.com\r\ncontent-length: 1187\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3431,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3431), with no line terminators","md5":"60fb3df8dc353c52504f700cc2a6f91b","sha1":"c7e3f6b7eb4b9e959cea290a900aacf8e069e7ae","sha256":"1172991ea35e036ce7e2886fd38661c18a3d173501654fbd5cba7c3a7cffddab","sha512":"91d854e0acb27972d9467062e10002b4b14ff14a34b011e999fd186684424c8b4c86d9f66a88b0d898e60149f42cf432dfa10b06a84cfe0af1bca071aa00f6aa","ssdeep":"","tlshash":"9761f71e222539f8777e8f6be62268502bf25ebd1ccfc81b1867f30a04b76094e20441","first_seen":"2026-03-04T20:54:22.532341Z","last_seen":"2026-03-04T20:54:22.532341Z","times_seen":1,"resource_available":true,"data":null}},"time_used":734,"timings":{"blocked":291,"dns":0,"connect":95,"send":0,"wait":152,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired/result?rid=96d22ec178c5d2d5c83a182b37396d21\u0026cid=8a6c9873-9916-4846-bce4-c190da42d68b\u0026d=399913.loan","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.74","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T20:53:53.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"test.rsocdomains.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 21:41:33 GMT","end":"Sat, 09 May 2026 21:41:32 GMT"},"fingerprint":{"sha1":"1E:C9:08:BA:B6:E8:CD:70:8B:24:03:1B:31:6A:69:AD:0D:CC:6A:BA","sha256":"10:8C:2B:1B:06:D5:06:01:C4:9A:24:79:29:29:8B:FA:99:0D:5D:12:50:5D:35:E1:79:1F:10:C7:18:31:D5:E0"}}},"request":{"raw":"GET /expired/result?rid=96d22ec178c5d2d5c83a182b37396d21\u0026cid=8a6c9873-9916-4846-bce4-c190da42d68b\u0026d=399913.loan HTTP/1.1\r\nHost: dynadot.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/expired?d=399913.loan\r\nCookie: _cq_duid=4.2d1e90a2b6b88cd58ef96a0d0a8252b8; _cq_suid=1.1772657632.qOuQw22HqCRZvJ8w; _cq_pvid=4.96d22ec178c5d2d5c83a182b37396d21\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-length: 0\r\ndate: Wed, 04 Mar 2026 20:53:53 GMT\r\nserver: Kestrel\r\ncache-control: no-cache\r\nlocation: https://expired.mamma.com/?cid=99998\u0026d=399913.loan\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":38827,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T12:49:17.462299Z","times_seen":13332134,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:400,400italic,600,600italic,700,700italic,800,800italic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Open+Sans:400,400italic,600,600italic,700,700italic,800,800italic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 04 Mar 2026 20:53:54 GMT\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46468,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"fc4d1e8341532e72b100662c8d5cd00b","sha1":"9fb1cdb5aa0fbacb008b309cad0c3f15cb77aee3","sha256":"9d0d749d352bfe34562d871e060ad504c4c2e3f26fac903b7c64751eacab220e","sha512":"06a816f0e8acea46f483fdcdb92063c14a95397cbcf94b6df0fc1947de44d364b21f47021e7df34468ca1b4058128d0cc0d8cb36d1b12c21dfe4ac82da175494","ssdeep":"384:+bOjI8t7KvGqY49xn+vROFuGttcvoqY497nMZ6OiFLty5v7qY49Un1AnOPEgtHmN:kiCAgkgHL8OOnL3JbcI/z","tlshash":"57231c910417244066432dd233de3e30ee0fa2607044d076abfd9bdbeedad6a62b535d","first_seen":"2025-09-18T17:37:33.475534Z","last_seen":"2026-04-04T09:28:43.680355Z","times_seen":3549,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":117,"dns":1,"connect":9,"send":0,"wait":22,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep1.adtrafficquality.google/getconfig/sodar?sv=200\u0026tid=afs\u0026tv=1234567890\u0026st=env\u0026sjk=SKF68xQtQQG+08m7sh32mg==\u0026sde=1","fqdn":"ep1.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"142.251.142.226","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:56.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adtrafficquality.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:39:58 GMT","end":"Mon, 27 Apr 2026 08:39:57 GMT"},"fingerprint":{"sha1":"6F:B9:0D:8E:60:A0:97:4B:8A:A6:E3:6B:C9:AD:E4:BA:70:53:FC:6E","sha256":"42:D0:0C:59:91:04:48:D7:9A:45:18:04:CD:A5:E5:38:B1:81:A3:73:73:91:8F:C9:74:DC:40:F7:B9:79:E5:9B"}}},"request":{"raw":"GET /getconfig/sodar?sv=200\u0026tid=afs\u0026tv=1234567890\u0026st=env\u0026sjk=SKF68xQtQQG+08m7sh32mg==\u0026sde=1 HTTP/1.1\r\nHost: ep1.adtrafficquality.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=UTF-8\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\ndate: Wed, 04 Mar 2026 20:53:56 GMT\r\nserver: cafe\r\ncontent-length: 8080\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10694,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"72e07f7f07f9974aca4c67824072d753","sha1":"8e4b4841d1e31929c83b2654136c85e2e2420620","sha256":"79f6e1c3c14e37032879a9a41a324fe15a9d95b6fe0443e2a604d8a8f91a89f5","sha512":"bc85469b6cc8018855e86c7620d2d0238dee2e3db95f8d8c5431fe84eaa22431d851b9f2848abde6c6a74f6df5eacfb878d597412a769cb787f3f5f81cf5d9a7","ssdeep":"192:5MAZ0ax59skTthnFoTJNJUEwQvnuUWejb9yoa+PyUJ4qxd/C5Xk/8mf:Cw/nnm9wQvz39OYtPCi","tlshash":"f922bf16d9b455eb8aac70255aab8ec5f1c0d2bf67c0c4296f16404a18bef72fa0f031","first_seen":"2026-03-04T20:54:22.535317Z","last_seen":"2026-03-04T20:54:22.535317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":52,"dns":2,"connect":8,"send":0,"wait":24,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-9WGW9SCFVP\u0026gtm=45je6330v876558862z89192081961za20gzb9192081961zd9192081961\u0026_p=1772657635380\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=1960569593.1772657636\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGQ\u0026_s=2\u0026tag_exp=103116026~103200004~115938466~115938468~116024733~117484252~117755069\u0026sid=1772657636\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fexpired.mamma.com%2F%3Fcid%3D99998%26d%3D399913.loan\u0026dr=https%3A%2F%2Fdynadot.rsocdomains.com%2F\u0026dt=Mamma.com%20Search%20-%20Trust%20Mamma%20to%20provide%20the%20best%20search%20results\u0026en=page_view\u0026tfd=7859","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:54:01.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-9WGW9SCFVP\u0026gtm=45je6330v876558862z89192081961za20gzb9192081961zd9192081961\u0026_p=1772657635380\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=1960569593.1772657636\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGQ\u0026_s=2\u0026tag_exp=103116026~103200004~115938466~115938468~116024733~117484252~117755069\u0026sid=1772657636\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fexpired.mamma.com%2F%3Fcid%3D99998%26d%3D399913.loan\u0026dr=https%3A%2F%2Fdynadot.rsocdomains.com%2F\u0026dt=Mamma.com%20Search%20-%20Trust%20Mamma%20to%20provide%20the%20best%20search%20results\u0026en=page_view\u0026tfd=7859 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://expired.mamma.com/\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://expired.mamma.com\r\ndate: Wed, 04 Mar 2026 20:54:01 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:171:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:171:0\r\nreport-to: {\"group\":\"ascnsrsggc:171:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:171:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T12:49:17.462299Z","times_seen":13332134,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.contentsquare.net/uxa/3e73dd2905556.js","fqdn":"t.contentsquare.net","domain":"contentsquare.net","tld":"net"},"ip":{"addr":"52.84.50.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.contentsquare.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"81:2B:A5:F7:FB:66:FE:5E:22:95:03:AA:23:47:B5:B5:C4:CA:4A:32","sha256":"3E:1E:4A:F5:7D:7B:01:5C:C6:B4:23:70:7E:11:42:0A:A0:37:55:B6:A1:8A:40:62:29:2F:FE:21:59:3C:F4:60"}}},"request":{"raw":"GET /uxa/3e73dd2905556.js HTTP/1.1\r\nHost: t.contentsquare.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\ncontent-type: application/javascript\r\nx-tag-target: es2019\r\nx-amzn-trace-id: Root=1-69a850f9-4aa12146479ac3bd7f4ae79a;Parent=15914fe22bd92739;Sampled=0;Lineage=1:d10704b2:0\r\nx-amzn-requestid: b2dcd5f4-13a6-470c-b677-e7439c4d0b7b\r\nx-date: 2026-03-04T15:34:17.745Z\r\nx-tag-version: 15.193.7\r\ncontent-encoding: br\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e21c7dce7b26c6a388cc82dd5423f574.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: H_M9wjNCFlqXWRxLa1sS-AKocUjjHyQe_a04G6BTWUJYN49DKiZLmw==\r\nage: 0\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":454265,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42511)","md5":"381f2cb14e1e892c95419a8bd02f3948","sha1":"3c7eecfe5143af1a1a8dcbc407e994039591389a","sha256":"d815e428a3adb827cef26bf3bcf59b4f08030f734820e4c250a895e6a7104aef","sha512":"4501584af507044d1475aca4b0a86feb434cec4f1990db3399877920ec5918b4524175a7433f4ba751e7e1285389336cf7af4e112a8abce7858b40052145a39d","ssdeep":"6144:bUARE9BJLz9r/67/TYKSFpZ38fPQAqGse5x2RjaDDgWZkIMicrTc3mwj:bUARU9r4qqwk8ReVrhj","tlshash":"dba42bd973a6b0b68799c1ead0360102b33979a97409003cf1adecfb35a4d4572f6b79","first_seen":"2026-03-04T15:38:16.980119Z","last_seen":"2026-03-05T09:39:45.725413Z","times_seen":107,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":3,"dns":1,"connect":1,"send":0,"wait":3,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/mamma-favicon.svg","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:56.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/mamma-favicon.svg HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=399913.loan\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZiaG9SczdaM3NDellVc1BYc2lFY2c9PSIsInZhbHVlIjoibzErOVAwZU0zQTlnZ0oxSlVSSnNYUWVwYUtmdjJnQlBCWTVuZGw3LythZ1FHWnI0WWwxQ2FWZ2hvTVlBa0VlQ05PYTBaMWZMNFIrU2xzdm44eUV0K2k2Z2xUQ2lxUUN5REFZaXJmejE3eGdzSzdQcHNNdUNhWFpxK3VySlY0Y2MiLCJtYWMiOiI2MTE2NDk4MDdhNDhkMjllMTJmZTI1Y2U4Y2VlMWI0NGFhZjQwZTUwMjdhNjE2ZmY1ODY1NWY5NjRkNjI2ZWNhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IjVBSk5FWmVaN2hXaFF6L2JtVHU1YXc9PSIsInZhbHVlIjoiK0ZzMG5hUk4wbkhDbXIzTjdSODZCaUNNdjh2SURhZEdDeVllTmFHdEtCVmtKWUNXRUl0a2RCMDdBaGx2NlhLMjdFSVl1ckxGRTZXQm40ckJpL3lyYlhrYWo3VVhpV2ZWWHJPdThZRUlsa0k0UnVTMG0zSUZrSmlVbTVSajhLaUYiLCJtYWMiOiI1YmI4ZGU0NTRiNGNkMDY4ZGNjZjQ0YTg1YjUyMmVlZGJlYzc1ZTI2Y2ZmODhhZGM5OTM2NDVlMWRiZDI3OWQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:56 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"37d-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 893\r\ncontent-type: image/svg+xml\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":893,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2cab9de44eae12465ff29b6a664f9375","sha1":"adbe537227d33660ea063248f10579b0b04cdb24","sha256":"507fe22603f5670f685c8170fc9b69fcd1c7619533dad12260b6245e04420ca1","sha512":"2eae91f47cc74bf070ac483ca7be63772f73137a976c60657d2024a96300b71f18822c075ac5c71576ba7583f8e1ac284b4879430f7b07cb7a0d9481f34eb498","ssdeep":"","tlshash":"f21123964318d87bfdd9460987f075e633e0349ae29414ec6c9b347ae15d8e8e1092dc","first_seen":"2025-07-02T03:33:37.440576Z","last_seen":"2026-04-04T09:28:43.678863Z","times_seen":3289,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/walmart.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/walmart.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=399913.loan\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZiaG9SczdaM3NDellVc1BYc2lFY2c9PSIsInZhbHVlIjoibzErOVAwZU0zQTlnZ0oxSlVSSnNYUWVwYUtmdjJnQlBCWTVuZGw3LythZ1FHWnI0WWwxQ2FWZ2hvTVlBa0VlQ05PYTBaMWZMNFIrU2xzdm44eUV0K2k2Z2xUQ2lxUUN5REFZaXJmejE3eGdzSzdQcHNNdUNhWFpxK3VySlY0Y2MiLCJtYWMiOiI2MTE2NDk4MDdhNDhkMjllMTJmZTI1Y2U4Y2VlMWI0NGFhZjQwZTUwMjdhNjE2ZmY1ODY1NWY5NjRkNjI2ZWNhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IjVBSk5FWmVaN2hXaFF6L2JtVHU1YXc9PSIsInZhbHVlIjoiK0ZzMG5hUk4wbkhDbXIzTjdSODZCaUNNdjh2SURhZEdDeVllTmFHdEtCVmtKWUNXRUl0a2RCMDdBaGx2NlhLMjdFSVl1ckxGRTZXQm40ckJpL3lyYlhrYWo3VVhpV2ZWWHJPdThZRUlsa0k0UnVTMG0zSUZrSmlVbTVSajhLaUYiLCJtYWMiOiI1YmI4ZGU0NTRiNGNkMDY4ZGNjZjQ0YTg1YjUyMmVlZGJlYzc1ZTI2Y2ZmODhhZGM5OTM2NDVlMWRiZDI3OWQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"8be-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 2238\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2238,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"c55dead6c1f0b6dcc6881facc0944fc5","sha1":"2fa841a393a2381632a362c2db2623c56be3aab5","sha256":"753b210ea1db70579a22911976c61c21490d239d18994268cce03af0fd8d7c78","sha512":"4df5152d646327f3f1aac2c9cd5502acc8cc125222f82fcfb24e663dc07b5207ef2732c4e2030438ef6e94c5602721d8bbccec8b6e4c187c09e364a04d222585","ssdeep":"","tlshash":"244109c118e16e1bd916363d7feb1b402a26636f500652043b11b827db87610e4ab2c7","first_seen":"2025-03-15T23:41:14.383382Z","last_seen":"2026-04-04T09:24:12.622265Z","times_seen":3317,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/storage/uploads/hero_image/quran.png","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /storage/uploads/hero_image/quran.png HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZiaG9SczdaM3NDellVc1BYc2lFY2c9PSIsInZhbHVlIjoibzErOVAwZU0zQTlnZ0oxSlVSSnNYUWVwYUtmdjJnQlBCWTVuZGw3LythZ1FHWnI0WWwxQ2FWZ2hvTVlBa0VlQ05PYTBaMWZMNFIrU2xzdm44eUV0K2k2Z2xUQ2lxUUN5REFZaXJmejE3eGdzSzdQcHNNdUNhWFpxK3VySlY0Y2MiLCJtYWMiOiI2MTE2NDk4MDdhNDhkMjllMTJmZTI1Y2U4Y2VlMWI0NGFhZjQwZTUwMjdhNjE2ZmY1ODY1NWY5NjRkNjI2ZWNhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IjVBSk5FWmVaN2hXaFF6L2JtVHU1YXc9PSIsInZhbHVlIjoiK0ZzMG5hUk4wbkhDbXIzTjdSODZCaUNNdjh2SURhZEdDeVllTmFHdEtCVmtKWUNXRUl0a2RCMDdBaGx2NlhLMjdFSVl1ckxGRTZXQm40ckJpL3lyYlhrYWo3VVhpV2ZWWHJPdThZRUlsa0k0UnVTMG0zSUZrSmlVbTVSajhLaUYiLCJtYWMiOiI1YmI4ZGU0NTRiNGNkMDY4ZGNjZjQ0YTg1YjUyMmVlZGJlYzc1ZTI2Y2ZmODhhZGM5OTM2NDVlMWRiZDI3OWQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\nserver: Apache\r\nlast-modified: Sun, 22 Feb 2026 08:17:46 GMT\r\netag: \"1b30eb-64b654a0b3324\"\r\naccept-ranges: bytes\r\ncontent-length: 1781995\r\ncontent-type: image/png\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1781995,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"d71536b97a54e33d40fd88b48d4e1b99","sha1":"edf670f4420eef96b427f345565b3d0a79e6c486","sha256":"5088f6a306c90cc93c8dd39024e4a50379a29e92e507f131d863297d62b2acae","sha512":"54b164355020c0a33e1fc15d812ffd704dcda16e7dfccd4d1a61fd6159d8b21ce1eaab68ce66db64c529b6e0118e54217f8a8a3b187ceb0537fb833d97123f9a","ssdeep":"24576:MFgMuJbAj9fCC/5Vyzmoy0wQwyAESXxUV8+Ck4kH7ZwdcXh:xGjlCCMmoy0wQlZSXxU6+NT7ZwuXh","tlshash":"4f252324ec0a623cc6576c7868b44581dff438d2de84950204c98196db66f2afb6fbce","first_seen":"2026-03-04T09:15:28.83046Z","last_seen":"2026-04-04T09:24:12.600919Z","times_seen":217,"resource_available":false,"data":null}},"time_used":1297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":681,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-9WGW9SCFVP\u0026cx=c\u0026gtm=4e6330","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:55.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"GET /gtag/js?id=G-9WGW9SCFVP\u0026cx=c\u0026gtm=4e6330 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 04 Mar 2026 20:53:56 GMT\r\nexpires: Wed, 04 Mar 2026 20:53:56 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 152977\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":464076,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"60dc7bd57bd7c8e4de066c56e558d33b","sha1":"53ccee498dcf3ae394afb517b4d99c3707590dd3","sha256":"2992846e593ffceba96658bfa5ae4e38bdcc1b2c686daef4478456795211af8c","sha512":"85689887782435d8a61a0ee13d0a361517a2c39d17618933a7c42caefcf7734200bfbbe04d61825e0c113fb164bdf0b19f0c5cd24b5435ee095160435258523d","ssdeep":"6144:gsYknWle95I2Ut3PYGx5Lfis8F0nAH8lQlr+mpvibyKEm:V9WI95I2urjis8V6f","tlshash":"caa41ace73c674225396f478503f018ba57b68a2b49cc89af189cce42e7469a4137f7d","first_seen":"2026-03-04T18:15:35.0154Z","last_seen":"2026-03-04T20:57:54.268029Z","times_seen":19,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":56,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pro.fontawesome.com/releases/v5.14.0/css/all.css","fqdn":"pro.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /releases/v5.14.0/css/all.css HTTP/1.1\r\nHost: pro.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nx-amz-id-2: n52Bf3LWRDaOcX+G2RPVwx8SEDZUCJ0AyfUgjGPvYVNyQUafB/LdFOPd3sfuEtvf+8L1+JbisB/iLAkorEypR6t9a9Lmjg9G\r\nx-amz-request-id: XZ1VFYBQX2EYTN8Q\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 28 Jun 2021 17:12:47 GMT\r\netag: W/\"1dfe138ae594553bc5ddec1f1f1ef389\"\r\ncache-control: max-age=31556926\r\nage: 3687444\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9d73c5e75f4edfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":173842,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65393)","md5":"1dfe138ae594553bc5ddec1f1f1ef389","sha1":"7cc21d0873893a2ef4f9ad06962d8b32cb62d24d","sha256":"e7de3b4b49089f8cdd8267eda652f35806cb2b70f7c5cec0351f6d129263e52b","sha512":"95aa51536dd8c8075b1ce64b8424884e91d8f1718115295d2d9c4a9b5faccb1a7b5675f9a8a0db6a2c458fb5519cf47872247f01ea2c3616919449f20f5de6b9","ssdeep":"1536:mLv1E8SIklJ/ZHUADlnzZ+mqX5l5dWGFIibJbiC8IYiy6BFAXq6Y18GMF63kAmh9:61E1Ik3/S2ln9+1vlbqMAXHP","tlshash":"e4046eb4d41e01da7726c60fab01b27a99f6f738d5410e4ae0cb4d1e1de2b9811c9bed","first_seen":"2023-04-11T10:03:25Z","last_seen":"2026-04-04T09:28:43.686732Z","times_seen":3746,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":10,"dns":1,"connect":1,"send":0,"wait":51,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/doordash.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/doordash.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=399913.loan\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZiaG9SczdaM3NDellVc1BYc2lFY2c9PSIsInZhbHVlIjoibzErOVAwZU0zQTlnZ0oxSlVSSnNYUWVwYUtmdjJnQlBCWTVuZGw3LythZ1FHWnI0WWwxQ2FWZ2hvTVlBa0VlQ05PYTBaMWZMNFIrU2xzdm44eUV0K2k2Z2xUQ2lxUUN5REFZaXJmejE3eGdzSzdQcHNNdUNhWFpxK3VySlY0Y2MiLCJtYWMiOiI2MTE2NDk4MDdhNDhkMjllMTJmZTI1Y2U4Y2VlMWI0NGFhZjQwZTUwMjdhNjE2ZmY1ODY1NWY5NjRkNjI2ZWNhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IjVBSk5FWmVaN2hXaFF6L2JtVHU1YXc9PSIsInZhbHVlIjoiK0ZzMG5hUk4wbkhDbXIzTjdSODZCaUNNdjh2SURhZEdDeVllTmFHdEtCVmtKWUNXRUl0a2RCMDdBaGx2NlhLMjdFSVl1ckxGRTZXQm40ckJpL3lyYlhrYWo3VVhpV2ZWWHJPdThZRUlsa0k0UnVTMG0zSUZrSmlVbTVSajhLaUYiLCJtYWMiOiI1YmI4ZGU0NTRiNGNkMDY4ZGNjZjQ0YTg1YjUyMmVlZGJlYzc1ZTI2Y2ZmODhhZGM5OTM2NDVlMWRiZDI3OWQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"7a8-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 1960\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1960,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"a2aa24db9097058ecddf0c21616dc32b","sha1":"8507e1b050de8427ddc817bd414fcab8b057e7e1","sha256":"4ceee7903b0ff3777b243339047fc545a66d52122b1e14166cf92b432864d96e","sha512":"d0a0c4b8edcc7065d0cad188a2b87218c0c5c987022e0976af61e5977d0693ad11011d643b4cb11643387a997782a71c6a6dcb12ef5c5826a56a2b7d9f7b537a","ssdeep":"","tlshash":"c4413d99f3593d47cbd997f4c3700e91194c5c6926d04044b2431b7a60fbf67d648c01","first_seen":"2025-07-02T03:33:37.417807Z","last_seen":"2026-04-04T09:24:12.606237Z","times_seen":3314,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/storage/uploads/hero_image/business-operations-72.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /storage/uploads/hero_image/business-operations-72.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZiaG9SczdaM3NDellVc1BYc2lFY2c9PSIsInZhbHVlIjoibzErOVAwZU0zQTlnZ0oxSlVSSnNYUWVwYUtmdjJnQlBCWTVuZGw3LythZ1FHWnI0WWwxQ2FWZ2hvTVlBa0VlQ05PYTBaMWZMNFIrU2xzdm44eUV0K2k2Z2xUQ2lxUUN5REFZaXJmejE3eGdzSzdQcHNNdUNhWFpxK3VySlY0Y2MiLCJtYWMiOiI2MTE2NDk4MDdhNDhkMjllMTJmZTI1Y2U4Y2VlMWI0NGFhZjQwZTUwMjdhNjE2ZmY1ODY1NWY5NjRkNjI2ZWNhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IjVBSk5FWmVaN2hXaFF6L2JtVHU1YXc9PSIsInZhbHVlIjoiK0ZzMG5hUk4wbkhDbXIzTjdSODZCaUNNdjh2SURhZEdDeVllTmFHdEtCVmtKWUNXRUl0a2RCMDdBaGx2NlhLMjdFSVl1ckxGRTZXQm40ckJpL3lyYlhrYWo3VVhpV2ZWWHJPdThZRUlsa0k0UnVTMG0zSUZrSmlVbTVSajhLaUYiLCJtYWMiOiI1YmI4ZGU0NTRiNGNkMDY4ZGNjZjQ0YTg1YjUyMmVlZGJlYzc1ZTI2Y2ZmODhhZGM5OTM2NDVlMWRiZDI3OWQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\nserver: Apache\r\nlast-modified: Mon, 12 Jan 2026 00:22:13 GMT\r\netag: \"2da0-64825ddd8c651\"\r\naccept-ranges: bytes\r\ncontent-length: 11680\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11680,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f47ebc997defbf3382504970260d7fab","sha1":"deea2a2ac4ba65e06e08f5fce2e986039d93ec3e","sha256":"f9f0a2742291ed4fff83d5194c7ed601cb5929ff4fb0e68b79b7955b2c2c6de0","sha512":"50d36dcaa66a7b548333745e8f7c4c6daca6039e6d18d59a692d08d8dc9ebd3d51f79c494ebcc79a7a6ddc96489b91aa8014fc04b19a335faa29aaaba94e0c03","ssdeep":"192:2wCTfrH/hFPREEvres0aHG6sa1bflvT3LWTZA4xiv4AXUr8I1QWmx+sZIvHP0gVY:2wCTfN9RVv6snsatVGTZRxO4Akr88mwQ","tlshash":"2632cf62631caa73e725e5365d8a3fc7e7202300840f869a4bc41be51fd8ac3429db44","first_seen":"2026-03-04T09:15:28.847631Z","last_seen":"2026-04-04T09:24:12.623308Z","times_seen":217,"resource_available":false,"data":null}},"time_used":756,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":755,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/fiverr.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/fiverr.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=399913.loan\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZiaG9SczdaM3NDellVc1BYc2lFY2c9PSIsInZhbHVlIjoibzErOVAwZU0zQTlnZ0oxSlVSSnNYUWVwYUtmdjJnQlBCWTVuZGw3LythZ1FHWnI0WWwxQ2FWZ2hvTVlBa0VlQ05PYTBaMWZMNFIrU2xzdm44eUV0K2k2Z2xUQ2lxUUN5REFZaXJmejE3eGdzSzdQcHNNdUNhWFpxK3VySlY0Y2MiLCJtYWMiOiI2MTE2NDk4MDdhNDhkMjllMTJmZTI1Y2U4Y2VlMWI0NGFhZjQwZTUwMjdhNjE2ZmY1ODY1NWY5NjRkNjI2ZWNhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IjVBSk5FWmVaN2hXaFF6L2JtVHU1YXc9PSIsInZhbHVlIjoiK0ZzMG5hUk4wbkhDbXIzTjdSODZCaUNNdjh2SURhZEdDeVllTmFHdEtCVmtKWUNXRUl0a2RCMDdBaGx2NlhLMjdFSVl1ckxGRTZXQm40ckJpL3lyYlhrYWo3VVhpV2ZWWHJPdThZRUlsa0k0UnVTMG0zSUZrSmlVbTVSajhLaUYiLCJtYWMiOiI1YmI4ZGU0NTRiNGNkMDY4ZGNjZjQ0YTg1YjUyMmVlZGJlYzc1ZTI2Y2ZmODhhZGM5OTM2NDVlMWRiZDI3OWQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"8b8-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 2232\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2232,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"d7c86e0082be875ab9e502d8f63a560a","sha1":"7465b9a5a77881507eeb6356b5f4c04ea4921093","sha256":"dbab65716f1d5e9dc9ce6a17614ad1e015be9b49a23d78f48a042a9d2e5b5dc0","sha512":"311b5ffb7eeb21c8494a1fe91da9c8c735d247663a9b303aa0975d1cc70c2743716d16866fd3e21e51b7aab9177b6b0d9599cfa72540586ae446084bb790afc7","ssdeep":"","tlshash":"e3413a86b6441918e5a2c77417a8f87075eb199dd07099e73bca08a6314ee2a70163dd","first_seen":"2025-07-02T03:33:37.459148Z","last_seen":"2026-04-04T09:24:12.607408Z","times_seen":3306,"resource_available":false,"data":null}},"time_used":796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":796,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=399913.loan","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.74","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T20:53:51.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"test.rsocdomains.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 21:41:33 GMT","end":"Sat, 09 May 2026 21:41:32 GMT"},"fingerprint":{"sha1":"1E:C9:08:BA:B6:E8:CD:70:8B:24:03:1B:31:6A:69:AD:0D:CC:6A:BA","sha256":"10:8C:2B:1B:06:D5:06:01:C4:9A:24:79:29:29:8B:FA:99:0D:5D:12:50:5D:35:E1:79:1F:10:C7:18:31:D5:E0"}}},"request":{"raw":"GET /expired?d=399913.loan HTTP/1.1\r\nHost: dynadot.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 2707\r\ncontent-type: text/html\r\ndate: Wed, 04 Mar 2026 20:53:51 GMT\r\nserver: Kestrel\r\ncache-control: no-cache\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":2707,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"33e68cc0f1b3dad6315f70ec1191cce5","sha1":"1ed29d1a7400d7dc45880c463de9e14c080b8637","sha256":"8376147cf7acc5515486ead60d2348c63cedc32e8f30eeca47efdc7afb3de5e9","sha512":"a996f7f70a51affb65db80c775360c8d63c3394b50394e0cd07478e22f4603e1b8f835d74c1d75b192f8767014176d68440031f1c706774b4bcc1084eb8b3b0d","ssdeep":"","tlshash":"965123566de340025467d0255bbb7a083aaaf507470acd653e9e13cccfc53da98a37e8","first_seen":"2026-03-04T20:54:22.545258Z","last_seen":"2026-03-04T20:54:22.545258Z","times_seen":1,"resource_available":true,"data":null}},"time_used":819,"timings":{"blocked":328,"dns":1,"connect":159,"send":0,"wait":163,"receive":0,"ssl":166},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/favicon.ico","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.74","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dynadot.rsocdomains.com/expired?d=399913.loan","date":"2026-03-04T20:53:52.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"test.rsocdomains.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 21:41:33 GMT","end":"Sat, 09 May 2026 21:41:32 GMT"},"fingerprint":{"sha1":"1E:C9:08:BA:B6:E8:CD:70:8B:24:03:1B:31:6A:69:AD:0D:CC:6A:BA","sha256":"10:8C:2B:1B:06:D5:06:01:C4:9A:24:79:29:29:8B:FA:99:0D:5D:12:50:5D:35:E1:79:1F:10:C7:18:31:D5:E0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dynadot.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/expired?d=399913.loan\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 0\r\ndate: Wed, 04 Mar 2026 20:53:52 GMT\r\nserver: Kestrel\r\ncache-control: no-cache\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T12:49:17.462299Z","times_seen":13332134,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.14.0/themes/base/jquery-ui.css","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /ui/1.14.0/themes/base/jquery-ui.css HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-8941\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\nage: 2465489\r\nx-served-by: cache-lga21941-LGA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 4098, 464\r\nx-timer: S1772657635.528515,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 8095\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35137,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2363)","md5":"c7adb32928265c74cd2756b2e671e514","sha1":"29bd82afaa8d25afc01224193d02f917ab6ed244","sha256":"91f3e161d59796ce95f79439670ef5c752fa6c0d2100c5da5d037c400026dcd3","sha512":"2f7d90dd65dc3369a2ef5860bdde7a59c0f89756c5d736aa8cf803896e8027bdf365ebc967e33f1872ba37946fef65a6fa2fa9d36788364582ab8b3eb830d602","ssdeep":"192:70OW0NANbrj6ltnJbUetUQnSMfps3+emQY+h572hk/grQY5Y6BjSmMErEURHllPR:UrjUJo0W1eX3/PiF5fypDS25H","tlshash":"faf2ec316b432919ba1bd1a425a11bf7e32f1342ee1b6e7f64aa345cc3d54e080bf5b4","first_seen":"2024-08-16T22:22:29Z","last_seen":"2026-04-04T09:28:43.670931Z","times_seen":3491,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":68,"dns":0,"connect":26,"send":0,"wait":28,"receive":1,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/storage/uploads/hero_image/top_model_australia.png","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /storage/uploads/hero_image/top_model_australia.png HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZiaG9SczdaM3NDellVc1BYc2lFY2c9PSIsInZhbHVlIjoibzErOVAwZU0zQTlnZ0oxSlVSSnNYUWVwYUtmdjJnQlBCWTVuZGw3LythZ1FHWnI0WWwxQ2FWZ2hvTVlBa0VlQ05PYTBaMWZMNFIrU2xzdm44eUV0K2k2Z2xUQ2lxUUN5REFZaXJmejE3eGdzSzdQcHNNdUNhWFpxK3VySlY0Y2MiLCJtYWMiOiI2MTE2NDk4MDdhNDhkMjllMTJmZTI1Y2U4Y2VlMWI0NGFhZjQwZTUwMjdhNjE2ZmY1ODY1NWY5NjRkNjI2ZWNhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IjVBSk5FWmVaN2hXaFF6L2JtVHU1YXc9PSIsInZhbHVlIjoiK0ZzMG5hUk4wbkhDbXIzTjdSODZCaUNNdjh2SURhZEdDeVllTmFHdEtCVmtKWUNXRUl0a2RCMDdBaGx2NlhLMjdFSVl1ckxGRTZXQm40ckJpL3lyYlhrYWo3VVhpV2ZWWHJPdThZRUlsa0k0UnVTMG0zSUZrSmlVbTVSajhLaUYiLCJtYWMiOiI1YmI4ZGU0NTRiNGNkMDY4ZGNjZjQ0YTg1YjUyMmVlZGJlYzc1ZTI2Y2ZmODhhZGM5OTM2NDVlMWRiZDI3OWQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\nserver: Apache\r\nlast-modified: Sun, 08 Feb 2026 08:12:04 GMT\r\netag: \"1bdbc9-64a4b93eaf465\"\r\naccept-ranges: bytes\r\ncontent-length: 1825737\r\ncontent-type: image/png\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1825737,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"a8bf913806a5b7ddcf41aa369fd0d2a6","sha1":"a41bc13dd66dc3268de5daa9da5d486d352a82ad","sha256":"0a565b026ed368ab0fd6f8fdf93d51421ccb4cf23d9b4643a8f0c2bcf40aa05c","sha512":"2b7fe53feb2e2774a19df57b3d6c147fcee1dfed191741e84ee234fabae48e080f20a4f71058be54eb071affeaf32056304416abcd63f57e7e580eff4c3bd1d8","ssdeep":"24576:yLK/8kdPG5D/5+XT1SW+3sgVlpsWYJmAb9VCUb:184rXTYzVlS9m0fzb","tlshash":"5e2533e4f6c1b7bbd9e7c17960a1d08b6ad120d43b1938414768cdc82f68f067e9a74e","first_seen":"2026-03-04T09:15:28.825101Z","last_seen":"2026-04-04T09:24:12.61572Z","times_seen":217,"resource_available":false,"data":null}},"time_used":1400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":756,"receive":644,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ob.sd559908.js.rsocdomains.com/i/58518ef7cff0c8433a35a3a4a06ac5dd.js","fqdn":"ob.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"52.84.50.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dynadot.rsocdomains.com/expired?d=399913.loan","date":"2026-03-04T20:53:52.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sd559908.js.rsocdomains.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 25 Nov 2025 00:00:00 GMT","end":"Thu, 24 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D8:BF:CA:57:4B:F8:E0:A8:F2:21:31:99:0C:8C:18:40:E5:CD:00:F6","sha256":"AC:AC:4F:5E:FC:5A:BF:23:4B:FB:96:F1:BD:C6:59:2F:FF:13:DE:12:47:1C:3B:14:64:0C:C4:EC:A2:AA:7F:3D"}}},"request":{"raw":"GET /i/58518ef7cff0c8433a35a3a4a06ac5dd.js HTTP/1.1\r\nHost: ob.sd559908.js.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 44779\r\ncontent-encoding: gzip\r\nserver: Caddy\r\ndate: Wed, 04 Mar 2026 19:25:32 GMT\r\ncache-control: max-age=43200\r\nexpires: Wed, 04 Mar 2026 23:58:12 GMT\r\netag: \"1d8c7-bV/HUBq1s5iKFVyXkK4cid33baQ\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50557aa30b42f85b01a1a22ebf5ee7a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: PMBwR2or4uRzTqADwYOXnWFrp_I7kU7pDofBiCDUBWncp0ABdE6qjg==\r\nage: 32140\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":121031,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"0d3715fbc6351a6f06aa0c8d5ddf067c","sha1":"6d5fc7501ab5b3988a155c9790ae1c89ddf76da4","sha256":"571048f845de8fe69262ea6788eb5accaef086dc1b0cfa3d2ff9fc1243939faa","sha512":"dd1b551eba63623cc822b26ca7475716ddf69b9439079040efcca2a4b59269a7b0cd6b3a198b715819c175e224281b2a555fa51a3d856a5e3b1bd8b1fd4e260f","ssdeep":"1536:5wxeb5bdwL+phFz9FSUsqLon8NYgetcVPkx2cnYteolbFr3rd6TcWmuZUfFi8AiZ:5m5+dzfVP9ftrdruZ5QZ3fao8r0","tlshash":"53c3d6ddb2e27025439324a5157f410ae27b2e553c4b8290d17ee9d4ac7ce8e817bfac","first_seen":"2026-03-01T19:25:53.52879Z","last_seen":"2026-03-08T12:05:15.27578Z","times_seen":471,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":68,"dns":1,"connect":1,"send":0,"wait":2,"receive":2,"ssl":64},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obs.sd559908.js.rsocdomains.com/tracker/tc_imp.gif?e=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\u0026cri=1gyBn2daxz\u0026ts=483\u0026cb=1772657633436","fqdn":"obs.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"34.199.234.25","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dynadot.rsocdomains.com/expired?d=399913.loan","date":"2026-03-04T20:53:53.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sd559908.js.rsocdomains.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:71:3D:EC:FB:1B:E3:CE:69:F9:00:4F:34:6E:DF:3A:95:11:14:5A","sha256":"CF:05:9C:6B:30:C3:EB:68:09:12:7B:D1:4B:58:DA:50:88:70:45:EA:95:61:8F:B8:03:FA:78:BA:E3:80:C6:A3"}}},"request":{"raw":"GET /tracker/tc_imp.gif?e=37dfbd8ee84e00126decc130ed41899e9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d57128c6d2117071a10acf9f29f671fd7d680077f6a49ac7c7656d13a8b31c65162022b9404555f3d010993bc691977be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebff079ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b226537a30ca946c75ca92560c2342250509f2dd2d677554a1ae4b2d89f8fd2dc1e153704f2faca5ac92cc75bfcfc248b5038e523b67c4e19abdea26d59ebe799d215695bd896f1209e83526f6c1403baac6b937d055ab19efd5419c0cd59c20992760ded97e9a30c4ddbcfe8ce6ea102bf531eae4ab774328ae873682be43af570454861e05dbc2db9b93aed56a866ad1deedc854c33c3574843873c4dad1592490b025e541f794499167bf7a520b0c8c76f14dddcdee27f8d6639c47b4de90d56a8d550423bd521747754c7dd1a76eb8058c8c8b64ebde60feb122d185e5e85689f0bf1f293ec6a95a44fab9025d0ee2c7e474ae2887f840fda272a076cb309553d61ccbac20da1b25ecb28f6537387c1e290d580bb7e78e6cce1fb0444f5f34ffb54bc3851e0cffd5c3a8e8299bb9f6f694fafbf01e463caa45d4b00b668b10311edf360b786aa77bfb7648cae9c461d868c53999e86994ec1f93690e3f21057b119ac5e3dd3f794bdb6700f494dbb9c88b2067f4f6c775d1dd6f699c974b687bf383d84820b02087599a1de53c990cbcb376fcc8729eecfdb8e13c31a6955f719e64e4cde6b91cf701280447d031515ab0bf4ddbbd509be5c49b0589ded86d6c6210e762f517a054ae933dc370512b403a7d7de9469cc16e04ab65c1bbe775849a0f9e7e72af117e2483fa915718fc7bf592028544625158b63b3090f0943b9e152c909812a3d7c1eddf01891f472814f07e2155958c1e05ec69f5f4c0319d82af1c5779a269200c18dd5514bfdffc12158c702980858d53cddca8d34b7bf949fb7536099f157a2182c20e17da8aa083af\u0026cri=1gyBn2daxz\u0026ts=483\u0026cb=1772657633436 HTTP/1.1\r\nHost: obs.sd559908.js.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/\r\nCookie: _cq_duid=4.2d1e90a2b6b88cd58ef96a0d0a8252b8; _cq_suid=1.1772657632.qOuQw22HqCRZvJ8w; cg_uuid=fee90cebb41bf1dc1eb787fe085fe22f; _cq_pvid=4.96d22ec178c5d2d5c83a182b37396d21\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ndate: Wed, 04 Mar 2026 20:53:53 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 43\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"db04c7b378cb2db912c3ba8a5a774ee3","sha1":"dee34bd86c3484d31002182aa2b7caa4699126b8","sha256":"98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a","sha512":"826225fc21717d8861a05b9d2f959539aad2d2b131b2afed75d88fbca535e1b0d5a0da8ac69713a0876a0d467848a37a0a7f926aeafad8cf28201382d16466ab","ssdeep":"","tlshash":"6490000bca888002caa2c0302b8883022b88b0320228832e80bc30a8ee3b3a20c02000","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T12:48:54.518925Z","times_seen":355648,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/storage/uploads/hero_image/cas-72.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /storage/uploads/hero_image/cas-72.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZiaG9SczdaM3NDellVc1BYc2lFY2c9PSIsInZhbHVlIjoibzErOVAwZU0zQTlnZ0oxSlVSSnNYUWVwYUtmdjJnQlBCWTVuZGw3LythZ1FHWnI0WWwxQ2FWZ2hvTVlBa0VlQ05PYTBaMWZMNFIrU2xzdm44eUV0K2k2Z2xUQ2lxUUN5REFZaXJmejE3eGdzSzdQcHNNdUNhWFpxK3VySlY0Y2MiLCJtYWMiOiI2MTE2NDk4MDdhNDhkMjllMTJmZTI1Y2U4Y2VlMWI0NGFhZjQwZTUwMjdhNjE2ZmY1ODY1NWY5NjRkNjI2ZWNhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IjVBSk5FWmVaN2hXaFF6L2JtVHU1YXc9PSIsInZhbHVlIjoiK0ZzMG5hUk4wbkhDbXIzTjdSODZCaUNNdjh2SURhZEdDeVllTmFHdEtCVmtKWUNXRUl0a2RCMDdBaGx2NlhLMjdFSVl1ckxGRTZXQm40ckJpL3lyYlhrYWo3VVhpV2ZWWHJPdThZRUlsa0k0UnVTMG0zSUZrSmlVbTVSajhLaUYiLCJtYWMiOiI1YmI4ZGU0NTRiNGNkMDY4ZGNjZjQ0YTg1YjUyMmVlZGJlYzc1ZTI2Y2ZmODhhZGM5OTM2NDVlMWRiZDI3OWQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\nserver: Apache\r\nlast-modified: Mon, 12 Jan 2026 00:51:53 GMT\r\netag: \"e60-6482647f96d96\"\r\naccept-ranges: bytes\r\ncontent-length: 3680\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3680,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f168483c75eb41a2408fd96f41d1e801","sha1":"16f90b94650ac6e0619ce726ad8ce37746f1815a","sha256":"71c777d0d7ecf5305f04d0cd55f20d02c707fb6aace4cf5289641ad17d6f990a","sha512":"11e1b8fc90ce7c041eed1a0625972a9e75ce5372d5dd7c02ea48589a36cfb032f2e3567276de511aff30a36b989d806db81bc2a9d2e8e0de309c45c9b7345ece","ssdeep":"","tlshash":"26716c30637c23d6c327ab7800319380a2c03fe05aa75382d309972553c94c6f5ea957","first_seen":"2026-03-04T09:15:28.845747Z","last_seen":"2026-04-04T09:24:12.618887Z","times_seen":217,"resource_available":false,"data":null}},"time_used":754,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":754,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NKZMCM7F","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:55.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"GET /gtm.js?id=GTM-NKZMCM7F HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 04 Mar 2026 20:53:55 GMT\r\nexpires: Wed, 04 Mar 2026 20:53:55 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 04 Mar 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 112514\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":327678,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5376)","md5":"0ed4dbab8effe3df90953bf94ecbc8c9","sha1":"c4a1c6e2f3075383e3c9cce342f843a56670ffb7","sha256":"881479eba8d2c3ca421113fbf440e8c6d1e09de87879b517af3f0a7fe6dfe48d","sha512":"ee892a512a5ea1da507ee5376d511dd66a3abac844eea24e2a00ab1f323cc1a7abacb18d1afa70fd7cef89e4c45bcd07e24a5ad4e1eb63de37a96ab3a7396ea9","ssdeep":"6144:LYknWlj5I2Ug3PYGxi18F0eAH8lQlr+m/uL:L9W55I2Hs18Im","tlshash":"30642acdb7d6746243a3a478403f118bb27a7892f88cc895f186d8d42e74a994237f7d","first_seen":"2026-03-04T18:58:15.970353Z","last_seen":"2026-03-04T20:54:22.55076Z","times_seen":2,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":82,"dns":3,"connect":22,"send":0,"wait":41,"receive":61,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.contentsquare.net/settings/556112.json?r=1969619","fqdn":"t.contentsquare.net","domain":"contentsquare.net","tld":"net"},"ip":{"addr":"52.84.50.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:55.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.contentsquare.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"81:2B:A5:F7:FB:66:FE:5E:22:95:03:AA:23:47:B5:B5:C4:CA:4A:32","sha256":"3E:1E:4A:F5:7D:7B:01:5C:C6:B4:23:70:7E:11:42:0A:A0:37:55:B6:A1:8A:40:62:29:2F:FE:21:59:3C:F4:60"}}},"request":{"raw":"GET /settings/556112.json?r=1969619 HTTP/1.1\r\nHost: t.contentsquare.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:56 GMT\r\ncontent-type: application/json\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Sat, 21 Feb 2026 12:30:16 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ARmN.JiLn4mBFeY0rvQgx71Ft5.3176d\r\ncontent-encoding: gzip\r\netag: W/\"2c0114ac7a91de05d645d19a8349b347\"\r\nvary: Origin,accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nage: 0\r\nx-amz-cf-id: WHNWfXQ8mCBiEN4imG01Cn9KLBMzqRAEIozRi3tTiI2Ez9I8QhPbRg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2445,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2c0114ac7a91de05d645d19a8349b347","sha1":"ad7deb9a027cc507c6163dcb8b5cd2a57ca27b98","sha256":"37e9685e252238a002a7f5d547beace4bdc279a484011d98c55aeb04d262bac6","sha512":"2dc7460fce58d120b5452a1b7a8332a541873fedac5a9f622878e67ed6f7fe4c17db06f95496d17621a4b1e3c88c457e47fb66f6e2cfdbb306953101399e4ca3","ssdeep":"","tlshash":"7b51cc61115c28fa5b8ac56ad6527a434568ca3719d80bfce5ce4acca1f89b05703d27","first_seen":"2026-01-26T14:57:02.998855Z","last_seen":"2026-04-04T09:28:43.685813Z","times_seen":3068,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":148,"dns":55,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:55.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 19:23:58 GMT\r\nexpires: Thu, 04 Mar 2027 19:23:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 5397\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-04T12:45:43.87952Z","times_seen":199107,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":81,"dns":1,"connect":22,"send":0,"wait":49,"receive":33,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pro.fontawesome.com/releases/v5.14.0/webfonts/fa-regular-400.woff2","fqdn":"pro.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:55.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /releases/v5.14.0/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: pro.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pro.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:55 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 173220\r\ncf-ray: 9d73c5efae89dfec-OSL\r\nx-amz-id-2: 1DU067wO4352bVOn0Vm75j9sfyfMJ4FoctKKhlPlzWE+diiMd8D5ZixnBjja+xursN3feCG/wZzMQ1OugoUV96jgN64am/zF\r\nx-amz-request-id: BPN3K1K994JDQ0E4\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 28 Jun 2021 17:14:37 GMT\r\netag: \"3e332211899360ab9380df4d50e1c33a\"\r\ncache-control: max-age=31556926\r\naccept-ranges: bytes\r\nage: 424458\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173220,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 173220, version 331.17301","md5":"3e332211899360ab9380df4d50e1c33a","sha1":"a4c6413bb7f7549b4fa37f22829e4d09f9de6817","sha256":"58f76b0b684536fbea8ae9ae7177607e81a261407916e9a86e063b02948e9adc","sha512":"697a1a3c6517f93d280d47ec93871aadb9e0d6576d2966ed2a296f2764d9b2bfd39a4b4854c6fa445965545dda72a4656de96ca3f8497c041749791c0f3c682e","ssdeep":"3072:AsJ+WJ7ekhVohiHZSPzAIc0NmYgt4Qmp60OPzGYDpBXa:B0UekhVoUZSPkIJVQ3PzZTXa","tlshash":"e904121023ee60e0327d969b5374e34e770b4789c656e99dcac7b2e1d8d44af41c2d2e","first_seen":"2023-04-05T13:40:29Z","last_seen":"2026-04-04T09:28:43.677636Z","times_seen":4563,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/samsung.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/samsung.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=399913.loan\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZiaG9SczdaM3NDellVc1BYc2lFY2c9PSIsInZhbHVlIjoibzErOVAwZU0zQTlnZ0oxSlVSSnNYUWVwYUtmdjJnQlBCWTVuZGw3LythZ1FHWnI0WWwxQ2FWZ2hvTVlBa0VlQ05PYTBaMWZMNFIrU2xzdm44eUV0K2k2Z2xUQ2lxUUN5REFZaXJmejE3eGdzSzdQcHNNdUNhWFpxK3VySlY0Y2MiLCJtYWMiOiI2MTE2NDk4MDdhNDhkMjllMTJmZTI1Y2U4Y2VlMWI0NGFhZjQwZTUwMjdhNjE2ZmY1ODY1NWY5NjRkNjI2ZWNhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IjVBSk5FWmVaN2hXaFF6L2JtVHU1YXc9PSIsInZhbHVlIjoiK0ZzMG5hUk4wbkhDbXIzTjdSODZCaUNNdjh2SURhZEdDeVllTmFHdEtCVmtKWUNXRUl0a2RCMDdBaGx2NlhLMjdFSVl1ckxGRTZXQm40ckJpL3lyYlhrYWo3VVhpV2ZWWHJPdThZRUlsa0k0UnVTMG0zSUZrSmlVbTVSajhLaUYiLCJtYWMiOiI1YmI4ZGU0NTRiNGNkMDY4ZGNjZjQ0YTg1YjUyMmVlZGJlYzc1ZTI2Y2ZmODhhZGM5OTM2NDVlMWRiZDI3OWQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"1ec6-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 7878\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7878,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"dce623707b3632f8e0b5d1b222e54f31","sha1":"917107118b9e2437a08d5d65b2944f2402af635c","sha256":"c59f8b204e7a80a9f7863b11393da254a801feaee3108d1afadef0431644c2a0","sha512":"9c9dd63cba86a8ca5a401b30d41a1e9b76a61c3005f50cc0a9d82823815e6c2b3ca2b538ac016d2ccb3e6b64e55979dd758adeaf4ac35ddf0814a0cff9ebe3bd","ssdeep":"192:se90ywTuMWvsb4Da/wK+jrVKBiMWhX5l0X+U:sN3uMWEbvwK+fkRWl5lFU","tlshash":"99f17df23f10ad0ac21c17715ca04b45cb876d05b874a36fe5d9642af7be8b851884db","first_seen":"2025-07-02T03:33:37.453175Z","last_seen":"2026-04-04T09:24:12.602863Z","times_seen":3314,"resource_available":false,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/search/ads.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:56.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:39:05 GMT","end":"Mon, 13 Apr 2026 08:39:04 GMT"},"fingerprint":{"sha1":"AC:37:C7:AF:75:CB:27:69:D4:EC:B6:A6:68:E1:51:4A:A3:99:78:B0","sha256":"63:86:A6:69:FF:ED:40:2B:88:13:6E:3E:4F:01:08:AB:8D:96:19:72:D3:22:DD:14:05:79:8E:5D:58:1F:0D:39"}}},"request":{"raw":"GET /adsense/search/ads.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Wed, 04 Mar 2026 20:53:56 GMT\r\nexpires: Wed, 04 Mar 2026 20:53:56 GMT\r\ncache-control: private, max-age=3600\r\netag: \"5160127269482593109\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131366,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2505)","md5":"146ab915cbea4595ffbe807dba14d4a5","sha1":"d4d4f99c2bb08972d97d419b66bfb5f6c862ba7b","sha256":"cc10e9f363d79411f3004357bfb4ec02ca4c29b2c318769d2780d046556a8d28","sha512":"592fa54aa905c91665890b1a24df2b735e85b04b15fd1e8f4c38046f688ae6527776f3df8d7d18c59653aedc3524c89c6a06d21140741d59afbb42b67d0731f2","ssdeep":"1536:MhQZrBdqj29AlypQL6AoeKdC/4Cd0J5Eg2yJAcGu2rhZcDv7MS697aR9jhFkZfS1:4tLY3s/4dJR8yvoSbuSvd","tlshash":"2ad33acdb6a1742243a3a1f5603f014fb139b96aa40c84a4f199d8e47cb4dad4277fbd","first_seen":"2026-03-04T20:54:22.555334Z","last_seen":"2026-03-05T15:13:23.905912Z","times_seen":35,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":76,"dns":19,"connect":21,"send":0,"wait":32,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2.js","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"192.178.25.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:56.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adtrafficquality.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:39:58 GMT","end":"Mon, 27 Apr 2026 08:39:57 GMT"},"fingerprint":{"sha1":"6F:B9:0D:8E:60:A0:97:4B:8A:A6:E3:6B:C9:AD:E4:BA:70:53:FC:6E","sha256":"42:D0:0C:59:91:04:48:D7:9A:45:18:04:CD:A5:E5:38:B1:81:A3:73:73:91:8F:C9:74:DC:40:F7:B9:79:E5:9B"}}},"request":{"raw":"GET /sodar/sodar2.js HTTP/1.1\r\nHost: ep2.adtrafficquality.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"adspam-signals-scs\"\r\nreport-to: {\"group\":\"adspam-signals-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs\"}]}\r\ncontent-length: 7609\r\ndate: Wed, 04 Mar 2026 20:53:56 GMT\r\nexpires: Wed, 04 Mar 2026 20:53:56 GMT\r\ncache-control: private, max-age=3000\r\netag: \"1772145733101481\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21495,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1398)","md5":"622209dbf4750ca1b62b82ee36b4579e","sha1":"5f459d016a540c008b8a4db3ceaaf570a4a2c3d9","sha256":"893c7f6aca9aca8c8aded19a9cd8919cbd7a205cff7f6503d1241b8fa2f721ff","sha512":"cd7a878355f5b1c086eb8c1c9229a7db90ba9b230f30b77112674f3d90593ac4d8f59a24eec59d29afaf45d7277929a53b596e627e8959d658140d18d6a0a6d9","ssdeep":"384:Pyr4MMy/s1OR/lZQkp5d4WFy6auy9fRIjGRSKh6/RW+fzddr7:VySOxl3p5d4Wk669fC6RgW+fzddn","tlshash":"caa295cab6e1b4654363a9f2a13f100ff23e6c6dd84c4858b084d4e0bdb596a4767f78","first_seen":"2026-03-01T10:14:34.996222Z","last_seen":"2026-04-03T21:45:58.597644Z","times_seen":1842,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":35,"dns":1,"connect":7,"send":0,"wait":17,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=399913.loan","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T20:53:53.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /?cid=99998\u0026d=399913.loan HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dynadot.rsocdomains.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\nserver: Apache\r\nx-powered-by: PHP/8.2.29\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImZiaG9SczdaM3NDellVc1BYc2lFY2c9PSIsInZhbHVlIjoibzErOVAwZU0zQTlnZ0oxSlVSSnNYUWVwYUtmdjJnQlBCWTVuZGw3LythZ1FHWnI0WWwxQ2FWZ2hvTVlBa0VlQ05PYTBaMWZMNFIrU2xzdm44eUV0K2k2Z2xUQ2lxUUN5REFZaXJmejE3eGdzSzdQcHNNdUNhWFpxK3VySlY0Y2MiLCJtYWMiOiI2MTE2NDk4MDdhNDhkMjllMTJmZTI1Y2U4Y2VlMWI0NGFhZjQwZTUwMjdhNjE2ZmY1ODY1NWY5NjRkNjI2ZWNhIiwidGFnIjoiIn0%3D; expires=Wed, 04 Mar 2026 22:53:54 GMT; Max-Age=7200; path=/; samesite=lax\nwwwmammacom_session=eyJpdiI6IjVBSk5FWmVaN2hXaFF6L2JtVHU1YXc9PSIsInZhbHVlIjoiK0ZzMG5hUk4wbkhDbXIzTjdSODZCaUNNdjh2SURhZEdDeVllTmFHdEtCVmtKWUNXRUl0a2RCMDdBaGx2NlhLMjdFSVl1ckxGRTZXQm40ckJpL3lyYlhrYWo3VVhpV2ZWWHJPdThZRUlsa0k0UnVTMG0zSUZrSmlVbTVSajhLaUYiLCJtYWMiOiI1YmI4ZGU0NTRiNGNkMDY4ZGNjZjQ0YTg1YjUyMmVlZGJlYzc1ZTI2Y2ZmODhhZGM5OTM2NDVlMWRiZDI3OWQxIiwidGFnIjoiIn0%3D; expires=Wed, 04 Mar 2026 22:53:54 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Contentsquare","description":"Contentsquare is an enterprise-level UX optimisation platform.","website":"https://contentsquare.com","common_platform_enumeration":"","icon":"Contentsquare.svg","categories":["Analytics","A/B Testing"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI:1.14.0","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}],"data":{"size":38827,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (301)","md5":"6e82e29dc5a9fbee0de0bed5116ffbd1","sha1":"93e29eecc3e69d91814136bd1985bca0835748ea","sha256":"2ee4f09af256cc01850060eec0ed0431e555a312930eb3419f5c565ea6603deb","sha512":"3bc6d48fb6c0a1ef9418cafa0b960cbceeaf742c50a42aeca146babd5a8b4f33037ef9a7936c02ef1da92cd88039bf28f913b4dbcc090b0f6053dc25cf37d8b7","ssdeep":"192:u8xD4wxmppiV7+g3d6lfliEyzRbMRQNnL2aofXu3hNljCqDgmwRBRxOJLz2fTPAe:uTQ7YKySUaEW2fTPAbf/y2DlIn7x","tlshash":"2b03ffb7a5f034ef1347829e18227a2c99c2604fd603a58df9bcc45eefd5d4e4a23169","first_seen":"2026-03-04T20:54:22.558126Z","last_seen":"2026-03-04T20:54:22.558126Z","times_seen":1,"resource_available":true,"data":null}},"time_used":889,"timings":{"blocked":321,"dns":1,"connect":155,"send":0,"wait":246,"receive":0,"ssl":163},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/mamma-logo.svg","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/mamma-logo.svg HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=399913.loan\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZiaG9SczdaM3NDellVc1BYc2lFY2c9PSIsInZhbHVlIjoibzErOVAwZU0zQTlnZ0oxSlVSSnNYUWVwYUtmdjJnQlBCWTVuZGw3LythZ1FHWnI0WWwxQ2FWZ2hvTVlBa0VlQ05PYTBaMWZMNFIrU2xzdm44eUV0K2k2Z2xUQ2lxUUN5REFZaXJmejE3eGdzSzdQcHNNdUNhWFpxK3VySlY0Y2MiLCJtYWMiOiI2MTE2NDk4MDdhNDhkMjllMTJmZTI1Y2U4Y2VlMWI0NGFhZjQwZTUwMjdhNjE2ZmY1ODY1NWY5NjRkNjI2ZWNhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IjVBSk5FWmVaN2hXaFF6L2JtVHU1YXc9PSIsInZhbHVlIjoiK0ZzMG5hUk4wbkhDbXIzTjdSODZCaUNNdjh2SURhZEdDeVllTmFHdEtCVmtKWUNXRUl0a2RCMDdBaGx2NlhLMjdFSVl1ckxGRTZXQm40ckJpL3lyYlhrYWo3VVhpV2ZWWHJPdThZRUlsa0k0UnVTMG0zSUZrSmlVbTVSajhLaUYiLCJtYWMiOiI1YmI4ZGU0NTRiNGNkMDY4ZGNjZjQ0YTg1YjUyMmVlZGJlYzc1ZTI2Y2ZmODhhZGM5OTM2NDVlMWRiZDI3OWQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"7f8-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 2040\r\ncontent-type: image/svg+xml\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2040,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9cec769dd78f575508f8e4c2fc6b1552","sha1":"b542a31312251bfb5e48815297c5f829be295908","sha256":"1d6df4ff0aaf1c9c6c240e29983b7a6c226776b3637f787afe1b7f72076e4005","sha512":"1628a41902ff99c9737c74137b6914306d03c9b5723faf5fbf656f67b3596835bd384745b0f41f076649dc12597dd30474042c01aaf7369a1de9a06f232693b6","ssdeep":"","tlshash":"6a41dda74269cbbd5ffe96388e49bd1a32d17cc2e433d2c53ae61049c2250f1a01d5aa","first_seen":"2025-07-02T03:33:37.451098Z","last_seen":"2026-04-04T09:28:43.68152Z","times_seen":3358,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/sams-club.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/sams-club.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=399913.loan\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZiaG9SczdaM3NDellVc1BYc2lFY2c9PSIsInZhbHVlIjoibzErOVAwZU0zQTlnZ0oxSlVSSnNYUWVwYUtmdjJnQlBCWTVuZGw3LythZ1FHWnI0WWwxQ2FWZ2hvTVlBa0VlQ05PYTBaMWZMNFIrU2xzdm44eUV0K2k2Z2xUQ2lxUUN5REFZaXJmejE3eGdzSzdQcHNNdUNhWFpxK3VySlY0Y2MiLCJtYWMiOiI2MTE2NDk4MDdhNDhkMjllMTJmZTI1Y2U4Y2VlMWI0NGFhZjQwZTUwMjdhNjE2ZmY1ODY1NWY5NjRkNjI2ZWNhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IjVBSk5FWmVaN2hXaFF6L2JtVHU1YXc9PSIsInZhbHVlIjoiK0ZzMG5hUk4wbkhDbXIzTjdSODZCaUNNdjh2SURhZEdDeVllTmFHdEtCVmtKWUNXRUl0a2RCMDdBaGx2NlhLMjdFSVl1ckxGRTZXQm40ckJpL3lyYlhrYWo3VVhpV2ZWWHJPdThZRUlsa0k0UnVTMG0zSUZrSmlVbTVSajhLaUYiLCJtYWMiOiI1YmI4ZGU0NTRiNGNkMDY4ZGNjZjQ0YTg1YjUyMmVlZGJlYzc1ZTI2Y2ZmODhhZGM5OTM2NDVlMWRiZDI3OWQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"12db-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 4827\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4827,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"772f2fd78bfb39c468fe810628a49dd8","sha1":"a2954af1ffb3e977e70b430d40d35d4355cf9dc2","sha256":"05e62c55992587f973cbfd930165b34d67e8665635e75575dac8b3738bf01c45","sha512":"d7ec04451d609e21d9cbb86c4261e218ac6b607a2a08ad76c9a5c637c0aafa8389510041cbabe3954e3ac2d459f0e64455fddbe0603b5a450c57ca498a88baf6","ssdeep":"96:jkPCFhYNmLZcLNMrNk+f62cS674veBtkVuJQkUPSwp+U:QPGhYNm1P53yP4veBWVu0boU","tlshash":"a6a1ae6861492395a000eeccb46f0caa16416d4e2e9b4ad3d730aaf4fdd3dbc95f834c","first_seen":"2025-07-02T03:33:37.45503Z","last_seen":"2026-04-04T09:24:12.606865Z","times_seen":3313,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-9WGW9SCFVP\u0026cid=1960569593.1772657636\u0026gtm=45je6330v876558862z89192081961za20gzb9192081961zd9192081961\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~115938466~115938468~116024733~117484252~117755069\u0026z=951213567","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:56.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:39:43 GMT","end":"Mon, 27 Apr 2026 08:39:42 GMT"},"fingerprint":{"sha1":"ED:13:E6:A9:AC:5E:48:95:A0:23:B1:F4:76:2F:A3:6E:95:4E:B7:09","sha256":"21:68:42:FB:56:73:F8:86:34:2A:C7:2A:2C:BB:10:DE:09:9B:FB:20:DB:72:B9:F6:10:76:71:B5:06:27:89:FC"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-9WGW9SCFVP\u0026cid=1960569593.1772657636\u0026gtm=45je6330v876558862z89192081961za20gzb9192081961zd9192081961\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~115938466~115938468~116024733~117484252~117755069\u0026z=951213567 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 04 Mar 2026 20:53:56 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T12:49:15.190605Z","times_seen":763084,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":78,"dns":1,"connect":20,"send":0,"wait":34,"receive":1,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/js/tailwindcss.js","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /js/tailwindcss.js HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=399913.loan\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZiaG9SczdaM3NDellVc1BYc2lFY2c9PSIsInZhbHVlIjoibzErOVAwZU0zQTlnZ0oxSlVSSnNYUWVwYUtmdjJnQlBCWTVuZGw3LythZ1FHWnI0WWwxQ2FWZ2hvTVlBa0VlQ05PYTBaMWZMNFIrU2xzdm44eUV0K2k2Z2xUQ2lxUUN5REFZaXJmejE3eGdzSzdQcHNNdUNhWFpxK3VySlY0Y2MiLCJtYWMiOiI2MTE2NDk4MDdhNDhkMjllMTJmZTI1Y2U4Y2VlMWI0NGFhZjQwZTUwMjdhNjE2ZmY1ODY1NWY5NjRkNjI2ZWNhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IjVBSk5FWmVaN2hXaFF6L2JtVHU1YXc9PSIsInZhbHVlIjoiK0ZzMG5hUk4wbkhDbXIzTjdSODZCaUNNdjh2SURhZEdDeVllTmFHdEtCVmtKWUNXRUl0a2RCMDdBaGx2NlhLMjdFSVl1ckxGRTZXQm40ckJpL3lyYlhrYWo3VVhpV2ZWWHJPdThZRUlsa0k0UnVTMG0zSUZrSmlVbTVSajhLaUYiLCJtYWMiOiI1YmI4ZGU0NTRiNGNkMDY4ZGNjZjQ0YTg1YjUyMmVlZGJlYzc1ZTI2Y2ZmODhhZGM5OTM2NDVlMWRiZDI3OWQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\nserver: Apache\r\nlast-modified: Wed, 30 Jul 2025 09:48:49 GMT\r\netag: \"636ef-63b226e7ee240\"\r\naccept-ranges: bytes\r\ncontent-length: 407279\r\ncontent-type: text/javascript\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-04T12:43:23.500881Z","times_seen":28766,"resource_available":true,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":632,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.7.1.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-45a82\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\nage: 2261355\r\nx-served-by: cache-lga21929-LGA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 14, 10024\r\nx-timer: S1772657635.527698,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 83619\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":285314,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"12e87d2f3a4c8b347ab13a0764d420a3","sha1":"4be715e11048c057fdf2ee0fbbfad4dbf3504c55","sha256":"78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe","sha512":"fa4d699e582de05d47f0beeddf3f79a37fca3bea3bf083447174db9e8250fc5d95a835615a86a256697f3841eff47b1583151a556f886e264f50941f17f63167","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPfz:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAV","tlshash":"e954a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","first_seen":"2023-09-15T16:51:13Z","last_seen":"2026-04-04T11:32:29.918242Z","times_seen":15945,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":66,"dns":0,"connect":26,"send":0,"wait":20,"receive":9,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.14.0/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /ui/1.14.0/jquery-ui.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-7eb53\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\nage: 2468377\r\nx-served-by: cache-lga21936-LGA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1208, 644\r\nx-timer: S1772657634.492014,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 122789\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":518995,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1004)","md5":"8b90421cbb9666fd2558c5b57b2994a4","sha1":"3cca9d56f9bb1f973dd3ec9212de21c296cd5e21","sha256":"bb42fc680e84bf76d8d87238cb4080cabf47f05456817e2167df8aec2da7cdd7","sha512":"731467ffb3be2564aabc138678e0da0bebfdc2bed1165944c1de92040b9be59b813c4cc1b586574f1e3a28d9e5cef11f1b8d82cdbc1fb1c6c161961c82b5ca34","ssdeep":"12288:/aemHFgymcpIyHCcmMY/W/EEMPlQRgkrVhDdRtn:WIyHCcmMY/W/EEMPt0hDdRtn","tlshash":"ebb4b7c9f39c265a867a32594c2e42cdb23d8075e600587fbc5d59dc29a883c43bbf79","first_seen":"2024-09-19T22:28:43.042948Z","last_seen":"2026-04-04T09:28:43.66667Z","times_seen":3486,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":29,"dns":1,"connect":15,"send":0,"wait":22,"receive":33,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/kohls.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/kohls.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=399913.loan\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZiaG9SczdaM3NDellVc1BYc2lFY2c9PSIsInZhbHVlIjoibzErOVAwZU0zQTlnZ0oxSlVSSnNYUWVwYUtmdjJnQlBCWTVuZGw3LythZ1FHWnI0WWwxQ2FWZ2hvTVlBa0VlQ05PYTBaMWZMNFIrU2xzdm44eUV0K2k2Z2xUQ2lxUUN5REFZaXJmejE3eGdzSzdQcHNNdUNhWFpxK3VySlY0Y2MiLCJtYWMiOiI2MTE2NDk4MDdhNDhkMjllMTJmZTI1Y2U4Y2VlMWI0NGFhZjQwZTUwMjdhNjE2ZmY1ODY1NWY5NjRkNjI2ZWNhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IjVBSk5FWmVaN2hXaFF6L2JtVHU1YXc9PSIsInZhbHVlIjoiK0ZzMG5hUk4wbkhDbXIzTjdSODZCaUNNdjh2SURhZEdDeVllTmFHdEtCVmtKWUNXRUl0a2RCMDdBaGx2NlhLMjdFSVl1ckxGRTZXQm40ckJpL3lyYlhrYWo3VVhpV2ZWWHJPdThZRUlsa0k0UnVTMG0zSUZrSmlVbTVSajhLaUYiLCJtYWMiOiI1YmI4ZGU0NTRiNGNkMDY4ZGNjZjQ0YTg1YjUyMmVlZGJlYzc1ZTI2Y2ZmODhhZGM5OTM2NDVlMWRiZDI3OWQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"5ea-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 1514\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1514,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"f6460f7fcdc8f7eb154a550c288b5cab","sha1":"7a166d72f5a212f40a512b8a6ffa92ed5753dc20","sha256":"f830f7710726f1d905411ed23c357fd22d163b9a859dc910323051d94ec74427","sha512":"92660ccdddc6751a5d3541db9847662a78a01b634f2062a28bd68e87590c4027a3e023858a5e1d19d5b10a5edff9cfa2476431508a1f60ac1833b6ce31132892","ssdeep":"","tlshash":"ce31ebd52aa594aed1fef83bd655512716acb3350b5ccd07276d08dd2ea0b30d50603a","first_seen":"2025-07-02T03:33:37.447297Z","last_seen":"2026-04-04T09:24:12.608869Z","times_seen":3312,"resource_available":false,"data":null}},"time_used":802,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":802,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/storage/uploads/hero_image/biohazard.png","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=399913.loan","date":"2026-03-04T20:53:54.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /storage/uploads/hero_image/biohazard.png HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZiaG9SczdaM3NDellVc1BYc2lFY2c9PSIsInZhbHVlIjoibzErOVAwZU0zQTlnZ0oxSlVSSnNYUWVwYUtmdjJnQlBCWTVuZGw3LythZ1FHWnI0WWwxQ2FWZ2hvTVlBa0VlQ05PYTBaMWZMNFIrU2xzdm44eUV0K2k2Z2xUQ2lxUUN5REFZaXJmejE3eGdzSzdQcHNNdUNhWFpxK3VySlY0Y2MiLCJtYWMiOiI2MTE2NDk4MDdhNDhkMjllMTJmZTI1Y2U4Y2VlMWI0NGFhZjQwZTUwMjdhNjE2ZmY1ODY1NWY5NjRkNjI2ZWNhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IjVBSk5FWmVaN2hXaFF6L2JtVHU1YXc9PSIsInZhbHVlIjoiK0ZzMG5hUk4wbkhDbXIzTjdSODZCaUNNdjh2SURhZEdDeVllTmFHdEtCVmtKWUNXRUl0a2RCMDdBaGx2NlhLMjdFSVl1ckxGRTZXQm40ckJpL3lyYlhrYWo3VVhpV2ZWWHJPdThZRUlsa0k0UnVTMG0zSUZrSmlVbTVSajhLaUYiLCJtYWMiOiI1YmI4ZGU0NTRiNGNkMDY4ZGNjZjQ0YTg1YjUyMmVlZGJlYzc1ZTI2Y2ZmODhhZGM5OTM2NDVlMWRiZDI3OWQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 20:53:54 GMT\r\nserver: Apache\r\nlast-modified: Mon, 09 Feb 2026 09:22:36 GMT\r\netag: \"19b5c7-64a60adfb4939\"\r\naccept-ranges: bytes\r\ncontent-length: 1684935\r\ncontent-type: image/png\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1684935,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"400c39a524efc5690249c0a0b1e59fc7","sha1":"31e67d23ef0377063687a27d41da07876eedde6e","sha256":"ccef5fbf1ad8def3e31d1fba39948627ff35de8a5d10a39d071fd90ab24f0359","sha512":"7e19d8e5d035fef7fe1006aca45c8bde8a168ec8ade65693c73563dbdb48bba489fd2fdf30dda36ee38cf53f32710a4c327cd1e7700f3fde5694ed0fa58bd2d4","ssdeep":"24576:t68F1bSf68kminY4OFsc7sgKEOyH1v2BSdK9SC9:fK6/PBOV7NKEOKuZwC9","tlshash":"d92533e0ecb997f1cd1770e415912c218632636a9b7734b3d0a1606a9ace78dec637d3","first_seen":"2026-03-04T09:15:28.836201Z","last_seen":"2026-04-04T09:24:12.596467Z","times_seen":217,"resource_available":false,"data":null}},"time_used":1344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":756,"receive":588,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}