{"report_id":"e400a0cb-58a5-4f94-a17a-eeebaff1a7da","version":6,"status":"done","tags":[],"date":"2025-10-09T07:44:30Z","url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"title":"Home | European Stability Mechanism"},"submit":{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-13T07:44:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":61}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i73637269707473o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i73637269707473o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i73637269707473o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i73637269707473o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i73637269707473o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i797433o6767706874o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i797433o6767706874o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i797433o6767706874o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i797433o6767706874o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c657461676d616e61676572o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c657461676d616e61676572o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c657461676d616e61676572o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c657461676d616e61676572o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i63646eo75736572776179o6f7267z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i63646eo75736572776179o6f7267z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i63646eo75736572776179o6f7267z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i63646eo75736572776179o6f7267z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i63646eo75736572776179o6f7267z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"i777777o676f6f676c657461676d616e61676572o636f6dz.oszar.com","ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-09","domain_rank":0,"first_seen":"2023-11-05T02:26:23Z","last_seen":"2025-10-02T10:05:29.636498Z","alert_count":4,"request_count":1,"received_data":376574,"sent_data":816,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"i65736d2d63686174626f742d7365617263682d75692d70726fo65642d696e746567726174696f6e73o636f6dz.oszar.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-07-09","domain_rank":0,"first_seen":"2025-10-02T10:05:27.942754Z","last_seen":"2025-10-02T10:05:27.942754Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1164,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i73637269707473o636c6172697479o6d73z.oszar.com","ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-09","domain_rank":0,"first_seen":"2025-10-02T10:05:28.661533Z","last_seen":"2025-10-02T10:05:28.661533Z","alert_count":10,"request_count":2,"received_data":159598,"sent_data":2549,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-09","domain_rank":0,"first_seen":"2023-11-30T23:06:07Z","last_seen":"2025-10-02T10:05:29.125792Z","alert_count":96,"request_count":24,"received_data":181393,"sent_data":17508,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com","ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-09","domain_rank":0,"first_seen":"2023-09-01T02:26:30Z","last_seen":"2025-10-02T10:05:29.142899Z","alert_count":10,"request_count":2,"received_data":54194,"sent_data":2601,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i797433o6767706874o636f6dz.oszar.com","ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-09","domain_rank":0,"first_seen":"2023-11-30T23:06:08Z","last_seen":"2025-10-02T10:05:28.661374Z","alert_count":12,"request_count":3,"received_data":11054,"sent_data":4827,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-10-05T22:13:51.058913Z","alert_count":0,"request_count":10,"received_data":203440,"sent_data":5770,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-09","domain_rank":0,"first_seen":"2025-10-02T10:05:27.936454Z","last_seen":"2025-10-02T10:05:27.936454Z","alert_count":375,"request_count":75,"received_data":3247397,"sent_data":106183,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Drupal","description":"Drupal is a free and open-source web content management framework.","website":"https://www.drupal.org/","common_platform_enumeration":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","icon":"Drupal.svg","categories":["CMS"]},{"name":"Drupal:10","description":"Drupal is a free and open-source web content management framework.","website":"https://www.drupal.org/","common_platform_enumeration":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","icon":"Drupal.svg","categories":["CMS"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"i65736d2d63686174626f742d7769646765742d70726fo65642d696e746567726174696f6e73o636f6dz.oszar.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-07-09","domain_rank":0,"first_seen":"2025-10-02T10:05:28.573499Z","last_seen":"2025-10-02T10:05:28.573499Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1152,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i777777o636c6172697479o6d73z.oszar.com","ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-09","domain_rank":0,"first_seen":"2023-09-01T04:26:30Z","last_seen":"2025-10-02T10:05:28.585071Z","alert_count":10,"request_count":2,"received_data":3478,"sent_data":2131,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-09","domain_rank":0,"first_seen":"2025-10-02T10:05:27.934589Z","last_seen":"2025-10-02T10:05:27.934589Z","alert_count":152,"request_count":38,"received_data":14509414,"sent_data":78676,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i63646eo75736572776179o6f7267z.oszar.com","ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-09","domain_rank":0,"first_seen":"2025-10-09T07:44:42.054517Z","last_seen":"2025-10-09T07:44:42.054517Z","alert_count":10,"request_count":2,"received_data":158640,"sent_data":1041,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"i666f6e7473o676f6f676c6561706973o636f6dz.oszar.com","ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-09","domain_rank":0,"first_seen":"2023-11-30T22:05:57Z","last_seen":"2025-10-02T10:05:29.75738Z","alert_count":5,"request_count":1,"received_data":7715,"sent_data":572,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"i666f6e7473o67737461746963o636f6dz.oszar.com","ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-09","domain_rank":0,"first_seen":"2023-11-05T02:26:20Z","last_seen":"2025-10-02T10:05:29.108314Z","alert_count":29,"request_count":6,"received_data":101368,"sent_data":3846,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-05T22:12:07.052692Z","alert_count":0,"request_count":8,"received_data":3466615,"sent_data":3809,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-10-05T22:12:07.233388Z","alert_count":0,"request_count":4,"received_data":3468,"sent_data":4316,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-10-05T22:12:07.136045Z","alert_count":0,"request_count":3,"received_data":1740,"sent_data":2840,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i737461746963o616464746f616e79o636f6dz.oszar.com","ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-09","domain_rank":0,"first_seen":"2024-01-25T17:34:50Z","last_seen":"2025-10-02T10:05:29.698383Z","alert_count":25,"request_count":5,"received_data":95661,"sent_data":4731,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.ytimg.com","ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2025-10-05T22:17:33.003863Z","alert_count":0,"request_count":4,"received_data":97214,"sent_data":1994,"comment":"","tags":null,"fingerprints":null},{"fqdn":"docs.io.certeu.eu","ip":{"addr":"52.31.164.168","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-02T10:05:27.94737Z","last_seen":"2025-10-02T10:05:27.94737Z","alert_count":0,"request_count":1,"received_data":183,"sent_data":555,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"i777777o676f6f676c65o636f6dz.oszar.com","ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-09","domain_rank":0,"first_seen":"2023-11-05T02:26:23Z","last_seen":"2025-07-01T07:44:13.13487Z","alert_count":20,"request_count":4,"received_data":239455,"sent_data":6894,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"93ada40da341d3f06c6b5392c2a501c5","sha1":"f71fb785330f1dd6a0baf1a8214a2f4dcfab364e","sha256":"ddc7790c82c5dd42934e830f5d707973d08ced41c905e4d8a27f80a6f4d4db7d","sha512":"cc006346f89c845ad6574b64e0f1dfd98d9b69cf94322147c3f20d82589399974932c97258225286b293ebadfa57db599a111015bee315f13801684116563388","ssdeep":"","tlshash":"c710000000000000000000030000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-04-23T09:43:10Z","last_seen":"2026-05-25T11:42:37.768501Z","times_seen":2387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a61a57881e61de0aaa7d44b033be8a16","sha1":"27712f252b0c4bb250838adcdaf3202a6265a3fe","sha256":"e654a3bbb71e2f8aba2d5eb15cd230fb5b27ef8af318f7ba572434c2a2b8a826","sha512":"82f5357c11b29f074d7480bc2b0449416cf740178e5a3c81539291c81d93b2fa10da0a0df12e3137521374907561906dabcc89ce2253a7df4ee159e005293608","ssdeep":"","tlshash":"b7d02b1c727dc4d011364aa28782e0d992d56805faa6149c43bf145011b5b21a466ca6","size":272,"data":"","first_seen":"2025-10-05T09:35:29.38264Z","last_seen":"2025-10-14T06:51:16.149429Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T16:53:36.485058Z","times_seen":109707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i73637269707473o636c6172697479o6d73z.oszar.com/0.8.33/clarity.js","fqdn":"i73637269707473o636c6172697479o6d73z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"222f5a85d5ae47592f07b769405567d9","sha1":"a7774145b147b9881ee3f94f9754749423638ec3","sha256":"e15d1d235049e835e8a5dc14bb753336c597d2fe156d6029f425a05bb178b53d","sha512":"b715fb7e38774348094958b0b1242db00890b5776431e4d9df245e1a73566868c82a7bd710d8109a2b1e5972a88006bce5bd3e74ddfdd55f396f1291b1b97cdf","ssdeep":"1536:YQPzHqofC4+Nvtl8HTHpn1z2sA0T+q+PGySI:pP7qofBSAXz2sA0Ty","tlshash":"4573e6dc7243707e42a760b5807f120bf23a6d4a780b5c50da66d6c43c78e9692bbf6d","size":78490,"data":"","first_seen":"2025-10-09T07:44:52.990454Z","last_seen":"2025-10-09T07:44:52.990454Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=770\u0026max_height=433\u0026hash=iTRAyQa3AeIiqUeahtXarnWb21_0TxNsH-BYMy2WmlA\u0026media_oembed_control%5Bprovider_name%5D=YouTube","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"39609d7d57ca26a0fcf6ef97c44bed29","sha1":"9418d0f733e1406a7f45b528948e04f639583d3c","sha256":"5e70098ca6b0df385d2e73381109b1cc1922dbd2f4900988a0e79c732417aa19","sha512":"56f9e86df37bf15155759875e2a9b9e04cc6212d9addaf839b00ec1b1e0ce6ff6860a1371d2fbf635d475aefa45c8fdfcede67041ab8c8ad366a00ac73772782","ssdeep":"","tlshash":"9b41be1921f911248467b1e62baf62153434108725058b0afe0efa8e7f5c47b46f8bcd","size":2278,"data":"","first_seen":"2025-10-02T10:05:42.526047Z","last_seen":"2025-10-09T07:44:53.185294Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T18:19:09.77222Z","times_seen":314560,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8fb965e7ead2924508e97e5326bd3b1","sha1":"fae376d0cb54d4433b7bdc9aba04690cd6cb5d27","sha256":"57bb660c2fdf4369ff8e37f99b26963dba87c120b80c443ff3d31e030ab3a0f5","sha512":"c03eb6a1004f9dfcd1f960a6ca70a77932794808f72476b276bb16f02d0a1855fb2d93d07aab7c0c040d4b3c0eb4f861a4c1a9368a27e3a6430e425ff6ed2568","ssdeep":"","tlshash":"8e60000c00000000033000fc0000ccf00300000cc003c0c0000000000f0000c3c00000","size":13,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-05-26T18:19:09.806982Z","times_seen":231364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-05-26T18:19:09.748735Z","times_seen":271978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3049a829335281c64692e45b83678335","sha1":"34123d20b0cff9a50d739bb5431d49b06a72da30","sha256":"13825a5374182a0a3e242d511dd6c3ad0f03d89c5107bdd63d31a5bf5912b38e","sha512":"62e4869bd3e6d181b7195c58e4bb049303f326d226be013c11e2e44e7d727bd4f04ee48b7769d1482b4f8ff865af48da1569d4b2ceb4ae6d61aca7e79c821497","ssdeep":"","tlshash":"c71000000000000000000000000000000000000000000000300000000000c000000003","size":2,"data":"","first_seen":"2023-03-10T13:29:47Z","last_seen":"2026-04-02T00:14:36.048143Z","times_seen":1129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"803f04d3c33c69674e18633fb9f1b211","sha1":"6206be151624c547c0fc20b934c10fc84f22ad6d","sha256":"c5de7a137566bf3d1ab453f1027ce8f0269249cf7d51a5259440472c850c9485","sha512":"a02857620366b2610420790414234d9f78ed37949a60ba3287edbd2684f98d57fe9201d4c6ab3fee8866b883696bb1bc8b71848d89bb3b22e8bffb9e824ae40f","ssdeep":"","tlshash":"37e020f16c114076a077655238e14d8111edb17c17d45f1c6d7510dc53e184d987d747","size":336,"data":"","first_seen":"2025-10-01T14:03:14.954722Z","last_seen":"2025-10-14T06:58:35.511546Z","times_seen":1004,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbc81340f52dcc5e5c19d4dab1e2abba","sha1":"8bad759c99aca384c84440a3f2bc1f42d1e680f5","sha256":"85eb00ac943e564215df6b0efb3c15e010586ad5d11e9985fa8bee36d2bcd1ba","sha512":"11a3f9d6d23a557c947ae89dbd1a482d8e47637987bb17bf01b1a5bc8735651902bc3c3f793091e149826fb13f869769d29a4e8729e549c5a291ee0c49a4fd27","ssdeep":"","tlshash":"08d023991c768830559c024610b7f398257520507b136600c1cedc2f5e21dd348f155c","size":217,"data":"","first_seen":"2025-10-09T07:44:53.189946Z","last_seen":"2025-10-09T07:44:53.189946Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-26T18:21:48.088861Z","times_seen":336413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3b7fe596b8934963875cb02e43016478","sha1":"96751233e0925d35826155e4ad5c17e114bca518","sha256":"940456841f03c58b9c74c1a009327ca3e7d4e592bb3714bd8c2bdf17ebcbb61c","sha512":"e7fd57b99f3d9e83146df1149dcee0909312ca832826f46bb4f274fc16f502eddd8adae879a23f104d1bee92e6a505822938381c5cf7aa478a70bd131ea81c85","ssdeep":"","tlshash":"1170002abc083080032238300c0b88082822002000080202080000c80e3880a0202c08","size":22,"data":"","first_seen":"2025-10-02T03:23:46.508491Z","last_seen":"2025-10-14T06:58:35.080031Z","times_seen":1006,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4207dce866a6c518df85553947c6a63a","sha1":"c711db9d88c2ce2df35ca032eb8c1f8edd64413e","sha256":"01d1c2b7e526b08515902bc29926dabe7f8582d9be9bd3fa5d45e97c33592b6e","sha512":"bf8919d18ad207dd107917c15d59b80f6e62a4cff1f4fe3e40e045a44b06ee2560debf5aa322ba2de360192c69f9ac7611d843f69c247715bfe98fb97009169d","ssdeep":"","tlshash":"7dc08044159ce15ff1123933a357205555d5f484d4267d1d141c2d505f204c51435d58","size":164,"data":"","first_seen":"2025-10-02T03:23:46.27663Z","last_seen":"2025-10-14T06:58:35.384161Z","times_seen":1013,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e1e1d3d40573127e9ee0480caf1283d6","sha1":"06576556d1ad802f247cad11ae748be47b70cd9c","sha256":"8c2574892063f995fdf756bce07f46c1a5193e54cd52837ed91e32008ccf41ac","sha512":"e32af21345e7a932da186a47adb173dd1c6998767b25f8397f3740e87e591c2370be6f2b11c836ea6b4978034fff239309f721e7bf2491b6ba099c347fddc26f","ssdeep":"","tlshash":"c700000000000000c0000030000000000000000000000000030000000000000c000000","size":1,"data":"","first_seen":"2023-03-07T01:15:06Z","last_seen":"2026-05-26T17:22:03.439048Z","times_seen":71035,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7b8b965ad4bca0e41ab51de7b31363a1","sha1":"d1854cae891ec7b29161ccaf79a24b00c274bdaa","sha256":"1b16b1df538ba12dc3f97edbb85caa7050d46c148134290feba80f8236c83db9","sha512":"917148ec47923f2e0e3d73142ac4f94ec4c73078865ba6d29f0ea172cd6f4bf34db699af5c33535d3694d4aef91a11f916004d0382f794448a8550623d34c985","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000c00000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T17:02:24.243737Z","times_seen":59390,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o676f6f676c65o636f6dz.oszar.com/js/th/CfTnQukLks5bs8x-CaqyPUkLGsL_zVi8KCE037ufnyo.js","fqdn":"i777777o676f6f676c65o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09a3450a24dc078ae03de856372c1b8e","sha1":"237f85dee5c0a7dd5726cd88ae56d90d58c213bc","sha256":"09f4e742e90b92ce5bb3cc7e09aab23d490b1ac2ffcd58bc282134dfbb9f9f2a","sha512":"75478689fd0a17ec781ea26ec98d800620f622299e1a0d3e0e78bffd91c00550c56a1b7dd9fc015230188afcc153139a4cfbac0262970f8d51312d722e3a5e0a","ssdeep":"1536:jpkBjKiF6iLiS6WBcVW01eJKx+cUnK66kh4GurV:ejKiF6iLiS9k1ec4Lnh4j","tlshash":"9b432acfb2d2673089f369e2115b410921bea8265c543c6ebd16e3f46e75a87402ff39","size":58957,"data":"","first_seen":"2025-10-01T14:03:15.205419Z","last_seen":"2025-10-14T06:58:33.913817Z","times_seen":1101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bc5bc98ee4146d8ecc0a8f92936e873e","sha1":"c77266c5313eeddd6c22b6d4ae3c2df118840f6a","sha256":"7d76fd022f0ac9fc36134764159944d6076f369009f707dd37379c80d8fbbefb","sha512":"aba2f5de3d50cac0d2ea813e97856eaa3defb4eafc632a227f47f87e290bc7f243564f2f36dd4a5049c217cb14e0bdf6cb50c3af8e927e444623c0bedc8b18e4","ssdeep":"","tlshash":"67e02640b90515b6f4a78f61d06b720022d0b02a86be6f2c6227ff36d8f528202ebcc1","size":327,"data":"","first_seen":"2025-10-02T03:23:46.344576Z","last_seen":"2025-10-14T06:58:35.295815Z","times_seen":987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"71d895c6f3dea1912301b7d20743ef50","sha1":"6bda34d11e1f65c3eb99e08174f68ff786df3d36","sha256":"32e983a3edc1b73e7b0c2f6fc308a17b4833276b6469b89f71c1a75b4929db55","sha512":"e9bc6b189f778bdc4fd5aa208f724b6362f17343d912a9f9300bd67e44a37313a3f457ae50fa154bdca4c5e9f6ffecf42afca81012f7f9bdf5a94a745d34ac75","ssdeep":"","tlshash":"41b0122c7768d07982dd72451edb04b1ccf22ea1045c2408ca1310020b70fc200ddd30","size":106,"data":"","first_seen":"2025-10-01T14:03:15.134455Z","last_seen":"2025-10-14T06:58:35.546856Z","times_seen":1091,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d20caec3b48a1eef164cb4ca81ba2587","sha1":"d160e0986aca4714714a16f29ec605af90be704d","sha256":"72dfcfb0c470ac255cde83fb8fe38de8a128188e03ea5ba5b2a93adbea1062fa","sha512":"242dccbd15e40f8f78cb6fc54cb9894713b7682afd1305d5230e26f2fda96fd764061713e4954e22457b37f25c328e8342c2bf6b55844610cd0756fd02271aef","ssdeep":"","tlshash":"c700000000000000c00000300300000000000000000000000000000000000000030000","size":1,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-05-26T17:28:29.907732Z","times_seen":75089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ddb2ea171f6bdbdf0a056be5a6bb22c","sha1":"53e871fdab6b8fe2d0869a51880a5e69cfc78056","sha256":"ead5881816de3e03308bb3a33042600821d1d0e42ebafe7265405501f0775f9d","sha512":"a77297d844a34db182bdc80ced995a5e84356b4e8f4575f2e342691b7c5781a508e29f323856b63cea7faba34c5ef9f93adb5177f1c9a609ecaf975dc3d6c9c9","ssdeep":"","tlshash":"0b01c9b53e0eaa31000666b3369f22c8fcf348776c01f90404144eca18dde920bface2","size":790,"data":"","first_seen":"2025-10-02T10:05:42.580572Z","last_seen":"2025-10-09T07:44:53.196365Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-26T18:21:48.088861Z","times_seen":336413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"805d3686a209b4a66a96a215692258de","sha1":"45c94be1c8acc8fcd09ef719d25aa16ff587dbc6","sha256":"dcd1ab1d0f768819a6f0d187638775799862cc13243a90c9b54b7bc050c37e87","sha512":"46229de5638277e0ea8bc5ef919a03f648c48039f0e393a08b55ca2bb232a9695dd4578b9be9727c8d2b7b133fbf2235d35a9c5c19f66297945913bdd8c2cbc1","ssdeep":"","tlshash":"31d0a7c074a6ea3d8563c73a000711814d65c974e91d8cfaaa22f75ed43179b1dfb7c6","size":222,"data":"","first_seen":"2025-10-01T14:03:14.970001Z","last_seen":"2025-10-14T06:58:35.432516Z","times_seen":1011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ccc57286d9aea7a55e3e3adbb8400e91","sha1":"eaec56a4aceab67fede18d128848c230576b427e","sha256":"d28cc23802c9a27a37f6ec14f36930ccefa1fe77548d9336a80de17a7e554d44","sha512":"060c6ec8fca3d24ba3582c28d4e92547a4d90cce4d9da037a0d14475a94f3d9e8b89ddc8778dd6684e1c69b1b5eaad9b5c2deec8501ea84447358667c6be42be","ssdeep":"","tlshash":"c1c02b2dbcb31d1208605d31f6770f18c0adf02d04040c4ca8473ecc2c926551c39812","size":144,"data":"","first_seen":"2025-10-01T14:03:15.110061Z","last_seen":"2025-10-14T06:58:35.579403Z","times_seen":1002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ab43a6fb1c0f2f4cc0f52cc24fc6bb72","sha1":"25cadb1bf8cd6467f4d41ee55c8114336da5c219","sha256":"a75b45df42dcd116c8d5f4a49897e3997a7ecd6899f2bbec6639542ed7905d8a","sha512":"067ba91062b45c81d83e125655eefc1adb8a1dd6f712f08b42794766204a3dea161f8228661059dc2fe3469c8fa30d90538dacbb6616cf413ed21ba82a589768","ssdeep":"","tlshash":"62a011a02cb820200302082822b20002028a8020aa802aac8008f8ac2ae83aa002be8e","size":78,"data":"","first_seen":"2025-10-02T03:23:46.332249Z","last_seen":"2025-10-14T06:58:35.530475Z","times_seen":1008,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"da984e42a5899bbdac496ef0cbadcee2","sha1":"8df74dda184c19df19d4755602108540e071bf38","sha256":"88b3e13a98900e3dfa4b36074ae14aededf166e6f21f2ba668ba5fbec88922a2","sha512":"8630f578cb6dd0ae8d2e8ae8cbb510a982e0e8e043b1a7b56ff77204772a92a27184da4e832d75d868ea1a556e50d2211a3158c9d24938c8159df21558f49e8d","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000000000000000c00","size":2,"data":"","first_seen":"2023-03-12T14:32:33Z","last_seen":"2026-05-23T19:43:07.183267Z","times_seen":1200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dcc9bcc8ca4ff8fb70ebdefe4f6ef938","sha1":"c2b82789ebf9d62a53b5dbb32a45749c8b2710ef","sha256":"8f32bb909ecb44f28303a7edfa56205915db48990a0d170f433b94551c585608","sha512":"32f9f1c48e1a55bda0750afce549bf3a7886f278884a9eafb1c7952d698bf254c3bb12c67a4285eb0c84be5c057e39a20046599e23e742a9f59a33beb2881e3b","ssdeep":"","tlshash":"2670002a3c083080032230300c0b0a082822002080088202080000c80f3002e02a280c","size":22,"data":"","first_seen":"2025-10-05T08:59:30.510494Z","last_seen":"2025-10-14T06:14:46.855574Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T16:53:36.485058Z","times_seen":109707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-J0YDDLDEYK\u0026cx=c\u0026gtm=4e5a71","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"22d0a3419bf1842a84a3611e75cfad06","sha1":"7181309f2a75806e829b6b3bf18a195a6d1fa6e8","sha256":"447e32da9f02341353cd171dcdef5399ad78bddc251415dc40b80d20350b172a","sha512":"91741dd5ffb8dd324dcd2f83fe3efcba99c78985e6baf22fdcddbea57df5e13f86dc082cb9ef6238ed8b97cb2c9fadbb7fdc480e54cc48ef0e0e10fc58f99d0c","ssdeep":"6144:1Brwep2itv0njCnzGwXV4rvoB6bEGBQ5w0yNJWy:LjY8snjYGdo3Fy","tlshash":"92a4099e73da742252daf478506f018ba47b24e2f44cc8a6f1d9cde02d34a9a0167f7d","size":470440,"data":"","first_seen":"2025-10-09T07:44:53.086959Z","last_seen":"2025-10-09T07:44:53.086959Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7a45e6fab93673db05bbed92be9e5936","sha1":"2ad917c607e590479eaa2fb6df97beb898f1d061","sha256":"be9c5a4b6d376bc487cf71d26bcf3e2d986965a9a382da0efde8b964d3ad55f2","sha512":"f45f4429c3131bd622c8031ed87a46818f2eddd6e01d4d7d962bfb3e12ea24267425327c7d262706ab6dbab142fce6dcdf7d3d4413a6bf233e9a76cae7ceed7d","ssdeep":"","tlshash":"41a022c088f8b3f0c020ae20abab000820c28c3c000000feec0fcb0ca33abc220038b8","size":77,"data":"","first_seen":"2025-10-02T03:23:46.418292Z","last_seen":"2025-10-14T06:58:35.597595Z","times_seen":1007,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b0da529a0be4e5e32a407051ad5a3094","sha1":"f18c7f1685b0ba4bed977e994b800fcdbf7bd630","sha256":"862b6d3ad2de6845a27f2f4d1b27c379c2af5a170b5961ca8004335d14693077","sha512":"831e5079452f4c437257f6fea9eb69ebba599ce49b3e16e1cb7e02892a5693c28452638407726460311526b749836d3e413681f0a823eff2a3bc6e8c9a653280","ssdeep":"1536:zqB7KiF6iLiS6eBcvW01eJKx+cUnK66k74GurB:q7KiF6iLiSh01ec4Ln74b","tlshash":"975309cff2d1673089f369f2115b410921bea826dc542c6ebd16e3f46a75a87402bf29","size":63733,"data":"","first_seen":"2025-10-09T07:44:53.202565Z","last_seen":"2025-10-09T07:44:53.202565Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"61cedcb2c1ba92bd633a1265a4922b66","sha1":"0c1021d870738332cc72fcea36efa446a6f08056","sha256":"b7acb3af3adac9ab51fd0c4070eac0c25aebe702f901bd0abe1b4e797637a2b8","sha512":"930044d39b63d128ca22e17911a44269d3444ba26be8807316b284f5a8d2760006dfc1710c9aba5ed2ac1d00314ea2d1c786516441c5e853e73301fac2858478","ssdeep":"","tlshash":"0ba0228a0ebe30f883028380083323222300e08088000088c0200020380c0cae0a0f22","size":67,"data":"","first_seen":"2023-05-24T02:48:57Z","last_seen":"2026-05-19T23:06:44.991149Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f15ecdc090b19e03eaed156c8a178bec","sha1":"dcf479805e174e3d9db706ca7983dd6df1a6a4e2","sha256":"7b26fdf04862c94b0fddf0a28a82a79ec0d49115f8e0f71372847e39ee536891","sha512":"4032a9965b6370094268400f23f902dbe72cad4c27f9f2702e04cd8e7fefb42c30ca74ff3ed6ea4548807081b7c009b8d79505c5fc128aa4b1584f9e4239cf0d","ssdeep":"","tlshash":"30f09e0c0744388ce84a9d9dc5506a709f9c927bbb413451f83e054dbde3beb9870557","size":522,"data":"","first_seen":"2025-10-07T23:24:37.134399Z","last_seen":"2025-10-09T20:36:36.438582Z","times_seen":778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6b1c7b1d1e9af8c5cd4e4d4e34867cf","sha1":"f473fc014546c3a815f2eb4a021de18f009dc0e1","sha256":"1cbb89944323db675425ccecf84d0ae66a4960335b4ee167ac30ba48e65bbdee","sha512":"6eb02115d0a68296be516912514f0f8930e1f95839b3ee12dae388ac4b2554ed3615fcf3de5e2f00616eb16a5a19c0c2b86c262ed4d7a71003b3b93c7660b280","ssdeep":"","tlshash":"d4c09bcd35465d7195fb57504f1ff908b191325198d11d31495573455b31c179754860","size":148,"data":"","first_seen":"2024-12-27T15:15:37.723631Z","last_seen":"2026-01-10T23:27:53.450524Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b344aa0a898482a5bc90db3d9a530e02","sha1":"6077fa139d425d34431ac558db6ca0486b191705","sha256":"08a7b83a69ca4e6c79fad0586e448976ed9f761a4afb043b5952eb1f3de29e94","sha512":"9dfc88ac751426d4a51a6f4e5684ad3dd9200ccfcd6ca268bd8c1f15f9007d16489ffdc5ab45dffda4dc8498dafc288168f38644055d42ca0acfcf6d7ed5312e","ssdeep":"1536:iXiWk3rbEGOcyQDU/ZtIZh+ajbPMwaM+3USHUIJqvtKV1S9iLY+IA:0CyD++UP9A3LFqvIHSkD","tlshash":"58a3c6540c68a8729893d447deb9ff3e8cf816790ac4996dbdbb875c01ec6510eaf413","size":103440,"data":"","first_seen":"2025-10-09T07:44:53.206748Z","last_seen":"2025-10-09T07:44:53.206748Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8f32590bad0ccf7b22f10a7d2fa1ba83","sha1":"80088ff0761f6f3d6572ea4f781ec3de0b5dcffb","sha256":"c85a3445186c57dd4a4cc0b157f703d5f7a612241755b9b3b3cac6b1639624b1","sha512":"c223bbc58c22e9fb38b4e59a5e3d6ea4e333da33f8195ca503b75d0ab3f47e151e0348689950f244ff0b899279dd9e077cb6acbdbf8129edd35113e852fd21d8","ssdeep":"","tlshash":"c7100000300c0c00000000000000000000000000000000000000000300000000000000","size":2,"data":"","first_seen":"2023-03-07T22:48:07Z","last_seen":"2025-10-14T06:58:35.489525Z","times_seen":1670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"79affe94efa21de53dbbfb543ffad966","sha1":"58978b20f7a02d6be14dabed4fbd69e55ea2c7a7","sha256":"a73c7f0e45469dfc274f83a81a8e5673c556b642d29d4ad66b9ea1ef77528e65","sha512":"276fc0838fb9a1aeb96af36eba77b958faa457d318395b1239eb48c369bddcb15a4ed6330769957a6852b19d2c8b2ef61fec1acaec58c6cb44bc80e36fdcb104","ssdeep":"","tlshash":"4a8000382c08302208a23030880b0c082c3230a300002c0302c30acc0e3000b002280a","size":28,"data":"","first_seen":"2025-10-01T14:03:14.977767Z","last_seen":"2025-10-14T06:58:35.450013Z","times_seen":1104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3865fb4ed868a6467661b92993778732","sha1":"655e27ae8c0e92daf3679c4e9e9d70de51aa2ea4","sha256":"c6ef9d48bb5efc39b3f0636bfcd98548a4889b73f44b4ac8838c48b1d1d9892c","sha512":"02be7b61b6e1509f737426432b116cf3eb4e1594013cda7bc5820a4bba6fc93fa3ec5f995efec8224be6e0bda3cfaa5b7f39b71f1e62ccf5b48270ea43d64fc0","ssdeep":"","tlshash":"a6d09708a1ce60aa8a1d620722c69c7205e118336c11cc2662c810e1022be4c800b80a","size":244,"data":"","first_seen":"2025-10-02T03:23:46.445119Z","last_seen":"2025-10-14T06:58:35.105216Z","times_seen":1005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-26T18:21:48.088861Z","times_seen":336413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-26T18:21:48.088861Z","times_seen":336413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f15ecdc090b19e03eaed156c8a178bec","sha1":"dcf479805e174e3d9db706ca7983dd6df1a6a4e2","sha256":"7b26fdf04862c94b0fddf0a28a82a79ec0d49115f8e0f71372847e39ee536891","sha512":"4032a9965b6370094268400f23f902dbe72cad4c27f9f2702e04cd8e7fefb42c30ca74ff3ed6ea4548807081b7c009b8d79505c5fc128aa4b1584f9e4239cf0d","ssdeep":"","tlshash":"30f09e0c0744388ce84a9d9dc5506a709f9c927bbb413451f83e054dbde3beb9870557","size":522,"data":"","first_seen":"2025-10-07T23:24:37.134399Z","last_seen":"2025-10-09T20:36:36.438582Z","times_seen":778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/www-embed-player.vflset/www-embed-player.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f816a71b7812263dfbd90b2f188e4e71","sha1":"a1056b37fc9d357390134cb577f9f2ddc1282b1f","sha256":"5d4c0f23d18b1530178939dc001b492e697e6927a6cea13de4335e6a983036c9","sha512":"b81696abb1aee3e93770c9ac0841ed706f550afa57081c17e312404cd531c7237fb52412df2b61993e9e91f7c3d845be1869794971c6324482256af777d0972a","ssdeep":"6144:NsOOFQm8Yt7RnwK7juuT2PG/i3JJX7vthi9:Txm8Y/KO8HX7vtW","tlshash":"2e843ccdb692706253a3a5b4403f110b713ab8aab80cc8b8f195d5d92e7495d8337f7e","size":392722,"data":"","first_seen":"2025-10-09T07:44:53.072108Z","last_seen":"2025-10-09T07:44:53.072108Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8021f7e4b05dada0ad3d47567e52249e","sha1":"0d94103eaba0e8fcbb475d8c9ebcf4752ef898ed","sha256":"ec5acd5e21ac22d556a4783140a064054939e9c8b9217b0fe94f3496024a84d3","sha512":"f14b0258093615758b1ad6d5af14fcac4f75a6b00f2d69b3acd59ee6aa57d5ffbbb63986172203f17d5f8e8259b74dd84e65d9c7f17b4cb92179174b0e625b78","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000c00000300000000000000","size":2,"data":"","first_seen":"2023-03-26T03:09:36Z","last_seen":"2026-04-13T06:36:38.208179Z","times_seen":2011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b2f5ff47436671b6e533d8dc3614845d","sha1":"54fd1711209fb1c0781092374132c66e79e2241b","sha256":"cd0aa9856147b6c5b4ff2b7dfee5da20aa38253099ef1b4a64aced233c9afe29","sha512":"19f142b018f307bfdf1c7009d15a29417c96d8678d2982eebce4961b2e67eeb118a8ebb1d75b70087c3e65bc793450e3fe4a10002befa2d038e5aed4796937f2","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000c0000000000c000000003","size":1,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-05-26T18:00:20.355795Z","times_seen":46976,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d20caec3b48a1eef164cb4ca81ba2587","sha1":"d160e0986aca4714714a16f29ec605af90be704d","sha256":"72dfcfb0c470ac255cde83fb8fe38de8a128188e03ea5ba5b2a93adbea1062fa","sha512":"242dccbd15e40f8f78cb6fc54cb9894713b7682afd1305d5230e26f2fda96fd764061713e4954e22457b37f25c328e8342c2bf6b55844610cd0756fd02271aef","ssdeep":"","tlshash":"c700000000000000c00000300300000000000000000000000000000000000000030000","size":1,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-05-26T17:28:29.907732Z","times_seen":75089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e3669d19b675bd57058fd4664205d2a","sha1":"7a38d8cbd20d9932ba948efaa364bb62651d5ad4","sha256":"4c94485e0c21ae6c41ce1dfe7b6bfaceea5ab68e40a2476f50208e526f506080","sha512":"7b0776dbac74a9abb8a0d0119c73ae82efbb1b95af009f0669e2b52c9664f7fbb458ddf3abd7ccf0617ab69362a13ade046c4f19490710e5d8937ba72efa90aa","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-05-26T17:43:38.943591Z","times_seen":56677,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PNFHQ1FTKQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"48a7cc69bb1bde48329fea16b77b302a","sha1":"185982a8aa4b456c2a35d225f1e49c86c0a8ba0c","sha256":"00fc462ef7f9ceba8e8d4d10836a28823acdb238b3996c7568c3c171008f0904","sha512":"8dd76ae8c4fa51581032d5c22d02e0ee681d479140eea6df9b4bc4b56da2e8383c870cc8cf78f26ae21f4e410b6e161cc299ae7a943da8306dae8a7b412f3635","ssdeep":"6144:0B6wep2itv0njCnzGwXV4rvoB6b6GBQ5w0yNWXy:KyY8snjYGdoT5y","tlshash":"149419ce73d674225396f478503f018ba57b28a2b44cc89af189cde52e74a9a4137f7c","size":426867,"data":"","first_seen":"2025-10-09T07:44:52.993353Z","last_seen":"2025-10-09T07:44:52.993353Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ca229ab7853983f811561e73c6d9ea46","sha1":"6ea030e341c8c7f8540e775d8440f01005991993","sha256":"5bcc82d863c8db71e0c04f58255f4209aa635b62bf189a1f5e31c983c6209b80","sha512":"0a64178acb842979264bbe407c3e31a4a90dc3222051609e605adcb8bfd80669e93d0a5dedaac347e99da9910dbcf3c4e0e272b6c37b23c080ffc3fd90dec7c8","ssdeep":"","tlshash":"69e0cdc86b593e36e7976c51e46713023141960349c77b4963a7766898999666203c18","size":310,"data":"","first_seen":"2025-10-01T14:03:15.209765Z","last_seen":"2025-10-14T06:58:35.367528Z","times_seen":987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"da984e42a5899bbdac496ef0cbadcee2","sha1":"8df74dda184c19df19d4755602108540e071bf38","sha256":"88b3e13a98900e3dfa4b36074ae14aededf166e6f21f2ba668ba5fbec88922a2","sha512":"8630f578cb6dd0ae8d2e8ae8cbb510a982e0e8e043b1a7b56ff77204772a92a27184da4e832d75d868ea1a556e50d2211a3158c9d24938c8159df21558f49e8d","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000000000000000c00","size":2,"data":"","first_seen":"2023-03-12T14:32:33Z","last_seen":"2026-05-23T19:43:07.183267Z","times_seen":1200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"030b118d622421e932957fc77a99c2f7","sha1":"4f89435628733c14870c7e875ddf10baf51b9058","sha256":"d0406a1a2a167328af101feb6c9f44657f9e85630775d2e4610aa9f9e4968761","sha512":"1e9e3b09b26f6b2f51d66120d188343a7299389bc15191b7f19392acdcc8fe8acfa4774e4702ff058ce134320a75faf62ddeb106683c5f9fca3f7a9ade220793","ssdeep":"","tlshash":"71e026f9d1bb8c6160ea59e8e2ef61c440861d7259931c9de606e1e803b3eaa029d916","size":344,"data":"","first_seen":"2025-10-05T16:09:33.624197Z","last_seen":"2025-10-14T06:51:15.773318Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8fb59e2df88f4f437d4828e485a1b1de","sha1":"4e09b4f785794e16c0b3c7d7a32c6d0c8a68c7f2","sha256":"6d0987136f041b91e007d4bbc699c2c26d592f08338d2d8dcd4332a0a2ee7225","sha512":"e8fed16378507db5bc14f93857118af8ea49faf45eaf5f15c97875ed2e07d1571c8d814c09d9ca7e17dc7f936359289e05f55c2d0240492a7adc0ea634c4396e","ssdeep":"","tlshash":"81d022f08fb660bae2c424ac53022220cfeaa086c9657982d1a600e06aa000a246b828","size":216,"data":"","first_seen":"2025-10-02T03:23:46.379658Z","last_seen":"2025-10-14T06:58:35.346417Z","times_seen":1011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b57117ba1e4d7a9d9861a349958c5ce5","sha1":"2b942009bc46a6ca6545ffbd37f7746584df56aa","sha256":"ba53a0ed74b65952afcca48bc6bf920c2163f49deb80355c514bfd912150c6d5","sha512":"4fdcc6006b27acee716306fef4d1565cf39ac2abd8537161eb6bebd9dc60f0ede9e294dee8d470c5136179d43718ff3980d129f353f1c06955267d882eff0c15","ssdeep":"","tlshash":"c710000000000003000000000000003000000000000000c00000000300000000000000","size":2,"data":"","first_seen":"2023-03-10T02:20:13Z","last_seen":"2026-05-05T20:59:59.816666Z","times_seen":4786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cdb2cf872763d721b1ea8385cecd9343","sha1":"23bf5e2e27e97238d413f5ecf90425acd115185d","sha256":"d4563cb3c750021c344e346a3896f58e917f24a4959682ef5586bb11191aa450","sha512":"c9544b608df23b83b07e7926a87140a19ddce3d08ef7bdffcdc65c301755f064932ecec85b6ead842efb983f8012c82aef5b68cb594a734da188c106ca7cc6e8","ssdeep":"","tlshash":"a5d02350752c72f5c44f2c6f0fd7d4b6059650033800453e01af555055f9c44a155c2c","size":230,"data":"","first_seen":"2025-10-02T03:23:46.30168Z","last_seen":"2025-10-14T06:58:35.158102Z","times_seen":1009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7188b9b84dda84add3830c8dedd51ed4","sha1":"ad2d81c14129884932b81b83a5e20cc47c3777f6","sha256":"bff491f992dc0798228046800761f6f9b2ce8f822e8d7030f5fc7a2c481653fe","sha512":"6727bbd9f2bb8067651230ac178d3102889e917a4989ea33ec394b452865498aaf32a65fee659b5796bee34b3238a554364741f65dc01f9e6057a242f4e8c961","ssdeep":"","tlshash":"03d02bc0bc6576188ad3803b4017004054008822d71c49b8a111ff25d46174a19e9a45","size":229,"data":"","first_seen":"2025-10-01T14:03:15.018299Z","last_seen":"2025-10-14T06:58:35.40575Z","times_seen":986,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c8600a0cc45fe853cb446a96bb8eae35","sha1":"6f31b5841ffad16885af1979573ca12123f717fa","sha256":"dbebc59f32afca6559883b7bd7bceae99675f33cc576f2b1c9440e63032f5bc8","sha512":"b6f392ccef9c7de189b6b5d807e1864073d8c4110b0dded6ce5c182cd4551b69e4c4c73845c3ecc75a1e88edbd97642d45d07d787b2ba8c1e01456d3275e4b3f","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000000000c0c000c00","size":2,"data":"","first_seen":"2023-03-07T12:07:29Z","last_seen":"2026-04-25T22:35:28.944729Z","times_seen":1767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3049a829335281c64692e45b83678335","sha1":"34123d20b0cff9a50d739bb5431d49b06a72da30","sha256":"13825a5374182a0a3e242d511dd6c3ad0f03d89c5107bdd63d31a5bf5912b38e","sha512":"62e4869bd3e6d181b7195c58e4bb049303f326d226be013c11e2e44e7d727bd4f04ee48b7769d1482b4f8ff865af48da1569d4b2ceb4ae6d61aca7e79c821497","ssdeep":"","tlshash":"c71000000000000000000000000000000000000000000000300000000000c000000003","size":2,"data":"","first_seen":"2023-03-10T13:29:47Z","last_seen":"2026-04-02T00:14:36.048143Z","times_seen":1129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ccc57286d9aea7a55e3e3adbb8400e91","sha1":"eaec56a4aceab67fede18d128848c230576b427e","sha256":"d28cc23802c9a27a37f6ec14f36930ccefa1fe77548d9336a80de17a7e554d44","sha512":"060c6ec8fca3d24ba3582c28d4e92547a4d90cce4d9da037a0d14475a94f3d9e8b89ddc8778dd6684e1c69b1b5eaad9b5c2deec8501ea84447358667c6be42be","ssdeep":"","tlshash":"c1c02b2dbcb31d1208605d31f6770f18c0adf02d04040c4ca8473ecc2c926551c39812","size":144,"data":"","first_seen":"2025-10-01T14:03:15.110061Z","last_seen":"2025-10-14T06:58:35.579403Z","times_seen":1002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ccc57286d9aea7a55e3e3adbb8400e91","sha1":"eaec56a4aceab67fede18d128848c230576b427e","sha256":"d28cc23802c9a27a37f6ec14f36930ccefa1fe77548d9336a80de17a7e554d44","sha512":"060c6ec8fca3d24ba3582c28d4e92547a4d90cce4d9da037a0d14475a94f3d9e8b89ddc8778dd6684e1c69b1b5eaad9b5c2deec8501ea84447358667c6be42be","ssdeep":"","tlshash":"c1c02b2dbcb31d1208605d31f6770f18c0adf02d04040c4ca8473ecc2c926551c39812","size":144,"data":"","first_seen":"2025-10-01T14:03:15.110061Z","last_seen":"2025-10-14T06:58:35.579403Z","times_seen":1002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"082898d0476e6785c111eab47e440583","sha1":"5364eda2c7969a3d2ce17f2231cd677d3547eb8f","sha256":"8479fea3ba8b783fc99fe172347aef89d8517041ae052c0a9bc1a8005f37d83f","sha512":"709dd3835b86f8e95e559c445dd6881b52d38071479f332dbb76cf0f041c5e53be1eee7247f67265855cec874cceaf6cf1248e2f93dcbca2735848676391e1b4","ssdeep":"","tlshash":"e91100793a2a1534cac5818b317ef7a93d3260217e02a044c3acdc289d18e8314efcbe","size":902,"data":"","first_seen":"2025-10-09T07:44:53.219348Z","last_seen":"2025-10-09T07:44:53.219348Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d5337a7ba417639504c80638852c0a19","sha1":"87c8261cec9ddc2177740dac736b2d3d78bb897f","sha256":"88874e32befa01bddaebe480167e5f653785f944c43584471a811f39a9a6dcf8","sha512":"03cbbf46618e9d3d28d2764f77343a4ddaf189e5dfa7b52f33a5ff54e158c59a2d87cb3fc787ff739a4945fe0e5b47766397c8be0a566f0995470ae331caaf0e","ssdeep":"","tlshash":"c71000000000000c000000300000000000000000000000000003000000000000000000","size":2,"data":"","first_seen":"2023-03-07T12:25:55Z","last_seen":"2026-03-08T22:33:41.148338Z","times_seen":1132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8fb59e2df88f4f437d4828e485a1b1de","sha1":"4e09b4f785794e16c0b3c7d7a32c6d0c8a68c7f2","sha256":"6d0987136f041b91e007d4bbc699c2c26d592f08338d2d8dcd4332a0a2ee7225","sha512":"e8fed16378507db5bc14f93857118af8ea49faf45eaf5f15c97875ed2e07d1571c8d814c09d9ca7e17dc7f936359289e05f55c2d0240492a7adc0ea634c4396e","ssdeep":"","tlshash":"81d022f08fb660bae2c424ac53022220cfeaa086c9657982d1a600e06aa000a246b828","size":216,"data":"","first_seen":"2025-10-02T03:23:46.379658Z","last_seen":"2025-10-14T06:58:35.346417Z","times_seen":1011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"051e3b55117dd4e81a4ae19860a2cd26","sha1":"96c2b633735be0ea89a5301e61957b0c1376c398","sha256":"63a41c9d13a510122872993da51cdde1c69ee628fef540d83e8d9d8e61a74bd0","sha512":"20aa8dcee2fb41c0d8db740cc9edacf3d80ce7b84c09779b7ae476ed72ed1964ea64238f11c8b7ddda6ce8ec629a9d9e3ed3b9fc72515316ce0b148ad10bad26","ssdeep":"","tlshash":"c71000000000000000030000000000000000000000000000000000000000000000030c","size":2,"data":"","first_seen":"2023-03-08T21:58:54Z","last_seen":"2026-04-14T20:49:36.591802Z","times_seen":1090,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-26T18:21:48.088861Z","times_seen":336413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-05-26T18:19:09.762554Z","times_seen":236630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7188b9b84dda84add3830c8dedd51ed4","sha1":"ad2d81c14129884932b81b83a5e20cc47c3777f6","sha256":"bff491f992dc0798228046800761f6f9b2ce8f822e8d7030f5fc7a2c481653fe","sha512":"6727bbd9f2bb8067651230ac178d3102889e917a4989ea33ec394b452865498aaf32a65fee659b5796bee34b3238a554364741f65dc01f9e6057a242f4e8c961","ssdeep":"","tlshash":"03d02bc0bc6576188ad3803b4017004054008822d71c49b8a111ff25d46174a19e9a45","size":229,"data":"","first_seen":"2025-10-01T14:03:15.018299Z","last_seen":"2025-10-14T06:58:35.40575Z","times_seen":986,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2a9a6a2a06daa7270e82e6db2a78b896","sha1":"aec41190618af5a1f2d6a4542cfb212cafec84c6","sha256":"ba76f75a11ad9c9f9fe20f1cca025344167d9d4b9b8ed95357b5144f96f0e1c5","sha512":"2982bf261ae60270aeeb5f2ae84ec273723072eaac917d508b703713f1f4a95c8d31b8f95ec4b41f4c3f8e420c8a589fd820c772d36b8853e272ec74f00c1e30","ssdeep":"","tlshash":"f3110ee4b02732207252c9a12cbbce68757570262e383d6d224290f75ff923e9546f0b","size":1009,"data":"","first_seen":"2025-10-01T14:03:15.074899Z","last_seen":"2025-10-14T06:58:35.494345Z","times_seen":1005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"50dcba359f057b580fc6a0ddcc04ff73","sha1":"1b75c532bb23269e7f3a347f36905b0dfe85852d","sha256":"ae8cb854f50fcd6155ed041b0d102dd593448f9ae6f6cc76209fef44b0b1c58a","sha512":"c9bac114e6ee252fb49bdb739b72fa00c5fc773be72924f58c4ee981f7503a1750abe3967bcda1aa65627625d8236a828b7bffde36d33b3387ba5c45aaf96c3c","ssdeep":"","tlshash":"23a024c044f4f7f0c0104d105757000410c1403c000010fd5c0dc74c53357c11403474","size":77,"data":"","first_seen":"2025-10-02T03:23:46.292311Z","last_seen":"2025-10-14T06:58:35.595134Z","times_seen":1009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"051e3b55117dd4e81a4ae19860a2cd26","sha1":"96c2b633735be0ea89a5301e61957b0c1376c398","sha256":"63a41c9d13a510122872993da51cdde1c69ee628fef540d83e8d9d8e61a74bd0","sha512":"20aa8dcee2fb41c0d8db740cc9edacf3d80ce7b84c09779b7ae476ed72ed1964ea64238f11c8b7ddda6ce8ec629a9d9e3ed3b9fc72515316ce0b148ad10bad26","ssdeep":"","tlshash":"c71000000000000000030000000000000000000000000000000000000000000000030c","size":2,"data":"","first_seen":"2023-03-08T21:58:54Z","last_seen":"2026-04-14T20:49:36.591802Z","times_seen":1090,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2ae9c6329340c843526d95d45e3b920","sha1":"08432367a32eb72d46829d07e549df470bc30540","sha256":"acbecdb791d83f4df2a465da7b66a2bd4ada356e638ff92ba100804e07fb2013","sha512":"c01037448c061786e031327599eddbb814b726a10a084e09c8d46fae06bb7c7a759f34711aaa1f4132604af48f7c20336e290e2d3e3bcfba1fa54d2f463c1b98","ssdeep":"192:6aTToCHz/lk41LmPd292gmCEXTelzPpva269SbXI3L7BEoML:6a3oCT/RazCmTexo2CSbXUfBEoW","tlshash":"62224bce6848b3e4e2a43c70914f70cbab3ffe561445786a91489cfaf926b589057e4c","size":10218,"data":"","first_seen":"2025-10-09T07:44:53.176458Z","last_seen":"2025-10-09T10:14:32.303569Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"abe295e74fbc82f9450d6537bcfebbed","sha1":"6f31beb67567c94a02c382a3172cd288883189ba","sha256":"c1581457554816bb9acd0212f6be8a7466be96f75846634bd5621ede5d7deed5","sha512":"bd5b649325776706548ed3893f40d4b2859b2f258aeab9f218c012dcddced7d0e2f8e1eda24e2aaf75351ef071667b6258adb081a0bceb3ce4eaa2425fb47b5c","ssdeep":"","tlshash":"c71000000000000000c00000000000000000000300000000000000000000000c000000","size":2,"data":"","first_seen":"2023-03-07T22:48:07Z","last_seen":"2026-05-10T08:03:39.432959Z","times_seen":1940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d48a24ae9672ee573050e4d3aeeebe4d","sha1":"8f8c4d27852980a1ec5a8b1aba30769001314ec8","sha256":"53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255","sha512":"02dd385ce15083c89617859325e29ce885ae235c8c5be416828066dcb5db78e69229802d87aaf759224e2656ab4c23bf1740ae1d357cfdb57ebf78ab77488921","ssdeep":"","tlshash":"43800020202088288888200b20308b8abaa0a228a83a2000a08c8e2cb822e80a038820","size":29,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T17:25:28.63263Z","times_seen":166558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"644872e5dafa7fad68147401c6658d45","sha1":"680512d7d631369e6e7321ef173eb246848ac70b","sha256":"4f240c3fce857e766bc57dc127e931bdd4d17496a8e71c83b56feca4cc9b3c79","sha512":"6f279e7a32f8020a2fb11d1b529722438a52b326ac48921dd37f102d4ca9d1fe86b039e5036fd5aa1c5d2bc41bf90ba4b99c6c2c5b689f0f52573786f0b4b579","ssdeep":"","tlshash":"c710000000000000000000000000000000000000003000000300000000300000000000","size":2,"data":"","first_seen":"2023-03-08T05:58:52Z","last_seen":"2026-03-31T13:29:16.500091Z","times_seen":2919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"79affe94efa21de53dbbfb543ffad966","sha1":"58978b20f7a02d6be14dabed4fbd69e55ea2c7a7","sha256":"a73c7f0e45469dfc274f83a81a8e5673c556b642d29d4ad66b9ea1ef77528e65","sha512":"276fc0838fb9a1aeb96af36eba77b958faa457d318395b1239eb48c369bddcb15a4ed6330769957a6852b19d2c8b2ef61fec1acaec58c6cb44bc80e36fdcb104","ssdeep":"","tlshash":"4a8000382c08302208a23030880b0c082c3230a300002c0302c30acc0e3000b002280a","size":28,"data":"","first_seen":"2025-10-01T14:03:14.977767Z","last_seen":"2025-10-14T06:58:35.450013Z","times_seen":1104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cd08d902319dc4298b865c325e108d93","sha1":"e895170e3f608304fa898ec32388302cac44825c","sha256":"852dadad5ceaa5f6061b7a90f567a5187d57ca108d719e1b89a98f33f8443eb1","sha512":"58dc1b80b3e0b4579468f5d297f22e4f4a7bdfd969cbb5fdd3c3068a99aa55818e9c272f615ce3c4e8b763d77bbf41a70fa5feac694a5e518cae57f149c078eb","ssdeep":"","tlshash":"b3e026f9d1bb8c6160ea59e8e2ef61c440861d7255931c9de606e1e803b3eaa028d916","size":342,"data":"","first_seen":"2025-10-02T03:23:46.411752Z","last_seen":"2025-10-14T06:58:35.496595Z","times_seen":993,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PNFHQ1FTKQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"48a7cc69bb1bde48329fea16b77b302a","sha1":"185982a8aa4b456c2a35d225f1e49c86c0a8ba0c","sha256":"00fc462ef7f9ceba8e8d4d10836a28823acdb238b3996c7568c3c171008f0904","sha512":"8dd76ae8c4fa51581032d5c22d02e0ee681d479140eea6df9b4bc4b56da2e8383c870cc8cf78f26ae21f4e410b6e161cc299ae7a943da8306dae8a7b412f3635","ssdeep":"6144:0B6wep2itv0njCnzGwXV4rvoB6b6GBQ5w0yNWXy:KyY8snjYGdoT5y","tlshash":"149419ce73d674225396f478503f018ba57b28a2b44cc89af189cde52e74a9a4137f7c","size":426867,"data":"","first_seen":"2025-10-09T07:44:52.993353Z","last_seen":"2025-10-09T07:44:52.993353Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_es6.vflset/en_US/base.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"94879335192aa107aec640d20616d7ff","sha1":"1fbb80f07308f83c2f075da8adb08e014188b118","sha256":"d08c2d1051d8fdc7cc94bf38312dbeb4f95da0243bf73ead82d12b73532f61c1","sha512":"2aff56b08c81b579ec79e7fe4267c8e20361ebdb91d1f6091ad46022a9212fa56753ceb9a02962ddb6dd57ab976d039823f1369ee907c8ee90da982737486e26","ssdeep":"24576:9Wsdrr59Zb6zbj9UL7XQZatDpYgMqeH03oe7+lWL03FON2GWYZZdp:AyP5+beL7catDpYgM/WLaFQ2GWYZZdp","tlshash":"83b55cd47293bc6642b2e0eb482b2201f72a54447449d56cf67dddee9cb1c1ba13afb0","size":2371176,"data":"","first_seen":"2025-10-09T07:44:53.230491Z","last_seen":"2025-10-09T07:44:53.230491Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DDPX5wLp4UaE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=sN5BsVdm4yLBWFtCrHsNwOmhCGUNFXch6adEQ9dzN9c\u0026media_oembed_control%5Bprovider_name%5D=YouTube","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"39609d7d57ca26a0fcf6ef97c44bed29","sha1":"9418d0f733e1406a7f45b528948e04f639583d3c","sha256":"5e70098ca6b0df385d2e73381109b1cc1922dbd2f4900988a0e79c732417aa19","sha512":"56f9e86df37bf15155759875e2a9b9e04cc6212d9addaf839b00ec1b1e0ce6ff6860a1371d2fbf635d475aefa45c8fdfcede67041ab8c8ad366a00ac73772782","ssdeep":"","tlshash":"9b41be1921f911248467b1e62baf62153434108725058b0afe0efa8e7f5c47b46f8bcd","size":2278,"data":"","first_seen":"2025-10-02T10:05:42.526047Z","last_seen":"2025-10-09T07:44:53.185294Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8fb965e7ead2924508e97e5326bd3b1","sha1":"fae376d0cb54d4433b7bdc9aba04690cd6cb5d27","sha256":"57bb660c2fdf4369ff8e37f99b26963dba87c120b80c443ff3d31e030ab3a0f5","sha512":"c03eb6a1004f9dfcd1f960a6ca70a77932794808f72476b276bb16f02d0a1855fb2d93d07aab7c0c040d4b3c0eb4f861a4c1a9368a27e3a6430e425ff6ed2568","ssdeep":"","tlshash":"8e60000c00000000033000fc0000ccf00300000cc003c0c0000000000f0000c3c00000","size":13,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-05-26T18:19:09.806982Z","times_seen":231364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5206560a306a2e085a437fd258eb57ce","sha1":"c9ee5681d3c59f7541c27a38b67edf46259e187b","sha256":"de5a6f78116eca62d7fc5ce159d23ae6b889b365a1739ad2cf36f925a140d0cc","sha512":"40422e2733a73dec2f9aac48e2ab48d3b2fdcdc1e3a88bc7ea855227e62c029246da1dd49dd057bb8a8b796b3b2a6f60d9d8a85de53df597e422b2f68c54cfb6","ssdeep":"","tlshash":"c70000000000000cc00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T12:04:13Z","last_seen":"2026-05-26T17:25:28.696279Z","times_seen":61197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com/analytics.js","fqdn":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"16424db84d63487835d442bba643d560","sha1":"91e95f4efbedc8773a85fb45cc27f3128d1bf94c","sha256":"02b1829b75c84f1fd8725d0cef3c89c24099b99d4501faef57f89baf5e31270e","sha512":"d51c4e43a44bb80270846cf1804ae78e3a6dbbba9cce13b8e1bcc03a8d0495cfcee863e314149b9f14a39d910564bf55a97c972f573f4ea06c7910dfdfd8336d","ssdeep":"768:wwbeaWc7/IZDws2wt+Hfe65TVLzt+qghDXWz5o5cJDeVVgCqaDuY6N5jEi5BZso:FbeaWcjI6THfPBX5SLY5o5cJrBoi5J","tlshash":"c433f8f977463466c3a2b1e4402f100790baadd5f449d8a4b58ae6d07d38e6b01fbf78","size":52529,"data":"","first_seen":"2025-10-02T10:05:42.422586Z","last_seen":"2025-10-09T07:44:53.048501Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"208edbac405348c85b086ecb7db941eb","sha1":"0c4d991d29724180b6bd9c7329eb12edfaced9d9","sha256":"a2895e8f2256e56b6458cad8ad5bba5993533a0d6e802299c03ebb7a12495aeb","sha512":"a335c5ceb33f6f67d8bb92b67724ad7f5c2b0a2d7a9d79322d471a785210bff969dbba3242d42d11fcb2edd915e9be7224e17f02fdb9fb79b1d847c8a628aeec","ssdeep":"1536:TqB7KiF6iLiS6eBcvW01eJKx+cUnK66k74GurB:K7KiF6iLiSh01ec4Ln74b","tlshash":"f05309cff2d1673089f369f2115b410921bea826dc542c6ebd16e3f46a75a87402bf29","size":62329,"data":"","first_seen":"2025-10-09T07:44:53.233804Z","last_seen":"2025-10-09T07:44:53.233804Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"de46e4e39de08bc4f3f5b2348c23b656","sha1":"f29539b95968ef52c430ec4c82b88de59a9637ff","sha256":"4f98bf47b7396d3f026c5984325f20d5eb2afa2ee96a73da80515c2071181cb7","sha512":"f5546e234eb304cc2057a6f2768c1b817c31e8a0b1d0bc8b41ef151d0cd1b431fcaf79ee6a132cec97328010b98efa2cedddb20ab6dab6204308bea84cd511a1","ssdeep":"","tlshash":"4db0124456a801a04610ec37035f60409082a802150028de955cfd4f87237a7540786a","size":93,"data":"","first_seen":"2025-10-01T14:03:15.213894Z","last_seen":"2025-10-14T06:58:35.095366Z","times_seen":1100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"61cedcb2c1ba92bd633a1265a4922b66","sha1":"0c1021d870738332cc72fcea36efa446a6f08056","sha256":"b7acb3af3adac9ab51fd0c4070eac0c25aebe702f901bd0abe1b4e797637a2b8","sha512":"930044d39b63d128ca22e17911a44269d3444ba26be8807316b284f5a8d2760006dfc1710c9aba5ed2ac1d00314ea2d1c786516441c5e853e73301fac2858478","ssdeep":"","tlshash":"0ba0228a0ebe30f883028380083323222300e08088000088c0200020380c0cae0a0f22","size":67,"data":"","first_seen":"2023-05-24T02:48:57Z","last_seen":"2026-05-19T23:06:44.991149Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8021f7e4b05dada0ad3d47567e52249e","sha1":"0d94103eaba0e8fcbb475d8c9ebcf4752ef898ed","sha256":"ec5acd5e21ac22d556a4783140a064054939e9c8b9217b0fe94f3496024a84d3","sha512":"f14b0258093615758b1ad6d5af14fcac4f75a6b00f2d69b3acd59ee6aa57d5ffbbb63986172203f17d5f8e8259b74dd84e65d9c7f17b4cb92179174b0e625b78","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000c00000300000000000000","size":2,"data":"","first_seen":"2023-03-26T03:09:36Z","last_seen":"2026-04-13T06:36:38.208179Z","times_seen":2011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e3669d19b675bd57058fd4664205d2a","sha1":"7a38d8cbd20d9932ba948efaa364bb62651d5ad4","sha256":"4c94485e0c21ae6c41ce1dfe7b6bfaceea5ab68e40a2476f50208e526f506080","sha512":"7b0776dbac74a9abb8a0d0119c73ae82efbb1b95af009f0669e2b52c9664f7fbb458ddf3abd7ccf0617ab69362a13ade046c4f19490710e5d8937ba72efa90aa","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-05-26T17:43:38.943591Z","times_seen":56677,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8f32590bad0ccf7b22f10a7d2fa1ba83","sha1":"80088ff0761f6f3d6572ea4f781ec3de0b5dcffb","sha256":"c85a3445186c57dd4a4cc0b157f703d5f7a612241755b9b3b3cac6b1639624b1","sha512":"c223bbc58c22e9fb38b4e59a5e3d6ea4e333da33f8195ca503b75d0ab3f47e151e0348689950f244ff0b899279dd9e077cb6acbdbf8129edd35113e852fd21d8","ssdeep":"","tlshash":"c7100000300c0c00000000000000000000000000000000000000000300000000000000","size":2,"data":"","first_seen":"2023-03-07T22:48:07Z","last_seen":"2025-10-14T06:58:35.489525Z","times_seen":1670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"36f3af6226e0b5303e19b824e7442272","sha1":"32ad247f77b8a066ef05467ce49a5a63e193c3a3","sha256":"4f9db7f8e5068a3ed09c4bdf2ddd980a290126b497155aba1b4a385622d13144","sha512":"546c1d33718fab99c564b46c7301107c74d01dfcdf52f88350d10718a5ed1d3623f615d953db9f7f9f8471db0eaa91b51d7c7a3dc931e7782afc2ba28b85b603","ssdeep":"","tlshash":"c710000000000000000000000000000300000030000000000000000300000000000000","size":2,"data":"","first_seen":"2023-03-10T12:06:30Z","last_seen":"2026-05-25T10:12:00.269112Z","times_seen":2608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3865fb4ed868a6467661b92993778732","sha1":"655e27ae8c0e92daf3679c4e9e9d70de51aa2ea4","sha256":"c6ef9d48bb5efc39b3f0636bfcd98548a4889b73f44b4ac8838c48b1d1d9892c","sha512":"02be7b61b6e1509f737426432b116cf3eb4e1594013cda7bc5820a4bba6fc93fa3ec5f995efec8224be6e0bda3cfaa5b7f39b71f1e62ccf5b48270ea43d64fc0","ssdeep":"","tlshash":"a6d09708a1ce60aa8a1d620722c69c7205e118336c11cc2662c810e1022be4c800b80a","size":244,"data":"","first_seen":"2025-10-02T03:23:46.445119Z","last_seen":"2025-10-14T06:58:35.105216Z","times_seen":1005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"83878c91171338902e0fe0fb97a8c47a","sha1":"516b9783fca517eecbd1d064da2d165310b19759","sha256":"148de9c5a7a44d19e56cd9ae1a554bf67847afb0c58f6e12fa29ac7ddfca9940","sha512":"929872838cb9cfe6578e11f0a323438aee5ae7f61d41412d62db72b25dac52019de2d6a355eb2d033336fb70e73f0ec0afeca3ef36dd8a90d83f998fee23b78d","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000c00","size":1,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2026-05-26T17:22:03.484605Z","times_seen":72041,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"173a08c5d6adc5c93611a599bcb2c717","sha1":"735a7301e66ae2c3584357f7bf0bf09eefb62df0","sha256":"271e6368679a21c3416e2a0325db33d6bc445d601c72a49914081b5efd0cdf3f","sha512":"cf15a9aa7e406207f3b85c7ab7d6453fd2351616b4dbb2db767ad854f866ae8256045b8cb74948f44d09fedb6c200c56fa2e2ab83d1ab997f5b0068edee7349b","ssdeep":"","tlshash":"b0800000c08a0030c3200c082008c28038802002a8f2002208200000a0032fca0020ca","size":26,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-05-26T18:19:09.794158Z","times_seen":234604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PNFHQ1FTKQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"48a7cc69bb1bde48329fea16b77b302a","sha1":"185982a8aa4b456c2a35d225f1e49c86c0a8ba0c","sha256":"00fc462ef7f9ceba8e8d4d10836a28823acdb238b3996c7568c3c171008f0904","sha512":"8dd76ae8c4fa51581032d5c22d02e0ee681d479140eea6df9b4bc4b56da2e8383c870cc8cf78f26ae21f4e410b6e161cc299ae7a943da8306dae8a7b412f3635","ssdeep":"6144:0B6wep2itv0njCnzGwXV4rvoB6b6GBQ5w0yNWXy:KyY8snjYGdoT5y","tlshash":"149419ce73d674225396f478503f018ba57b28a2b44cc89af189cde52e74a9a4137f7c","size":426867,"data":"","first_seen":"2025-10-09T07:44:52.993353Z","last_seen":"2025-10-09T07:44:52.993353Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e1e1d3d40573127e9ee0480caf1283d6","sha1":"06576556d1ad802f247cad11ae748be47b70cd9c","sha256":"8c2574892063f995fdf756bce07f46c1a5193e54cd52837ed91e32008ccf41ac","sha512":"e32af21345e7a932da186a47adb173dd1c6998767b25f8397f3740e87e591c2370be6f2b11c836ea6b4978034fff239309f721e7bf2491b6ba099c347fddc26f","ssdeep":"","tlshash":"c700000000000000c0000030000000000000000000000000030000000000000c000000","size":1,"data":"","first_seen":"2023-03-07T01:15:06Z","last_seen":"2026-05-26T17:22:03.439048Z","times_seen":71035,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f9f2d672039ed5d04839b769ad71e1b0","sha1":"9a86054ee3627014bb2f372f939ff22772a90aa5","sha256":"ef099fcece6eeca3777d0d4a6ac606beb557e08dcd95cf93d0d42a0334329c10","sha512":"52923fb4476412cf751131a95f749956c1a4c83641935695522af4434c3c42047820db169481885cb549e9a6a8c5ffbbc6ac49ad08f246612debd54bd3ee68e8","ssdeep":"","tlshash":"c71000000000000000000000000000c0000c0000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T15:11:30Z","last_seen":"2026-05-26T17:22:03.463963Z","times_seen":2177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e60ca712e39d8a13e4b56ee9f52a150","sha1":"77b0a6fe5b6f6db68be0aed0959ac718c8cad665","sha256":"1678b64b195b3ec55e1d9bc0531f8f1ca0e161f7feec0c01a93b985d3a6653fe","sha512":"cc8ec73d4dde433a1c4be9dfaef5017624706f8d0c31b21a4a89bac4b2b02f56b769d9f8c97a5c291420fbed94cdb10dca1b07aaea5c712eb4a38c584cf880cf","ssdeep":"1536:c6i5k3kMVEcv+WyQDv/ZCIZhuvJMgBGylMD4yF6X5Cy7Lal549:aniyl+cJDG3D3dIa/2","tlshash":"02a3d8640868a8729893e547ddb5ff3e9cf806790ac99a6dbcbbc35c01ec6510e9f413","size":105208,"data":"","first_seen":"2025-10-09T07:44:53.2411Z","last_seen":"2025-10-09T07:44:53.2411Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ab43a6fb1c0f2f4cc0f52cc24fc6bb72","sha1":"25cadb1bf8cd6467f4d41ee55c8114336da5c219","sha256":"a75b45df42dcd116c8d5f4a49897e3997a7ecd6899f2bbec6639542ed7905d8a","sha512":"067ba91062b45c81d83e125655eefc1adb8a1dd6f712f08b42794766204a3dea161f8228661059dc2fe3469c8fa30d90538dacbb6616cf413ed21ba82a589768","ssdeep":"","tlshash":"62a011a02cb820200302082822b20002028a8020aa802aac8008f8ac2ae83aa002be8e","size":78,"data":"","first_seen":"2025-10-02T03:23:46.332249Z","last_seen":"2025-10-14T06:58:35.530475Z","times_seen":1008,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5804bda3ab472006bfedbe8865a99956","sha1":"cfdf2e45cf72a91b473d1d4f82a0f335e08c6dad","sha256":"7b1fb213a048a655c9d6f162109bfd8ec7a1ff8ead77f2ef8816872356fc4775","sha512":"eb3864a8e83c993654dbc8494d7fbe346d84eda43e97bb323be0e8c0ed4291f4088ce33f841850529704cdca4b6653514098ae98bd0afba5cd07449bb1d8fc81","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000003000000000000000000000","size":2,"data":"","first_seen":"2023-03-14T05:21:05Z","last_seen":"2026-02-03T15:02:47.724872Z","times_seen":3972,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c8600a0cc45fe853cb446a96bb8eae35","sha1":"6f31b5841ffad16885af1979573ca12123f717fa","sha256":"dbebc59f32afca6559883b7bd7bceae99675f33cc576f2b1c9440e63032f5bc8","sha512":"b6f392ccef9c7de189b6b5d807e1864073d8c4110b0dded6ce5c182cd4551b69e4c4c73845c3ecc75a1e88edbd97642d45d07d787b2ba8c1e01456d3275e4b3f","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000000000c0c000c00","size":2,"data":"","first_seen":"2023-03-07T12:07:29Z","last_seen":"2026-04-25T22:35:28.944729Z","times_seen":1767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e795f2b1b495c31028edb86cb4f4e7b5","sha1":"d5d0d2d9e1538e5869ff9828d64664b94d6de653","sha256":"02c0ff09b0683b8853beac78e1dd6a3af9a8e10691130f6e1ff99647756e541f","sha512":"1cba9dc68dc86057efe7d75d45a8e4decc5cc620fe727688d90c1296a4498ab19425aa6de6ed4ab88f8216c266f70e39a30bf849715ad7c174910f4414d406f3","ssdeep":"","tlshash":"6f41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2084,"data":"","first_seen":"2023-10-25T23:30:09Z","last_seen":"2026-05-26T18:19:09.771159Z","times_seen":261352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_ias.vflset/en_US/base.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd9f6a83ae30eb5bf701368e271616cf","sha1":"963ddc8240e99f9bb851948b04533d8a32198537","sha256":"c75a17e3b011f8bcbeacd3b58c9191bb9e37e71a7fdcb50fe0328e34ade0d80a","sha512":"6d9b34f9e772f609250e75a31b7f77bc503472d38148f95c38e5d8950e406e7c5b7ed13a0e4d452fb7fb51ae63292b21c97183e6881b80a3fc7c91be413ab1ce","ssdeep":"24576:cRKwA4Zf1xodTYUHOUwgeOGuYW6RlVtsUwpApQmvpo8iT3qjNUi3:cRxA0fPoiUPwfOGuYW60p6LjKi3","tlshash":"afc53ddcb296b8516363f0b9483f2206f23b64588849871cb16bd9da5cb4c1e913bff5","size":2636935,"data":"","first_seen":"2025-10-09T07:44:53.245896Z","last_seen":"2025-10-09T07:44:53.245896Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9b8b5ffcbbfc21188d823bc169cd10b9","sha1":"01297bccde88f625146c3b2f783279d46175e997","sha256":"9fd34e5ce7687b7970215f7509806641568b6e24cabfda8b060ad8c312349cc6","sha512":"789cb14df3096e199b33585589aaf53663cf895780c69d6f80e0b1b452b19a534e03705e4c7451bc2679630adc154fea0e7be82a2f6560455943289397ec83dc","ssdeep":"","tlshash":"0cb012840464909001410d35079a00c90183143aa0480a7df15ce16007271dd021bc5f","size":95,"data":"","first_seen":"2025-10-02T03:23:46.323043Z","last_seen":"2025-10-14T06:58:35.186834Z","times_seen":996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"16250e7e55747e36e5f1fc08f725ef71","sha1":"dd8feae79756735419b284bf4291b338fef79e85","sha256":"e061428097b79aab3d587dbb523e19f4e58b67346699208c81f8b5a9449ffe6f","sha512":"54120a707e8eb330a6960dd05a942a271f2f244392c1a2058a7440cc10a1f7098b268b58b91248d3e21353d1c30780d380b5aa4be607b3e6c9b60fd565f7fdfa","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000300000c00000c0c000000","size":2,"data":"","first_seen":"2023-03-10T12:27:35Z","last_seen":"2026-02-11T08:00:18.046548Z","times_seen":3544,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ca229ab7853983f811561e73c6d9ea46","sha1":"6ea030e341c8c7f8540e775d8440f01005991993","sha256":"5bcc82d863c8db71e0c04f58255f4209aa635b62bf189a1f5e31c983c6209b80","sha512":"0a64178acb842979264bbe407c3e31a4a90dc3222051609e605adcb8bfd80669e93d0a5dedaac347e99da9910dbcf3c4e0e272b6c37b23c080ffc3fd90dec7c8","ssdeep":"","tlshash":"69e0cdc86b593e36e7976c51e46713023141960349c77b4963a7766898999666203c18","size":310,"data":"","first_seen":"2025-10-01T14:03:15.209765Z","last_seen":"2025-10-14T06:58:35.367528Z","times_seen":987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/js/menu--main.js?t3eiuv","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8de72c8478aa35b1e9881e9e5cbb079d","sha1":"4b94881996d39bf797f22913a1d7bc39f0683c76","sha256":"51f6cee661da954ae04e86f9fb86d17258025679f29fb364e5097fba19b61ba1","sha512":"ff37a2405712968bb3822d11b046d86cbcfabdf035891cd6cd868ee0313354f9f4599b53369e2d17555834d266ec17e9d1021053291a81b51a1b51f7ed322a7a","ssdeep":"","tlshash":"6351f184746249b010bb36ee47e7c07092314657d68dcb00f77e56cd8f446867ee674e","size":2707,"data":"","first_seen":"2025-10-02T10:05:42.451154Z","last_seen":"2025-10-09T07:44:53.165791Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f6cf4b27ca8f081889bf748da25aee94","sha1":"bfef54d9fb379ea3ad3c16d76eaf4c435cc0d12d","sha256":"35ce2da9262e0ca0ff74abd09ad99249bbd34872dd89a2e8437483deedb58b80","sha512":"5a4ca254e3096fb9e9f66bf78c987347d45c6cb2c825508050df993f1e5f9a7a9fbc97d5f6b223acc2c8f9bd5d9ff18b990e0506571b09b71ac6c774000af678","ssdeep":"1536:jqB7KiF6iLiS6eBcvW01eJKx+cUnK66k74GurB:a7KiF6iLiSh01ec4Ln74b","tlshash":"865309cff2d1673089f369f2115b410921bea826dc542c6ebd16e3f46a75a87402bf29","size":60755,"data":"","first_seen":"2025-10-09T07:44:53.250807Z","last_seen":"2025-10-14T06:02:43.144864Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"173a08c5d6adc5c93611a599bcb2c717","sha1":"735a7301e66ae2c3584357f7bf0bf09eefb62df0","sha256":"271e6368679a21c3416e2a0325db33d6bc445d601c72a49914081b5efd0cdf3f","sha512":"cf15a9aa7e406207f3b85c7ab7d6453fd2351616b4dbb2db767ad854f866ae8256045b8cb74948f44d09fedb6c200c56fa2e2ab83d1ab997f5b0068edee7349b","ssdeep":"","tlshash":"b0800000c08a0030c3200c082008c28038802002a8f2002208200000a0032fca0020ca","size":26,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-05-26T18:19:09.794158Z","times_seen":234604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ba8bbeb315889843b03e21c8017f73db","sha1":"53424f737e549e2256529c432ba1a384840dc421","sha256":"2daa318cd8a709340e0f7d2c7e42e6790e8e47e5d2302b62c59c56213da24bd3","sha512":"ab0fe0750db34d40b8cfde03c22dc24328ae883ca04ce80470faab4fad22eb55186bb6d9ec479fb746066905f7ca1e9e33ae96e05822154d39c2b82f23476655","ssdeep":"","tlshash":"c7100000000c0000000000000000000000000000000000003000000000000000000000","size":2,"data":"","first_seen":"2023-04-20T14:26:27Z","last_seen":"2026-02-06T08:00:01.76466Z","times_seen":2759,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"af0c4f633000f4971e8ee3d4ecad419e","sha1":"f445c0f62a2bf9e9876d8b753fe343c1798695f3","sha256":"346c415377afaf385fd2b52b1f2c1301876d29df01379d8b681925b9ea83c909","sha512":"b95fd5b3ec73f43115a07bd46b2141189fe39c50ee21a4326cbf870a3cdbc5f7028928e4f28faf47872215a3315badf3040f318fbbd97fa4c70f90191b64dda0","ssdeep":"1536:9eiPm3eVEg5qlXMCP/ZtIQhSFQ8sjjm9ChK6ThjuACctTV:6FlZ3SFQ8sjSyTBudcVV","tlshash":"47a3c7640868a8729893d547ddb5ff3e9cf806790ac99a6dbcbbc35c01ec6510eaf413","size":105338,"data":"","first_seen":"2025-10-09T07:44:53.254724Z","last_seen":"2025-10-09T07:44:53.254724Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"93ada40da341d3f06c6b5392c2a501c5","sha1":"f71fb785330f1dd6a0baf1a8214a2f4dcfab364e","sha256":"ddc7790c82c5dd42934e830f5d707973d08ced41c905e4d8a27f80a6f4d4db7d","sha512":"cc006346f89c845ad6574b64e0f1dfd98d9b69cf94322147c3f20d82589399974932c97258225286b293ebadfa57db599a111015bee315f13801684116563388","ssdeep":"","tlshash":"c710000000000000000000030000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-04-23T09:43:10Z","last_seen":"2026-05-25T11:42:37.768501Z","times_seen":2387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3b7fe596b8934963875cb02e43016478","sha1":"96751233e0925d35826155e4ad5c17e114bca518","sha256":"940456841f03c58b9c74c1a009327ca3e7d4e592bb3714bd8c2bdf17ebcbb61c","sha512":"e7fd57b99f3d9e83146df1149dcee0909312ca832826f46bb4f274fc16f502eddd8adae879a23f104d1bee92e6a505822938381c5cf7aa478a70bd131ea81c85","ssdeep":"","tlshash":"1170002abc083080032238300c0b88082822002000080202080000c80e3880a0202c08","size":22,"data":"","first_seen":"2025-10-02T03:23:46.508491Z","last_seen":"2025-10-14T06:58:35.080031Z","times_seen":1006,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7b8b965ad4bca0e41ab51de7b31363a1","sha1":"d1854cae891ec7b29161ccaf79a24b00c274bdaa","sha256":"1b16b1df538ba12dc3f97edbb85caa7050d46c148134290feba80f8236c83db9","sha512":"917148ec47923f2e0e3d73142ac4f94ec4c73078865ba6d29f0ea172cd6f4bf34db699af5c33535d3694d4aef91a11f916004d0382f794448a8550623d34c985","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000c00000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T17:02:24.243737Z","times_seen":59390,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i737461746963o616464746f616e79o636f6dz.oszar.com/menu/modules/core.pt5ow5lr.js","fqdn":"i737461746963o616464746f616e79o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e01dd86c6258fd4d6b51eb52d1b7501","sha1":"5c8dbe9385ea894b80bd158f7a68cb80a94742c7","sha256":"948ee9d440769df409a5472736ae6ffa7a9d890f0f18e1edf57e8ecef662c95e","sha512":"d30a321c31592f2f5e53cdfe72dc6b13eccf48f6dcd2826df62489604168dc7d851e8818e0b1bc858aeec74c6f5ed018895b9ff3f82bc3dfc0c343f215436afb","ssdeep":"1536:UfuqAdDGstShi9iVGp1c1g6H2gvUH4JfU8xAaX1rxv6G6DjfPMUEqZb:UfjAuhvU61xlX1rxvV6Dgqb","tlshash":"4f636cdf37466937aa1f30d868efa608a036276e9f080940f5a5d4a411fdecd3067f58","size":72883,"data":"","first_seen":"2025-10-02T10:05:42.411319Z","last_seen":"2025-10-09T07:44:53.133196Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_ias.vflset/en_US/base.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd9f6a83ae30eb5bf701368e271616cf","sha1":"963ddc8240e99f9bb851948b04533d8a32198537","sha256":"c75a17e3b011f8bcbeacd3b58c9191bb9e37e71a7fdcb50fe0328e34ade0d80a","sha512":"6d9b34f9e772f609250e75a31b7f77bc503472d38148f95c38e5d8950e406e7c5b7ed13a0e4d452fb7fb51ae63292b21c97183e6881b80a3fc7c91be413ab1ce","ssdeep":"24576:cRKwA4Zf1xodTYUHOUwgeOGuYW6RlVtsUwpApQmvpo8iT3qjNUi3:cRxA0fPoiUPwfOGuYW60p6LjKi3","tlshash":"afc53ddcb296b8516363f0b9483f2206f23b64588849871cb16bd9da5cb4c1e913bff5","size":2636935,"data":"","first_seen":"2025-10-09T07:44:53.245896Z","last_seen":"2025-10-09T07:44:53.245896Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2294886295980ace6bc8edb87cea4367","sha1":"cbed88164a314c0a7942650afc8c70730ee0039f","sha256":"5e930b1b2b6c65de47679df72b3a7316a54a84f4b0d1e2159f483657fba3be43","sha512":"5bd9ffd796f4333ea69bfe7f74ea89ca84e72dd093149ea5b76d5c94c0588f711b25cd777fc1b8b712d9b5f1551fdc12f8086ce406e74c516643cd562e941df5","ssdeep":"","tlshash":"c7100000000000000000000000000000000000000000000000c0000000000c00000000","size":2,"data":"","first_seen":"2023-05-25T12:03:53Z","last_seen":"2026-05-17T05:20:12.788213Z","times_seen":1852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d5337a7ba417639504c80638852c0a19","sha1":"87c8261cec9ddc2177740dac736b2d3d78bb897f","sha256":"88874e32befa01bddaebe480167e5f653785f944c43584471a811f39a9a6dcf8","sha512":"03cbbf46618e9d3d28d2764f77343a4ddaf189e5dfa7b52f33a5ff54e158c59a2d87cb3fc787ff739a4945fe0e5b47766397c8be0a566f0995470ae331caaf0e","ssdeep":"","tlshash":"c71000000000000c000000300000000000000000000000000003000000000000000000","size":2,"data":"","first_seen":"2023-03-07T12:25:55Z","last_seen":"2026-03-08T22:33:41.148338Z","times_seen":1132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5206560a306a2e085a437fd258eb57ce","sha1":"c9ee5681d3c59f7541c27a38b67edf46259e187b","sha256":"de5a6f78116eca62d7fc5ce159d23ae6b889b365a1739ad2cf36f925a140d0cc","sha512":"40422e2733a73dec2f9aac48e2ab48d3b2fdcdc1e3a88bc7ea855227e62c029246da1dd49dd057bb8a8b796b3b2a6f60d9d8a85de53df597e422b2f68c54cfb6","ssdeep":"","tlshash":"c70000000000000cc00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T12:04:13Z","last_seen":"2026-05-26T17:25:28.696279Z","times_seen":61197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"88cb1cc54c3f37fd47932ab3f18cd858","sha1":"5a1e1b98a069e281ee12902fd7d013716e4d05ec","sha256":"cf80a91ab1fb2088c958016d9efc0c07c44b5ecff32bf9035dad502530887553","sha512":"526a2abc1d31f62b372c1256c145c32f95808046068e486da339e44a06c3e06b56ca096c4cc0c51af7efa8b6bd0e8a2ed7a899b56cfcc218cfafc60413eab30a","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T17:04:31Z","last_seen":"2026-04-21T11:14:46.785239Z","times_seen":1660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/js/js_UzDuFmolz9fZaxUdNseJK6Jp7yITYXNrLvW1gtbinJA.js?scope=footer\u0026delta=4\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyFU9GyozAI_SE1-7Lfk8EELS0GJyG2_ftLtb29td29MxmFcwjhQAIxqkC6Orgb3ZAladNDOHkVW7P7YftjaYKw5F4uLuIAlfUb8JSYErqd_-RZILoXz7iMLuY6A3cqNRxwwaSlVSzaYJl8DwXdw3hHusHSKKXRT5jqyocDaC_qftieacE3siDkcHhySZQGCpZOUrHsKWF2_yLWHWfriB5wMs0MmfS6R2tRsUJZwqnT64wd9FLVLxRRyq_BlBZrg2SfkbfDf93CmOKtGyrCJ9Jd_NpcHyDHHbEN_RUbWXrg9rg_9BtvDwj7RAxXE7jV0lfiiNn6HG7F_ydykJqDVJ6SV-iL__vH1j6eysfSb3PfskxA6XkNPkUU63sP2Q-Uy15ukojdQnju1un4oTKXkBH3hWccTU13E_92Ddb9ZYKsfoCgxRemNar6IHIitN80M0EKNo0PYIMXtUdzeryJu9uMIiOjdWd0o332fgdHuLyCU1PIsqKfZa7zdkeK-4A1t6KLPdaBEil6Ey3Mq5TSPtB2Q5sz9oPkyd3_XSRgGb8ACYWv7g","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"588fe921b0b7023cf894a478afa95294","sha1":"d4270bf626dfe553a5bcc9ca08ef72034f2fff8a","sha256":"725c209f06adb6f3e19068737476e53f6c324de156d838c418414476594efeaf","sha512":"552ecfb1464bb64b13f9c5bfb17bf2b18bfbcb53c87158e5dcee9b80151104c67698750be4d980653ec92974bf2768ea715a4975d606b590f73e2b494efa7fce","ssdeep":"1536:Ecyy4st7C4yBIu+ywV9UEsSZGZI9MkePXotLfsRbet8WWOTkRhz/Y/0w/AKhErm6:6yrt7C4yBX+ywVuKOryW3BR6m","tlshash":"e2c3e607330ca07d41ef6191b587034dbf355ea9a08390a4e424d4b22a65a977aeff7f","size":120865,"data":"","first_seen":"2025-10-02T10:05:42.423923Z","last_seen":"2025-10-09T07:44:53.170476Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_ias.vflset/en_US/remote.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d12333ed9568e64057efd04329012c2","sha1":"bca2c8cae363cca0bb5341df1ca66a8ed1609580","sha256":"98dc2e664f296cac5470274e19ed5b6426623e3920a3d900540e7ab7da53b5f8","sha512":"4ec1ca4f53389fe92fc3b8966e3863bd41256b1365c5d3c06584e087d6de8c6dc55f43691d93597bd1e22e675650dd55acf564664c7219d9a12748a6da81273d","ssdeep":"3072:bfUrbVbsgsFzP6fNuXWKgDC6Tv2tIdgJb3yP2hx4mXjjYlyW7:bfUNbkFL6fNuX7g9Tv2tIdgJb3yP2hxQ","tlshash":"61c3e8acf651b42122b3f4761c3f2009963b54a4a885435c764adcd68cb8d5f923bff9","size":124208,"data":"","first_seen":"2025-10-09T07:44:53.020052Z","last_seen":"2025-10-09T07:44:53.020052Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"803f04d3c33c69674e18633fb9f1b211","sha1":"6206be151624c547c0fc20b934c10fc84f22ad6d","sha256":"c5de7a137566bf3d1ab453f1027ce8f0269249cf7d51a5259440472c850c9485","sha512":"a02857620366b2610420790414234d9f78ed37949a60ba3287edbd2684f98d57fe9201d4c6ab3fee8866b883696bb1bc8b71848d89bb3b22e8bffb9e824ae40f","ssdeep":"","tlshash":"37e020f16c114076a077655238e14d8111edb17c17d45f1c6d7510dc53e184d987d747","size":336,"data":"","first_seen":"2025-10-01T14:03:14.954722Z","last_seen":"2025-10-14T06:58:35.511546Z","times_seen":1004,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3865fb4ed868a6467661b92993778732","sha1":"655e27ae8c0e92daf3679c4e9e9d70de51aa2ea4","sha256":"c6ef9d48bb5efc39b3f0636bfcd98548a4889b73f44b4ac8838c48b1d1d9892c","sha512":"02be7b61b6e1509f737426432b116cf3eb4e1594013cda7bc5820a4bba6fc93fa3ec5f995efec8224be6e0bda3cfaa5b7f39b71f1e62ccf5b48270ea43d64fc0","ssdeep":"","tlshash":"a6d09708a1ce60aa8a1d620722c69c7205e118336c11cc2662c810e1022be4c800b80a","size":244,"data":"","first_seen":"2025-10-02T03:23:46.445119Z","last_seen":"2025-10-14T06:58:35.105216Z","times_seen":1005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4340ec72233543ff73e0fa17ddedaac9","sha1":"2739705318539af0bdd5bb201b2310334337d3fb","sha256":"d7ee2d50a52faf002ce66cd1c03e7b681aec85881270d30c4982d1e65bffb684","sha512":"f0efe50ebe42ed899d98a2bfee2c757920c29d9a77163c39f9d372a9fb562b25c683fe9ebd5e595039f6f8c395a1fe74ef22eba10dab4b7857abbe6dc2783f50","ssdeep":"","tlshash":"19a011382cba20008a322828232a00088a82a008800e2aae022cc8000b3a382280a80a","size":77,"data":"","first_seen":"2025-10-01T14:03:15.039141Z","last_seen":"2025-10-14T06:58:35.623993Z","times_seen":1002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"803f04d3c33c69674e18633fb9f1b211","sha1":"6206be151624c547c0fc20b934c10fc84f22ad6d","sha256":"c5de7a137566bf3d1ab453f1027ce8f0269249cf7d51a5259440472c850c9485","sha512":"a02857620366b2610420790414234d9f78ed37949a60ba3287edbd2684f98d57fe9201d4c6ab3fee8866b883696bb1bc8b71848d89bb3b22e8bffb9e824ae40f","ssdeep":"","tlshash":"37e020f16c114076a077655238e14d8111edb17c17d45f1c6d7510dc53e184d987d747","size":336,"data":"","first_seen":"2025-10-01T14:03:14.954722Z","last_seen":"2025-10-14T06:58:35.511546Z","times_seen":1004,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7ec1cd10e117337fb8db7bfee4253905","sha1":"b91143c71cf072c2f892836958e103cd0c496722","sha256":"1bc147d5d9e1d53ee452a1b459022c329e01b39262e58870d10ad70083567bab","sha512":"1ba238651caa50db21de39d91136eecb8e796ac78891554bbf739e157a4f3013342a6478cb3089c3bf3e36217dce83068acd5692d39ba2858b03028cd76b93f4","ssdeep":"","tlshash":"f3b012339dea08bd46ae01302383009812d71101d4c8120501286288067130120024cb","size":96,"data":"","first_seen":"2025-10-05T08:05:18.595443Z","last_seen":"2025-10-14T06:51:15.893047Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffa5e6def262bf7b6e85569400a99961","sha1":"9ea5e4db41ef9644f6df6f0b878c4e0d587bbdd2","sha256":"8cbeaf7f8072ce13b41105c3197b4ee9b92d07a91d0087fb132226a99517681a","sha512":"1f4c73d670f23716d0fb91bfb584a23da9c8a4363ffc48347147b0a678fe9b83fc44d2a1e851d48b5dfe8786040949bd78d9bc0bffdc270dd1fde52a69b2998d","ssdeep":"48:cUuRSeTEIAkbsjTcnM9/MktYrvdlNBiy0GA+IF2FmRA+OH+fSINafa/bGZA6cnIk:cbZbQjTsYdtYrvLNBi5H9afa8ANIz7Ih","tlshash":"27910decbe40d5df36894757ea2790d4ca5abd1a7adf0b8bcc402ea92554136cbc1e30","size":4415,"data":"","first_seen":"2025-10-02T10:05:42.499924Z","last_seen":"2025-10-09T07:44:53.260819Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i737461746963o616464746f616e79o636f6dz.oszar.com/menu/sm.25.html#type=core\u0026event=load","fqdn":"i737461746963o616464746f616e79o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6b1c7b1d1e9af8c5cd4e4d4e34867cf","sha1":"f473fc014546c3a815f2eb4a021de18f009dc0e1","sha256":"1cbb89944323db675425ccecf84d0ae66a4960335b4ee167ac30ba48e65bbdee","sha512":"6eb02115d0a68296be516912514f0f8930e1f95839b3ee12dae388ac4b2554ed3615fcf3de5e2f00616eb16a5a19c0c2b86c262ed4d7a71003b3b93c7660b280","ssdeep":"","tlshash":"d4c09bcd35465d7195fb57504f1ff908b191325198d11d31495573455b31c179754860","size":148,"data":"","first_seen":"2024-12-27T15:15:37.723631Z","last_seen":"2026-01-10T23:27:53.450524Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bae3f90cb000352645e35fad60da411c","sha1":"00023f94c170125b979cb1914925d06ab1abfbce","sha256":"1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12","sha512":"d83d07979674822b4c966ddcb3bd4feb84830834e1f9fb255774ae237056cc357599e3aab9c6f47242aada2148a65c9ea11c859b1e8f550004535cc363fa02db","ssdeep":"","tlshash":"03800000203008388088000f3032cb8afaa0a22ae2322800c8a88c2cb0e8f80ba28838","size":35,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T17:26:55.525014Z","times_seen":162822,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e1e1d3d40573127e9ee0480caf1283d6","sha1":"06576556d1ad802f247cad11ae748be47b70cd9c","sha256":"8c2574892063f995fdf756bce07f46c1a5193e54cd52837ed91e32008ccf41ac","sha512":"e32af21345e7a932da186a47adb173dd1c6998767b25f8397f3740e87e591c2370be6f2b11c836ea6b4978034fff239309f721e7bf2491b6ba099c347fddc26f","ssdeep":"","tlshash":"c700000000000000c0000030000000000000000000000000030000000000000c000000","size":1,"data":"","first_seen":"2023-03-07T01:15:06Z","last_seen":"2026-05-26T17:22:03.439048Z","times_seen":71035,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d25d7652ef44de9cd4d5934f2849bd09","sha1":"8ef2a08c76f89ce31e25ccabb8bb3c3540545c9b","sha256":"c7882b334eb8d68a866b77bfb561395a8c9284b4ddf6e2c46217d5821791668d","sha512":"664473df3017a36a0db0342a49f78e00828bbe63cab7f5792dc31e9fce9cafe4f764d526eb97aea92d29920b53b7f0b6458ee8b87cfa6ea44265e8a3632b9f6a","ssdeep":"","tlshash":"6e8000382c08302008a3303080cb0c0c2cb230a383000c0302a00ac80eb002b0002808","size":28,"data":"","first_seen":"2025-10-01T14:03:15.228804Z","last_seen":"2025-10-14T06:58:35.527696Z","times_seen":1098,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbd4a66656e13b725d9e2de1b4535db8","sha1":"cc2806bd5c8946c26d26d37603eebb03476c6aaf","sha256":"33c418c108eb899dcbda0699980d1dfebd9624d10420b48244db9ac29449fac8","sha512":"d7e19d91cc68c93025737e3c88d5332980dddf6d77e7fbd381ab1e0ac30044599effc9775ef5b3cc4af93028bfe462b6d1481c1851e48a50806dd084dbc6ae3c","ssdeep":"","tlshash":"17a02223c02ac0030038002000833002e30803208800a00c030a020830e800bffc888a","size":62,"data":"","first_seen":"2023-12-27T12:03:30Z","last_seen":"2026-05-26T05:19:48.145043Z","times_seen":5358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ba8bbeb315889843b03e21c8017f73db","sha1":"53424f737e549e2256529c432ba1a384840dc421","sha256":"2daa318cd8a709340e0f7d2c7e42e6790e8e47e5d2302b62c59c56213da24bd3","sha512":"ab0fe0750db34d40b8cfde03c22dc24328ae883ca04ce80470faab4fad22eb55186bb6d9ec479fb746066905f7ca1e9e33ae96e05822154d39c2b82f23476655","ssdeep":"","tlshash":"c7100000000c0000000000000000000000000000000000003000000000000000000000","size":2,"data":"","first_seen":"2023-04-20T14:26:27Z","last_seen":"2026-02-06T08:00:01.76466Z","times_seen":2759,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33ff1397641a1945df59155fedc15e00","sha1":"85f5f7baa1164e65972383e6682074b7a29f3122","sha256":"284dd11c30b6da49f3ca4bcc20d6e54f1e617dcc48f54bd630b74b88d2b1faa5","sha512":"560c9f7e86b005e341e79faaa001c0324f038ace3efeb62c337860bfa5b46ed8928ace9b74772ce4e08aa234f04417a1cbfaa3df1457d498d55e4636916d95b3","ssdeep":"192:7xLe2/TQGPF61wYPL2Nd2gMWOlkuJdeUja1m8kasi3Gads:7xK2bQ4sF5WOlkuJ3jcm8kasSBds","tlshash":"96221bcfac4876d4e5e53c70950f70cfbb2ece650486386b92451cf6ba10329988be8c","size":10016,"data":"","first_seen":"2025-10-09T07:44:53.171979Z","last_seen":"2025-10-09T09:17:52.291408Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_ias.vflset/en_US/remote.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d12333ed9568e64057efd04329012c2","sha1":"bca2c8cae363cca0bb5341df1ca66a8ed1609580","sha256":"98dc2e664f296cac5470274e19ed5b6426623e3920a3d900540e7ab7da53b5f8","sha512":"4ec1ca4f53389fe92fc3b8966e3863bd41256b1365c5d3c06584e087d6de8c6dc55f43691d93597bd1e22e675650dd55acf564664c7219d9a12748a6da81273d","ssdeep":"3072:bfUrbVbsgsFzP6fNuXWKgDC6Tv2tIdgJb3yP2hx4mXjjYlyW7:bfUNbkFL6fNuX7g9Tv2tIdgJb3yP2hxQ","tlshash":"61c3e8acf651b42122b3f4761c3f2009963b54a4a885435c764adcd68cb8d5f923bff9","size":124208,"data":"","first_seen":"2025-10-09T07:44:53.020052Z","last_seen":"2025-10-09T07:44:53.020052Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"da984e42a5899bbdac496ef0cbadcee2","sha1":"8df74dda184c19df19d4755602108540e071bf38","sha256":"88b3e13a98900e3dfa4b36074ae14aededf166e6f21f2ba668ba5fbec88922a2","sha512":"8630f578cb6dd0ae8d2e8ae8cbb510a982e0e8e043b1a7b56ff77204772a92a27184da4e832d75d868ea1a556e50d2211a3158c9d24938c8159df21558f49e8d","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000000000000000c00","size":2,"data":"","first_seen":"2023-03-12T14:32:33Z","last_seen":"2026-05-23T19:43:07.183267Z","times_seen":1200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cd08d902319dc4298b865c325e108d93","sha1":"e895170e3f608304fa898ec32388302cac44825c","sha256":"852dadad5ceaa5f6061b7a90f567a5187d57ca108d719e1b89a98f33f8443eb1","sha512":"58dc1b80b3e0b4579468f5d297f22e4f4a7bdfd969cbb5fdd3c3068a99aa55818e9c272f615ce3c4e8b763d77bbf41a70fa5feac694a5e518cae57f149c078eb","ssdeep":"","tlshash":"b3e026f9d1bb8c6160ea59e8e2ef61c440861d7255931c9de606e1e803b3eaa028d916","size":342,"data":"","first_seen":"2025-10-02T03:23:46.411752Z","last_seen":"2025-10-14T06:58:35.496595Z","times_seen":993,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"93ada40da341d3f06c6b5392c2a501c5","sha1":"f71fb785330f1dd6a0baf1a8214a2f4dcfab364e","sha256":"ddc7790c82c5dd42934e830f5d707973d08ced41c905e4d8a27f80a6f4d4db7d","sha512":"cc006346f89c845ad6574b64e0f1dfd98d9b69cf94322147c3f20d82589399974932c97258225286b293ebadfa57db599a111015bee315f13801684116563388","ssdeep":"","tlshash":"c710000000000000000000030000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-04-23T09:43:10Z","last_seen":"2026-05-25T11:42:37.768501Z","times_seen":2387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe81353f0c3e106bb59598d92fd49a12","sha1":"cd09955588a1d236a25a76d3f774418a829cb5c4","sha256":"a366197fa3629365ab26195a99befce51c8f8ec90252df02e0b4cb44bd52d020","sha512":"91e97b195ebad1859d88fadc65abbc0fa276dc9677360385b98b783ab0530df5b002a775fbaf9e7d410fd4eae4110ac653c4459c3fbbc125c7e2b93d5082fc8d","ssdeep":"","tlshash":"991135251b715c27806a296232dfb309b8262372583c91dc8a81e365933661bbc3235e","size":1033,"data":"","first_seen":"2023-06-13T01:22:29Z","last_seen":"2026-05-26T18:19:09.790407Z","times_seen":235627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b28574fc34e961d26002f2b75ffaeed1","sha1":"9a12fb879be68e36468fb1c8f658aae59ce36172","sha256":"9684e02d1317f6bac5c1ba92564e76c76b0854a89fd7bc551d2a55311e1e331c","sha512":"e0730658990bb66aa120f125f582c3efa842b86528681c926d7fab1e70ae311fdfb4c78d1e2dce371d4b205d7039f57c41423b504b44980e4179e493d380a858","ssdeep":"","tlshash":"027000282c28b000022230300ccb0808ac22002000080002800000c88f3000a2082808","size":22,"data":"","first_seen":"2025-10-02T03:23:46.428524Z","last_seen":"2025-10-14T06:58:35.46817Z","times_seen":992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9b8b5ffcbbfc21188d823bc169cd10b9","sha1":"01297bccde88f625146c3b2f783279d46175e997","sha256":"9fd34e5ce7687b7970215f7509806641568b6e24cabfda8b060ad8c312349cc6","sha512":"789cb14df3096e199b33585589aaf53663cf895780c69d6f80e0b1b452b19a534e03705e4c7451bc2679630adc154fea0e7be82a2f6560455943289397ec83dc","ssdeep":"","tlshash":"0cb012840464909001410d35079a00c90183143aa0480a7df15ce16007271dd021bc5f","size":95,"data":"","first_seen":"2025-10-02T03:23:46.323043Z","last_seen":"2025-10-14T06:58:35.186834Z","times_seen":996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4207dce866a6c518df85553947c6a63a","sha1":"c711db9d88c2ce2df35ca032eb8c1f8edd64413e","sha256":"01d1c2b7e526b08515902bc29926dabe7f8582d9be9bd3fa5d45e97c33592b6e","sha512":"bf8919d18ad207dd107917c15d59b80f6e62a4cff1f4fe3e40e045a44b06ee2560debf5aa322ba2de360192c69f9ac7611d843f69c247715bfe98fb97009169d","ssdeep":"","tlshash":"7dc08044159ce15ff1123933a357205555d5f484d4267d1d141c2d505f204c51435d58","size":164,"data":"","first_seen":"2025-10-02T03:23:46.27663Z","last_seen":"2025-10-14T06:58:35.384161Z","times_seen":1013,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6b1c7b1d1e9af8c5cd4e4d4e34867cf","sha1":"f473fc014546c3a815f2eb4a021de18f009dc0e1","sha256":"1cbb89944323db675425ccecf84d0ae66a4960335b4ee167ac30ba48e65bbdee","sha512":"6eb02115d0a68296be516912514f0f8930e1f95839b3ee12dae388ac4b2554ed3615fcf3de5e2f00616eb16a5a19c0c2b86c262ed4d7a71003b3b93c7660b280","ssdeep":"","tlshash":"d4c09bcd35465d7195fb57504f1ff908b191325198d11d31495573455b31c179754860","size":148,"data":"","first_seen":"2024-12-27T15:15:37.723631Z","last_seen":"2026-01-10T23:27:53.450524Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5804bda3ab472006bfedbe8865a99956","sha1":"cfdf2e45cf72a91b473d1d4f82a0f335e08c6dad","sha256":"7b1fb213a048a655c9d6f162109bfd8ec7a1ff8ead77f2ef8816872356fc4775","sha512":"eb3864a8e83c993654dbc8494d7fbe346d84eda43e97bb323be0e8c0ed4291f4088ce33f841850529704cdca4b6653514098ae98bd0afba5cd07449bb1d8fc81","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000003000000000000000000000","size":2,"data":"","first_seen":"2023-03-14T05:21:05Z","last_seen":"2026-02-03T15:02:47.724872Z","times_seen":3972,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8fb965e7ead2924508e97e5326bd3b1","sha1":"fae376d0cb54d4433b7bdc9aba04690cd6cb5d27","sha256":"57bb660c2fdf4369ff8e37f99b26963dba87c120b80c443ff3d31e030ab3a0f5","sha512":"c03eb6a1004f9dfcd1f960a6ca70a77932794808f72476b276bb16f02d0a1855fb2d93d07aab7c0c040d4b3c0eb4f861a4c1a9368a27e3a6430e425ff6ed2568","ssdeep":"","tlshash":"8e60000c00000000033000fc0000ccf00300000cc003c0c0000000000f0000c3c00000","size":13,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-05-26T18:19:09.806982Z","times_seen":231364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o676f6f676c65o636f6dz.oszar.com/js/th/CfTnQukLks5bs8x-CaqyPUkLGsL_zVi8KCE037ufnyo.js","fqdn":"i777777o676f6f676c65o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09a3450a24dc078ae03de856372c1b8e","sha1":"237f85dee5c0a7dd5726cd88ae56d90d58c213bc","sha256":"09f4e742e90b92ce5bb3cc7e09aab23d490b1ac2ffcd58bc282134dfbb9f9f2a","sha512":"75478689fd0a17ec781ea26ec98d800620f622299e1a0d3e0e78bffd91c00550c56a1b7dd9fc015230188afcc153139a4cfbac0262970f8d51312d722e3a5e0a","ssdeep":"1536:jpkBjKiF6iLiS6WBcVW01eJKx+cUnK66kh4GurV:ejKiF6iLiS9k1ec4Lnh4j","tlshash":"9b432acfb2d2673089f369e2115b410921bea8265c543c6ebd16e3f46e75a87402ff39","size":58957,"data":"","first_seen":"2025-10-01T14:03:15.205419Z","last_seen":"2025-10-14T06:58:33.913817Z","times_seen":1101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"644872e5dafa7fad68147401c6658d45","sha1":"680512d7d631369e6e7321ef173eb246848ac70b","sha256":"4f240c3fce857e766bc57dc127e931bdd4d17496a8e71c83b56feca4cc9b3c79","sha512":"6f279e7a32f8020a2fb11d1b529722438a52b326ac48921dd37f102d4ca9d1fe86b039e5036fd5aa1c5d2bc41bf90ba4b99c6c2c5b689f0f52573786f0b4b579","ssdeep":"","tlshash":"c710000000000000000000000000000000000000003000000300000000300000000000","size":2,"data":"","first_seen":"2023-03-08T05:58:52Z","last_seen":"2026-03-31T13:29:16.500091Z","times_seen":2919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c8600a0cc45fe853cb446a96bb8eae35","sha1":"6f31b5841ffad16885af1979573ca12123f717fa","sha256":"dbebc59f32afca6559883b7bd7bceae99675f33cc576f2b1c9440e63032f5bc8","sha512":"b6f392ccef9c7de189b6b5d807e1864073d8c4110b0dded6ce5c182cd4551b69e4c4c73845c3ecc75a1e88edbd97642d45d07d787b2ba8c1e01456d3275e4b3f","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000000000c0c000c00","size":2,"data":"","first_seen":"2023-03-07T12:07:29Z","last_seen":"2026-04-25T22:35:28.944729Z","times_seen":1767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e45fbcf6ca3b21f17c5f355728a2fbec","sha1":"de501127da94246b2d3aa947637b49fbc17d5e47","sha256":"a0029ec80695df905545b98a2453cd6376e1fcd26767cf94b02eb6a6f4160a36","sha512":"6177eb74fa39e80de49dde1df783715f70a4283334622cc5c8a966ebc58cccb7c6fbea0766888186c28c92ee0f87eab9f03d013f27fcbc03674913a6a23fe7e8","ssdeep":"","tlshash":"c7100000000000000000000000000000000c000000000000030003000000000c000000","size":2,"data":"","first_seen":"2023-03-07T17:52:57Z","last_seen":"2025-12-08T14:30:47.375545Z","times_seen":1899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"af2b5937448209e714009fe546bdf4da","sha1":"963e2ed6a24aa48d6198a6d087f3efcf0ef44659","sha256":"ab5a863336d71db30ead891e2992e74f6216a235af99345c8d6545032e4223d5","sha512":"8ee4f99a46a393696d6e6fc4afd8a9ed67863fb998c9c99af7c0bf7462d099191aec0d721144d06af474cbed8ee5eb929046d162c1ab5186b3b3611b23939fca","ssdeep":"","tlshash":"f4e06880b4012175e097cfa0d41b624021c0f40995bd2f18a362ff31d4f61d202d7c49","size":354,"data":"","first_seen":"2025-10-01T09:58:29.841467Z","last_seen":"2025-10-14T06:51:16.114639Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ac1839a14c0a34dcd7efca3a01be5a7","sha1":"d6ce94dd7148440de7cd068e4591d734e4f21cc6","sha256":"3dc57c11fecc0d840a2fe8f74634f7e9a156beed84fff89f629a8a33817ad554","sha512":"13ecab2eadbce9c454a6abeead1b128450bf6d76c9c933ae6de857fee1fe2d0e417e4bb139395fee9ab7d03fbe96da9026ccc59fbbeba535b1871c09b9af4f76","ssdeep":"","tlshash":"67a00263c529d5570038567055973116e12867608915e50c035a560975ea42bfed859a","size":62,"data":"","first_seen":"2024-01-04T23:32:41Z","last_seen":"2026-05-26T07:29:10.1388Z","times_seen":5537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b2f5ff47436671b6e533d8dc3614845d","sha1":"54fd1711209fb1c0781092374132c66e79e2241b","sha256":"cd0aa9856147b6c5b4ff2b7dfee5da20aa38253099ef1b4a64aced233c9afe29","sha512":"19f142b018f307bfdf1c7009d15a29417c96d8678d2982eebce4961b2e67eeb118a8ebb1d75b70087c3e65bc793450e3fe4a10002befa2d038e5aed4796937f2","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000c0000000000c000000003","size":1,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-05-26T18:00:20.355795Z","times_seen":46976,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e45fbcf6ca3b21f17c5f355728a2fbec","sha1":"de501127da94246b2d3aa947637b49fbc17d5e47","sha256":"a0029ec80695df905545b98a2453cd6376e1fcd26767cf94b02eb6a6f4160a36","sha512":"6177eb74fa39e80de49dde1df783715f70a4283334622cc5c8a966ebc58cccb7c6fbea0766888186c28c92ee0f87eab9f03d013f27fcbc03674913a6a23fe7e8","ssdeep":"","tlshash":"c7100000000000000000000000000000000c000000000000030003000000000c000000","size":2,"data":"","first_seen":"2023-03-07T17:52:57Z","last_seen":"2025-12-08T14:30:47.375545Z","times_seen":1899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-05-26T18:19:09.748735Z","times_seen":271978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"49b28fa7f96ccc39ffc6232700dd76b1","sha1":"9f8daebe293d3f81a48679d119d864358d8378f4","sha256":"ca1f6dd44589793c12e8f766c91cf0370eaea86e948cfff2d3332539a48a9971","sha512":"5957626faf843028c77c7d6bc0f8c9e11ad015a4af6ad071e72ae0ba501ebb8400b264c40d77301361bb968d3d89bc44ec53a003e766acc14ed7cc5a560545ba","ssdeep":"","tlshash":"bae06880b4012175e097cfa0d41b624021c0f40995bd2f18a322ff31d4f619202d7c49","size":352,"data":"","first_seen":"2025-10-02T03:23:46.419925Z","last_seen":"2025-10-14T06:51:15.798262Z","times_seen":992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d5337a7ba417639504c80638852c0a19","sha1":"87c8261cec9ddc2177740dac736b2d3d78bb897f","sha256":"88874e32befa01bddaebe480167e5f653785f944c43584471a811f39a9a6dcf8","sha512":"03cbbf46618e9d3d28d2764f77343a4ddaf189e5dfa7b52f33a5ff54e158c59a2d87cb3fc787ff739a4945fe0e5b47766397c8be0a566f0995470ae331caaf0e","ssdeep":"","tlshash":"c71000000000000c000000300000000000000000000000000003000000000000000000","size":2,"data":"","first_seen":"2023-03-07T12:25:55Z","last_seen":"2026-03-08T22:33:41.148338Z","times_seen":1132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"57f372af5af8b71731825cdcc665196c","sha1":"771781dddb5782bca612e70179afa1c898888bfa","sha256":"022606c7594ff70eac1b40e6f4049356d838425fdbc4bf12cc9c3cb48c55745f","sha512":"db57240ed1041abd16c4f83d55ef8ae5e4c7418b474f2a5efa1fb0f0566f33c2aac0601b402d62a4f59740c4319dc6b84e9908f2886e7e28a52c80ea872c331e","ssdeep":"","tlshash":"e4c02b4b9310038063af87a12c0306ff800028966f903d0cd743d501c75c18300b7ebf","size":148,"data":"","first_seen":"2025-10-02T03:23:46.494881Z","last_seen":"2025-10-14T06:58:35.066744Z","times_seen":1001,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T16:53:36.485058Z","times_seen":109707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ab43a6fb1c0f2f4cc0f52cc24fc6bb72","sha1":"25cadb1bf8cd6467f4d41ee55c8114336da5c219","sha256":"a75b45df42dcd116c8d5f4a49897e3997a7ecd6899f2bbec6639542ed7905d8a","sha512":"067ba91062b45c81d83e125655eefc1adb8a1dd6f712f08b42794766204a3dea161f8228661059dc2fe3469c8fa30d90538dacbb6616cf413ed21ba82a589768","ssdeep":"","tlshash":"62a011a02cb820200302082822b20002028a8020aa802aac8008f8ac2ae83aa002be8e","size":78,"data":"","first_seen":"2025-10-02T03:23:46.332249Z","last_seen":"2025-10-14T06:58:35.530475Z","times_seen":1008,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T16:53:36.485058Z","times_seen":109707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5206560a306a2e085a437fd258eb57ce","sha1":"c9ee5681d3c59f7541c27a38b67edf46259e187b","sha256":"de5a6f78116eca62d7fc5ce159d23ae6b889b365a1739ad2cf36f925a140d0cc","sha512":"40422e2733a73dec2f9aac48e2ab48d3b2fdcdc1e3a88bc7ea855227e62c029246da1dd49dd057bb8a8b796b3b2a6f60d9d8a85de53df597e422b2f68c54cfb6","ssdeep":"","tlshash":"c70000000000000cc00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T12:04:13Z","last_seen":"2026-05-26T17:25:28.696279Z","times_seen":61197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/modules/contrib/google_tag/js/gtag.js?t3eiuv","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"998dc98ae8d62bb8a0cb6e1722bd4a3b","sha1":"474699e812da7d169dd223eeaa3b26906c5e3e1e","sha256":"65c59cb6e5636b07ac0fa204b0a040fbf0d1ef0ace30af2b1e5c751a78974229","sha512":"5afed0a51a4a1220d3d9c5736c442add514dd9ce31f31c3b5390a8d3c2d9f3ecad5262193cd32edfac0807872a408d7f369474a59691747983c0a3f50e425d64","ssdeep":"","tlshash":"2821c04f1dbd4c33409b2c86437fa614bb3016813446edd0359cde889f16f66d952d9c","size":1272,"data":"","first_seen":"2025-10-02T10:05:42.44807Z","last_seen":"2025-10-09T07:44:53.044369Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f15ecdc090b19e03eaed156c8a178bec","sha1":"dcf479805e174e3d9db706ca7983dd6df1a6a4e2","sha256":"7b26fdf04862c94b0fddf0a28a82a79ec0d49115f8e0f71372847e39ee536891","sha512":"4032a9965b6370094268400f23f902dbe72cad4c27f9f2702e04cd8e7fefb42c30ca74ff3ed6ea4548807081b7c009b8d79505c5fc128aa4b1584f9e4239cf0d","ssdeep":"","tlshash":"30f09e0c0744388ce84a9d9dc5506a709f9c927bbb413451f83e054dbde3beb9870557","size":522,"data":"","first_seen":"2025-10-07T23:24:37.134399Z","last_seen":"2025-10-09T20:36:36.438582Z","times_seen":778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-26T18:21:48.088861Z","times_seen":336413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"16250e7e55747e36e5f1fc08f725ef71","sha1":"dd8feae79756735419b284bf4291b338fef79e85","sha256":"e061428097b79aab3d587dbb523e19f4e58b67346699208c81f8b5a9449ffe6f","sha512":"54120a707e8eb330a6960dd05a942a271f2f244392c1a2058a7440cc10a1f7098b268b58b91248d3e21353d1c30780d380b5aa4be607b3e6c9b60fd565f7fdfa","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000300000c00000c0c000000","size":2,"data":"","first_seen":"2023-03-10T12:27:35Z","last_seen":"2026-02-11T08:00:18.046548Z","times_seen":3544,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e795f2b1b495c31028edb86cb4f4e7b5","sha1":"d5d0d2d9e1538e5869ff9828d64664b94d6de653","sha256":"02c0ff09b0683b8853beac78e1dd6a3af9a8e10691130f6e1ff99647756e541f","sha512":"1cba9dc68dc86057efe7d75d45a8e4decc5cc620fe727688d90c1296a4498ab19425aa6de6ed4ab88f8216c266f70e39a30bf849715ad7c174910f4414d406f3","ssdeep":"","tlshash":"6f41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2084,"data":"","first_seen":"2023-10-25T23:30:09Z","last_seen":"2026-05-26T18:19:09.771159Z","times_seen":261352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"27fc6f1822ab3ad31ea67bd9d20ebf5d","sha1":"2d61967726f7db1dc6f3a4b3740aa169c5173014","sha256":"3f241211bb0a10623a6dfa9181a01f49ac9d884175701ec349d61d62c330f266","sha512":"c65d25ec0594650eef648204efd4104fe68c3190c210acceda6ab025af00132f4a1908ec9c44ab4300a23f592276c72ff7b18c7c0c07c0f0ab2614dd7cabae1c","ssdeep":"1536:/ZiPc3xVEWOcyClv/ZrIZhz7s99BYYbcj0JmjKueWaifaE:cyyU+z7kY9oLZUH","tlshash":"94a3d754086868729893d447deb9ff3e9cf816790bc99a6ebcbb835c01ec6510e9f413","size":103539,"data":"","first_seen":"2025-10-09T07:44:53.272768Z","last_seen":"2025-10-09T07:44:53.272768Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"42b5f901281d9890443ad992968a3041","sha1":"c2dbac5e20e6514e1f94ff973b4f69f44ce7ea8b","sha256":"7b6697d37939e940a1e6057e2e37e25b8144f0eda878fb4c4d85d8d584bb19ac","sha512":"b3b3cbba36c82e843ad88a16376d04a37fd90fea88d1f83c481e4776057b02ba8649e908f0ff7f711848fd9108fc47b48232833749ea50151ad3ccc3d51c072d","ssdeep":"","tlshash":"3f11549f6b92cb7008e85ae55c4ff6b0c471a4076d5e3e8ff84173e0488b01b6015d22","size":1004,"data":"","first_seen":"2025-10-02T03:23:46.31691Z","last_seen":"2025-10-14T06:46:57.905307Z","times_seen":1005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d25d7652ef44de9cd4d5934f2849bd09","sha1":"8ef2a08c76f89ce31e25ccabb8bb3c3540545c9b","sha256":"c7882b334eb8d68a866b77bfb561395a8c9284b4ddf6e2c46217d5821791668d","sha512":"664473df3017a36a0db0342a49f78e00828bbe63cab7f5792dc31e9fce9cafe4f764d526eb97aea92d29920b53b7f0b6458ee8b87cfa6ea44265e8a3632b9f6a","ssdeep":"","tlshash":"6e8000382c08302008a3303080cb0c0c2cb230a383000c0302a00ac80eb002b0002808","size":28,"data":"","first_seen":"2025-10-01T14:03:15.228804Z","last_seen":"2025-10-14T06:58:35.527696Z","times_seen":1098,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"77a0d2aaae7c3137c810e1f16db0ac2d","sha1":"ae3ab5dfa063a7b0ea674cce0be07a5b55bf6d14","sha256":"be3b8d149f0718fa9f49b2dadcd14da67674e86d64a2092034964a9706b3bf26","sha512":"0a716288096baee928e0ebaad8ad1061c0270a249040105f54e2515c30fcb72cafc3401366150361abcd288c2fbf5b2498ef0be912ae94124e8da4c051137d7f","ssdeep":"","tlshash":"f170002a3c083080032230302c0b080828a2003000080202082000c80e3000a3202808","size":22,"data":"","first_seen":"2025-10-02T03:23:46.480999Z","last_seen":"2025-10-14T06:58:35.563562Z","times_seen":1011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9393cb701efd9874f38be79bca77cfb9","sha1":"fde432f9941c92f8d896d7d0e4c28bbf95d1087a","sha256":"f406ea3e85c019f66d52b76a5f6fd2b6f395528eed544759cefad5f0eb6b5137","sha512":"a5264035232492356662d95fb373c9bedeb7d801c40bf6d3d36d25d197d84067eef29101f37626e12fbdd906f4d993fe5eb5c6bf5e621213e4f0a2bfe9e7661a","ssdeep":"","tlshash":"c7100000000c00000000c0000000000000000000003000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-11T15:36:03Z","last_seen":"2026-02-15T03:59:57.235035Z","times_seen":2063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5475511b48cd35b1f04b7aee095faae4","sha1":"371a5be042c219eec80b9e01fee867affd53ebf4","sha256":"b23f5f4041c49fa269dab012f993d6a7b8d70f6b638dafd0f6f7de927f9b5942","sha512":"8b5aa71040cb23ae84dff7cc8b63a2c102243efabd092b2df388ff992787a0b1036cfe15401d9de62e2e85fa4eca06723ec3220ed4ee6df2e6b358ef55807be3","ssdeep":"","tlshash":"78a022c088fcb3f0c0208e20abab000820c2803c000000feac0ecb0ca33abc220038b8","size":77,"data":"","first_seen":"2025-10-02T03:23:46.410071Z","last_seen":"2025-10-14T06:58:35.55647Z","times_seen":1007,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-05-26T18:19:09.762554Z","times_seen":236630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-26T18:21:48.088861Z","times_seen":336413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-05-26T18:19:09.748735Z","times_seen":271978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"36f3af6226e0b5303e19b824e7442272","sha1":"32ad247f77b8a066ef05467ce49a5a63e193c3a3","sha256":"4f9db7f8e5068a3ed09c4bdf2ddd980a290126b497155aba1b4a385622d13144","sha512":"546c1d33718fab99c564b46c7301107c74d01dfcdf52f88350d10718a5ed1d3623f615d953db9f7f9f8471db0eaa91b51d7c7a3dc931e7782afc2ba28b85b603","ssdeep":"","tlshash":"c710000000000000000000000000000300000030000000000000000300000000000000","size":2,"data":"","first_seen":"2023-03-10T12:06:30Z","last_seen":"2026-05-25T10:12:00.269112Z","times_seen":2608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"36f3af6226e0b5303e19b824e7442272","sha1":"32ad247f77b8a066ef05467ce49a5a63e193c3a3","sha256":"4f9db7f8e5068a3ed09c4bdf2ddd980a290126b497155aba1b4a385622d13144","sha512":"546c1d33718fab99c564b46c7301107c74d01dfcdf52f88350d10718a5ed1d3623f615d953db9f7f9f8471db0eaa91b51d7c7a3dc931e7782afc2ba28b85b603","ssdeep":"","tlshash":"c710000000000000000000000000000300000030000000000000000300000000000000","size":2,"data":"","first_seen":"2023-03-10T12:06:30Z","last_seen":"2026-05-25T10:12:00.269112Z","times_seen":2608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4207dce866a6c518df85553947c6a63a","sha1":"c711db9d88c2ce2df35ca032eb8c1f8edd64413e","sha256":"01d1c2b7e526b08515902bc29926dabe7f8582d9be9bd3fa5d45e97c33592b6e","sha512":"bf8919d18ad207dd107917c15d59b80f6e62a4cff1f4fe3e40e045a44b06ee2560debf5aa322ba2de360192c69f9ac7611d843f69c247715bfe98fb97009169d","ssdeep":"","tlshash":"7dc08044159ce15ff1123933a357205555d5f484d4267d1d141c2d505f204c51435d58","size":164,"data":"","first_seen":"2025-10-02T03:23:46.27663Z","last_seen":"2025-10-14T06:58:35.384161Z","times_seen":1013,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_ias.vflset/en_US/embed.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"652f1bf9d51ccc032e720af32da5b8cc","sha1":"8f7d2f8f47b9e35b84c69e7e354f3e961005c3ad","sha256":"08fb33a47e1d9fc813e540d0baa624c34d2f7225ecf8063a425194077c3c17e1","sha512":"836a4854cae1a6f59584ca0710c2e6171b94a1fffd5b07f84a07203f7e8a349c09db6497342bd1f62a7e7c1dd33abe84f796af8600f9f909ead9eebfa5e9c552","ssdeep":"768:V+1oNSYuOQEU+a6oWmMii0q/anDq9MT3DFNf:5oWmMh/aDjj","tlshash":"ece2d64eb7e1e4349265e2ee2c0b1104673b94cc58a0a35c763edde92db4d25b07afb1","size":33150,"data":"","first_seen":"2025-10-09T07:44:53.059014Z","last_seen":"2025-10-09T07:44:53.059014Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"77a0d2aaae7c3137c810e1f16db0ac2d","sha1":"ae3ab5dfa063a7b0ea674cce0be07a5b55bf6d14","sha256":"be3b8d149f0718fa9f49b2dadcd14da67674e86d64a2092034964a9706b3bf26","sha512":"0a716288096baee928e0ebaad8ad1061c0270a249040105f54e2515c30fcb72cafc3401366150361abcd288c2fbf5b2498ef0be912ae94124e8da4c051137d7f","ssdeep":"","tlshash":"f170002a3c083080032230302c0b080828a2003000080202082000c80e3000a3202808","size":22,"data":"","first_seen":"2025-10-02T03:23:46.480999Z","last_seen":"2025-10-14T06:58:35.563562Z","times_seen":1011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"05b8c74cbd96fbf2de4c1a352702fbf4","sha1":"320ad267d8d969f285eda5c184f5455bd29c8c95","sha256":"44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba","sha512":"1ab6ceacde9b312b4f32d7c9f2d54448e82264c30807e4db86ec8e295791c1fb9aafb38985b2054e589c0a0a2830f1a389312fb2912dc2f9c949231967e03545","ssdeep":"","tlshash":"f6400000000000000030000003033300000000000000000000000000300000300000c0","size":6,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T17:26:55.579611Z","times_seen":142002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2a9a6a2a06daa7270e82e6db2a78b896","sha1":"aec41190618af5a1f2d6a4542cfb212cafec84c6","sha256":"ba76f75a11ad9c9f9fe20f1cca025344167d9d4b9b8ed95357b5144f96f0e1c5","sha512":"2982bf261ae60270aeeb5f2ae84ec273723072eaac917d508b703713f1f4a95c8d31b8f95ec4b41f4c3f8e420c8a589fd820c772d36b8853e272ec74f00c1e30","ssdeep":"","tlshash":"f3110ee4b02732207252c9a12cbbce68757570262e383d6d224290f75ff923e9546f0b","size":1009,"data":"","first_seen":"2025-10-01T14:03:15.074899Z","last_seen":"2025-10-14T06:58:35.494345Z","times_seen":1005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8fb59e2df88f4f437d4828e485a1b1de","sha1":"4e09b4f785794e16c0b3c7d7a32c6d0c8a68c7f2","sha256":"6d0987136f041b91e007d4bbc699c2c26d592f08338d2d8dcd4332a0a2ee7225","sha512":"e8fed16378507db5bc14f93857118af8ea49faf45eaf5f15c97875ed2e07d1571c8d814c09d9ca7e17dc7f936359289e05f55c2d0240492a7adc0ea634c4396e","ssdeep":"","tlshash":"81d022f08fb660bae2c424ac53022220cfeaa086c9657982d1a600e06aa000a246b828","size":216,"data":"","first_seen":"2025-10-02T03:23:46.379658Z","last_seen":"2025-10-14T06:58:35.346417Z","times_seen":1011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4340ec72233543ff73e0fa17ddedaac9","sha1":"2739705318539af0bdd5bb201b2310334337d3fb","sha256":"d7ee2d50a52faf002ce66cd1c03e7b681aec85881270d30c4982d1e65bffb684","sha512":"f0efe50ebe42ed899d98a2bfee2c757920c29d9a77163c39f9d372a9fb562b25c683fe9ebd5e595039f6f8c395a1fe74ef22eba10dab4b7857abbe6dc2783f50","ssdeep":"","tlshash":"19a011382cba20008a322828232a00088a82a008800e2aae022cc8000b3a382280a80a","size":77,"data":"","first_seen":"2025-10-01T14:03:15.039141Z","last_seen":"2025-10-14T06:58:35.623993Z","times_seen":1002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/js/js_HlQVDtS98WilbnZS3AwZg-gUhfWgD2ZDl3j7OuMYvZM.js?scope=footer\u0026delta=0\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyFU9GyozAI_SE1-7Lfk8EELS0GJyG2_ftLtb29td29MxmFcwjhQAIxqkC6Orgb3ZAladNDOHkVW7P7YftjaYKw5F4uLuIAlfUb8JSYErqd_-RZILoXz7iMLuY6A3cqNRxwwaSlVSzaYJl8DwXdw3hHusHSKKXRT5jqyocDaC_qftieacE3siDkcHhySZQGCpZOUrHsKWF2_yLWHWfriB5wMs0MmfS6R2tRsUJZwqnT64wd9FLVLxRRyq_BlBZrg2SfkbfDf93CmOKtGyrCJ9Jd_NpcHyDHHbEN_RUbWXrg9rg_9BtvDwj7RAxXE7jV0lfiiNn6HG7F_ydykJqDVJ6SV-iL__vH1j6eysfSb3PfskxA6XkNPkUU63sP2Q-Uy15ukojdQnju1un4oTKXkBH3hWccTU13E_92Ddb9ZYKsfoCgxRemNar6IHIitN80M0EKNo0PYIMXtUdzeryJu9uMIiOjdWd0o332fgdHuLyCU1PIsqKfZa7zdkeK-4A1t6KLPdaBEil6Ey3Mq5TSPtB2Q5sz9oPkyd3_XSRgGb8ACYWv7g","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78ad33906e304e2cb9ef7c01d10c3edc","sha1":"3b431ca191f6c3b06c549b4a0855aa58716a88be","sha256":"fc9476ff3f90a45cec94e407e865eb7dfd0edad96aa7192f57d55bc75acc9ca6","sha512":"72c54da470e87946639421050c49422dbca7cccfcebd6ddf755f973da02844c46b7b2e2de3432fb47febbc1d24489ec5345e517cca1f7d64c0b526e14b0284a1","ssdeep":"3072:vHNwcv9VBQpLl88SMBQ47GKBa3WD4ghhJw9ktMkvZ:vHWK9VC78UBQ47GKQg+OCkvZ","tlshash":"760418ce7345312256eba2b9102f660fb236455da90d8448f16cc8deacbce496277f7c","size":189525,"data":"","first_seen":"2025-10-02T10:05:42.446332Z","last_seen":"2025-10-09T07:44:53.027754Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"051e3b55117dd4e81a4ae19860a2cd26","sha1":"96c2b633735be0ea89a5301e61957b0c1376c398","sha256":"63a41c9d13a510122872993da51cdde1c69ee628fef540d83e8d9d8e61a74bd0","sha512":"20aa8dcee2fb41c0d8db740cc9edacf3d80ce7b84c09779b7ae476ed72ed1964ea64238f11c8b7ddda6ce8ec629a9d9e3ed3b9fc72515316ce0b148ad10bad26","ssdeep":"","tlshash":"c71000000000000000030000000000000000000000000000000000000000000000030c","size":2,"data":"","first_seen":"2023-03-08T21:58:54Z","last_seen":"2026-04-14T20:49:36.591802Z","times_seen":1090,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f9f2d672039ed5d04839b769ad71e1b0","sha1":"9a86054ee3627014bb2f372f939ff22772a90aa5","sha256":"ef099fcece6eeca3777d0d4a6ac606beb557e08dcd95cf93d0d42a0334329c10","sha512":"52923fb4476412cf751131a95f749956c1a4c83641935695522af4434c3c42047820db169481885cb549e9a6a8c5ffbbc6ac49ad08f246612debd54bd3ee68e8","ssdeep":"","tlshash":"c71000000000000000000000000000c0000c0000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T15:11:30Z","last_seen":"2026-05-26T17:22:03.463963Z","times_seen":2177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2294886295980ace6bc8edb87cea4367","sha1":"cbed88164a314c0a7942650afc8c70730ee0039f","sha256":"5e930b1b2b6c65de47679df72b3a7316a54a84f4b0d1e2159f483657fba3be43","sha512":"5bd9ffd796f4333ea69bfe7f74ea89ca84e72dd093149ea5b76d5c94c0588f711b25cd777fc1b8b712d9b5f1551fdc12f8086ce406e74c516643cd562e941df5","ssdeep":"","tlshash":"c7100000000000000000000000000000000000000000000000c0000000000c00000000","size":2,"data":"","first_seen":"2023-05-25T12:03:53Z","last_seen":"2026-05-17T05:20:12.788213Z","times_seen":1852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d20caec3b48a1eef164cb4ca81ba2587","sha1":"d160e0986aca4714714a16f29ec605af90be704d","sha256":"72dfcfb0c470ac255cde83fb8fe38de8a128188e03ea5ba5b2a93adbea1062fa","sha512":"242dccbd15e40f8f78cb6fc54cb9894713b7682afd1305d5230e26f2fda96fd764061713e4954e22457b37f25c328e8342c2bf6b55844610cd0756fd02271aef","ssdeep":"","tlshash":"c700000000000000c00000300300000000000000000000000000000000000000030000","size":1,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-05-26T17:28:29.907732Z","times_seen":75089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-26T18:16:38.466911Z","times_seen":351919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-05-26T18:19:09.762554Z","times_seen":236630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o636c6172697479o6d73z.oszar.com/tag/q4i31mzsxs","fqdn":"i777777o636c6172697479o6d73z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc93485fbcf8b60dfedeff958c38a80e","sha1":"6b6b65715d1430cc743f450bdf5d6309f9515a4c","sha256":"718bf91b16ac2481a39bee428902cfbf98c37a0307cc1eff45b23ccee2fe643b","sha512":"92deb6e015336bd5d70091cd516f7e48351289c489fe2738229b3b56162e6b44163697ae13dae6402aa22d60585df4cdc2621622a7f38af8124776a294290cf4","ssdeep":"","tlshash":"94014435204ea47567bab09433ebdb047877121e11181103e59fc976662cfcb61e388e","size":727,"data":"","first_seen":"2025-10-09T07:44:53.002047Z","last_seen":"2025-10-09T07:44:53.002047Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i737461746963o616464746f616e79o636f6dz.oszar.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"i737461746963o616464746f616e79o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T16:53:36.485058Z","times_seen":109707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o676f6f676c65o636f6dz.oszar.com/js/th/CfTnQukLks5bs8x-CaqyPUkLGsL_zVi8KCE037ufnyo.js","fqdn":"i777777o676f6f676c65o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09a3450a24dc078ae03de856372c1b8e","sha1":"237f85dee5c0a7dd5726cd88ae56d90d58c213bc","sha256":"09f4e742e90b92ce5bb3cc7e09aab23d490b1ac2ffcd58bc282134dfbb9f9f2a","sha512":"75478689fd0a17ec781ea26ec98d800620f622299e1a0d3e0e78bffd91c00550c56a1b7dd9fc015230188afcc153139a4cfbac0262970f8d51312d722e3a5e0a","ssdeep":"1536:jpkBjKiF6iLiS6WBcVW01eJKx+cUnK66kh4GurV:ejKiF6iLiS9k1ec4Lnh4j","tlshash":"9b432acfb2d2673089f369e2115b410921bea8265c543c6ebd16e3f46e75a87402ff39","size":58957,"data":"","first_seen":"2025-10-01T14:03:15.205419Z","last_seen":"2025-10-14T06:58:33.913817Z","times_seen":1101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe81353f0c3e106bb59598d92fd49a12","sha1":"cd09955588a1d236a25a76d3f774418a829cb5c4","sha256":"a366197fa3629365ab26195a99befce51c8f8ec90252df02e0b4cb44bd52d020","sha512":"91e97b195ebad1859d88fadc65abbc0fa276dc9677360385b98b783ab0530df5b002a775fbaf9e7d410fd4eae4110ac653c4459c3fbbc125c7e2b93d5082fc8d","ssdeep":"","tlshash":"991135251b715c27806a296232dfb309b8262372583c91dc8a81e365933661bbc3235e","size":1033,"data":"","first_seen":"2023-06-13T01:22:29Z","last_seen":"2026-05-26T18:19:09.790407Z","times_seen":235627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T16:53:36.485058Z","times_seen":109707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"644872e5dafa7fad68147401c6658d45","sha1":"680512d7d631369e6e7321ef173eb246848ac70b","sha256":"4f240c3fce857e766bc57dc127e931bdd4d17496a8e71c83b56feca4cc9b3c79","sha512":"6f279e7a32f8020a2fb11d1b529722438a52b326ac48921dd37f102d4ca9d1fe86b039e5036fd5aa1c5d2bc41bf90ba4b99c6c2c5b689f0f52573786f0b4b579","ssdeep":"","tlshash":"c710000000000000000000000000000000000000003000000300000000300000000000","size":2,"data":"","first_seen":"2023-03-08T05:58:52Z","last_seen":"2026-03-31T13:29:16.500091Z","times_seen":2919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b0a2014f09a4a7df5af0c3b5ebbc2b8","sha1":"be9aa218252a1cadf9ca03684d5bbc78aada3fa1","sha256":"02375f15f4dfc05001b008f0cefee2f620438ed08787919fb812b268f0565188","sha512":"dc49dfa6314789539ca56c7661797cce01defc0caf688d90d2bbdf5e2a2e03de280bc6d20a16bf12b0ded0049c7651e8dc582e787c0bd07123aa76bcb71733ac","ssdeep":"","tlshash":"7511fca22718473f5420bdabf500f9853ad60f0f88aae4a4d25b3836e14520eb0be809","size":1052,"data":"","first_seen":"2025-10-02T10:05:42.532234Z","last_seen":"2025-10-09T07:44:53.280235Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1d6610702b133a044fbd4fea2b0fa509","sha1":"7f5560bd68bd9756c6617717b88fe959f82aa923","sha256":"3e6cbb6a2deced91a0b08af5dda4499c27b473027842193b8f234cf6f424794e","sha512":"20b82919cbb848f51d55e18bbfb3d3cf1d0bceda9f97a3c25a42756557665455262afcedf39fabc9f8a15cc608632179b8afb20fe5d55661412e12daf253e567","ssdeep":"","tlshash":"b6d0a7407510c53956a4d82414b5dac0688d652356aad91cb71ec20117d3915401eae6","size":220,"data":"","first_seen":"2025-10-02T03:23:46.467732Z","last_seen":"2025-10-14T06:58:35.164192Z","times_seen":995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09b78cd3c9e20a47d09e8378c1f9a4cf","sha1":"70942f1c73670778c995e8a382b532fed15c06a3","sha256":"0ca9c9618fc829fe7b93d1ea21b2adf017c6c53aeb011eddc7bf6e2a36ed15f4","sha512":"97bd345dbd96015e69fcce8e552a649a3286baf79e8de7db65a1338211a2cb6606cb2c51248ee5aba373c9e331af90ab0a2c60f644d9f89aa75ae85a99572284","ssdeep":"","tlshash":"6ea02223c028c023003c002000a33002e00803288800a00c030a020830e802bff8888b","size":62,"data":"","first_seen":"2023-12-10T23:31:56Z","last_seen":"2026-05-26T09:04:10.05742Z","times_seen":5488,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T16:53:36.485058Z","times_seen":109707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e795f2b1b495c31028edb86cb4f4e7b5","sha1":"d5d0d2d9e1538e5869ff9828d64664b94d6de653","sha256":"02c0ff09b0683b8853beac78e1dd6a3af9a8e10691130f6e1ff99647756e541f","sha512":"1cba9dc68dc86057efe7d75d45a8e4decc5cc620fe727688d90c1296a4498ab19425aa6de6ed4ab88f8216c266f70e39a30bf849715ad7c174910f4414d406f3","ssdeep":"","tlshash":"6f41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2084,"data":"","first_seen":"2023-10-25T23:30:09Z","last_seen":"2026-05-26T18:19:09.771159Z","times_seen":261352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"61cedcb2c1ba92bd633a1265a4922b66","sha1":"0c1021d870738332cc72fcea36efa446a6f08056","sha256":"b7acb3af3adac9ab51fd0c4070eac0c25aebe702f901bd0abe1b4e797637a2b8","sha512":"930044d39b63d128ca22e17911a44269d3444ba26be8807316b284f5a8d2760006dfc1710c9aba5ed2ac1d00314ea2d1c786516441c5e853e73301fac2858478","ssdeep":"","tlshash":"0ba0228a0ebe30f883028380083323222300e08088000088c0200020380c0cae0a0f22","size":67,"data":"","first_seen":"2023-05-24T02:48:57Z","last_seen":"2026-05-19T23:06:44.991149Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i737461746963o616464746f616e79o636f6dz.oszar.com/menu/sm.25.html#type=core\u0026event=load","fqdn":"i737461746963o616464746f616e79o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"61cedcb2c1ba92bd633a1265a4922b66","sha1":"0c1021d870738332cc72fcea36efa446a6f08056","sha256":"b7acb3af3adac9ab51fd0c4070eac0c25aebe702f901bd0abe1b4e797637a2b8","sha512":"930044d39b63d128ca22e17911a44269d3444ba26be8807316b284f5a8d2760006dfc1710c9aba5ed2ac1d00314ea2d1c786516441c5e853e73301fac2858478","ssdeep":"","tlshash":"0ba0228a0ebe30f883028380083323222300e08088000088c0200020380c0cae0a0f22","size":67,"data":"","first_seen":"2023-05-24T02:48:57Z","last_seen":"2026-05-19T23:06:44.991149Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"42b5f901281d9890443ad992968a3041","sha1":"c2dbac5e20e6514e1f94ff973b4f69f44ce7ea8b","sha256":"7b6697d37939e940a1e6057e2e37e25b8144f0eda878fb4c4d85d8d584bb19ac","sha512":"b3b3cbba36c82e843ad88a16376d04a37fd90fea88d1f83c481e4776057b02ba8649e908f0ff7f711848fd9108fc47b48232833749ea50151ad3ccc3d51c072d","ssdeep":"","tlshash":"3f11549f6b92cb7008e85ae55c4ff6b0c471a4076d5e3e8ff84173e0488b01b6015d22","size":1004,"data":"","first_seen":"2025-10-02T03:23:46.31691Z","last_seen":"2025-10-14T06:46:57.905307Z","times_seen":1005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_ias.vflset/en_US/remote.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d12333ed9568e64057efd04329012c2","sha1":"bca2c8cae363cca0bb5341df1ca66a8ed1609580","sha256":"98dc2e664f296cac5470274e19ed5b6426623e3920a3d900540e7ab7da53b5f8","sha512":"4ec1ca4f53389fe92fc3b8966e3863bd41256b1365c5d3c06584e087d6de8c6dc55f43691d93597bd1e22e675650dd55acf564664c7219d9a12748a6da81273d","ssdeep":"3072:bfUrbVbsgsFzP6fNuXWKgDC6Tv2tIdgJb3yP2hx4mXjjYlyW7:bfUNbkFL6fNuX7g9Tv2tIdgJb3yP2hxQ","tlshash":"61c3e8acf651b42122b3f4761c3f2009963b54a4a885435c764adcd68cb8d5f923bff9","size":124208,"data":"","first_seen":"2025-10-09T07:44:53.020052Z","last_seen":"2025-10-09T07:44:53.020052Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2294886295980ace6bc8edb87cea4367","sha1":"cbed88164a314c0a7942650afc8c70730ee0039f","sha256":"5e930b1b2b6c65de47679df72b3a7316a54a84f4b0d1e2159f483657fba3be43","sha512":"5bd9ffd796f4333ea69bfe7f74ea89ca84e72dd093149ea5b76d5c94c0588f711b25cd777fc1b8b712d9b5f1551fdc12f8086ce406e74c516643cd562e941df5","ssdeep":"","tlshash":"c7100000000000000000000000000000000000000000000000c0000000000c00000000","size":2,"data":"","first_seen":"2023-05-25T12:03:53Z","last_seen":"2026-05-17T05:20:12.788213Z","times_seen":1852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"77a0d2aaae7c3137c810e1f16db0ac2d","sha1":"ae3ab5dfa063a7b0ea674cce0be07a5b55bf6d14","sha256":"be3b8d149f0718fa9f49b2dadcd14da67674e86d64a2092034964a9706b3bf26","sha512":"0a716288096baee928e0ebaad8ad1061c0270a249040105f54e2515c30fcb72cafc3401366150361abcd288c2fbf5b2498ef0be912ae94124e8da4c051137d7f","ssdeep":"","tlshash":"f170002a3c083080032230302c0b080828a2003000080202082000c80e3000a3202808","size":22,"data":"","first_seen":"2025-10-02T03:23:46.480999Z","last_seen":"2025-10-14T06:58:35.563562Z","times_seen":1011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f186217753c37b9b9f958d906208506e","sha1":"08a914cde05039694ef0194d9ee79ff9a79dde33","sha256":"c4694f2e93d5c4e7d51f9c5deb75e6cc8be5e1114178c6a45b6fc2c566a0aa8c","sha512":"780556c04b2714ff1d7ecedc573260faf169d059871cb3154153f9c00636242d83bd555ad0d723ae7c0b7b6397850577f70d5c5fafd5155d7d27b6663c9bb576","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000c0000000000c000000000","size":1,"data":"","first_seen":"2023-03-07T01:36:03Z","last_seen":"2026-05-26T17:25:28.652888Z","times_seen":67537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cdb2cf872763d721b1ea8385cecd9343","sha1":"23bf5e2e27e97238d413f5ecf90425acd115185d","sha256":"d4563cb3c750021c344e346a3896f58e917f24a4959682ef5586bb11191aa450","sha512":"c9544b608df23b83b07e7926a87140a19ddce3d08ef7bdffcdc65c301755f064932ecec85b6ead842efb983f8012c82aef5b68cb594a734da188c106ca7cc6e8","ssdeep":"","tlshash":"a5d02350752c72f5c44f2c6f0fd7d4b6059650033800453e01af555055f9c44a155c2c","size":230,"data":"","first_seen":"2025-10-02T03:23:46.30168Z","last_seen":"2025-10-14T06:58:35.158102Z","times_seen":1009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-26T18:21:48.088861Z","times_seen":336413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/www-embed-player.vflset/www-embed-player.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f816a71b7812263dfbd90b2f188e4e71","sha1":"a1056b37fc9d357390134cb577f9f2ddc1282b1f","sha256":"5d4c0f23d18b1530178939dc001b492e697e6927a6cea13de4335e6a983036c9","sha512":"b81696abb1aee3e93770c9ac0841ed706f550afa57081c17e312404cd531c7237fb52412df2b61993e9e91f7c3d845be1869794971c6324482256af777d0972a","ssdeep":"6144:NsOOFQm8Yt7RnwK7juuT2PG/i3JJX7vthi9:Txm8Y/KO8HX7vtW","tlshash":"2e843ccdb692706253a3a5b4403f110b713ab8aab80cc8b8f195d5d92e7495d8337f7e","size":392722,"data":"","first_seen":"2025-10-09T07:44:53.072108Z","last_seen":"2025-10-09T07:44:53.072108Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/www-embed-player.vflset/www-embed-player.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f816a71b7812263dfbd90b2f188e4e71","sha1":"a1056b37fc9d357390134cb577f9f2ddc1282b1f","sha256":"5d4c0f23d18b1530178939dc001b492e697e6927a6cea13de4335e6a983036c9","sha512":"b81696abb1aee3e93770c9ac0841ed706f550afa57081c17e312404cd531c7237fb52412df2b61993e9e91f7c3d845be1869794971c6324482256af777d0972a","ssdeep":"6144:NsOOFQm8Yt7RnwK7juuT2PG/i3JJX7vthi9:Txm8Y/KO8HX7vtW","tlshash":"2e843ccdb692706253a3a5b4403f110b713ab8aab80cc8b8f195d5d92e7495d8337f7e","size":392722,"data":"","first_seen":"2025-10-09T07:44:53.072108Z","last_seen":"2025-10-09T07:44:53.072108Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ca229ab7853983f811561e73c6d9ea46","sha1":"6ea030e341c8c7f8540e775d8440f01005991993","sha256":"5bcc82d863c8db71e0c04f58255f4209aa635b62bf189a1f5e31c983c6209b80","sha512":"0a64178acb842979264bbe407c3e31a4a90dc3222051609e605adcb8bfd80669e93d0a5dedaac347e99da9910dbcf3c4e0e272b6c37b23c080ffc3fd90dec7c8","ssdeep":"","tlshash":"69e0cdc86b593e36e7976c51e46713023141960349c77b4963a7766898999666203c18","size":310,"data":"","first_seen":"2025-10-01T14:03:15.209765Z","last_seen":"2025-10-14T06:58:35.367528Z","times_seen":987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-26T18:21:48.088861Z","times_seen":336413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7a45e6fab93673db05bbed92be9e5936","sha1":"2ad917c607e590479eaa2fb6df97beb898f1d061","sha256":"be9c5a4b6d376bc487cf71d26bcf3e2d986965a9a382da0efde8b964d3ad55f2","sha512":"f45f4429c3131bd622c8031ed87a46818f2eddd6e01d4d7d962bfb3e12ea24267425327c7d262706ab6dbab142fce6dcdf7d3d4413a6bf233e9a76cae7ceed7d","ssdeep":"","tlshash":"41a022c088f8b3f0c020ae20abab000820c28c3c000000feec0fcb0ca33abc220038b8","size":77,"data":"","first_seen":"2025-10-02T03:23:46.418292Z","last_seen":"2025-10-14T06:58:35.597595Z","times_seen":1007,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3b7fe596b8934963875cb02e43016478","sha1":"96751233e0925d35826155e4ad5c17e114bca518","sha256":"940456841f03c58b9c74c1a009327ca3e7d4e592bb3714bd8c2bdf17ebcbb61c","sha512":"e7fd57b99f3d9e83146df1149dcee0909312ca832826f46bb4f274fc16f502eddd8adae879a23f104d1bee92e6a505822938381c5cf7aa478a70bd131ea81c85","ssdeep":"","tlshash":"1170002abc083080032238300c0b88082822002000080202080000c80e3880a0202c08","size":22,"data":"","first_seen":"2025-10-02T03:23:46.508491Z","last_seen":"2025-10-14T06:58:35.080031Z","times_seen":1006,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe81353f0c3e106bb59598d92fd49a12","sha1":"cd09955588a1d236a25a76d3f774418a829cb5c4","sha256":"a366197fa3629365ab26195a99befce51c8f8ec90252df02e0b4cb44bd52d020","sha512":"91e97b195ebad1859d88fadc65abbc0fa276dc9677360385b98b783ab0530df5b002a775fbaf9e7d410fd4eae4110ac653c4459c3fbbc125c7e2b93d5082fc8d","ssdeep":"","tlshash":"991135251b715c27806a296232dfb309b8262372583c91dc8a81e365933661bbc3235e","size":1033,"data":"","first_seen":"2023-06-13T01:22:29Z","last_seen":"2026-05-26T18:19:09.790407Z","times_seen":235627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d944ab9c54c4f2c49952ef88e746c7c","sha1":"f70ec05c4f3313f442307c65277b8be76183d52a","sha256":"5372f64edc4aad55ab1b8b281df9d3e8b422d29ee35c9e79e57c5861185109fc","sha512":"62ad0369f394baf731a99c12b611b9b51fe3fe1fea1f15b7ae6353c83a3442f1586371818f38ffa138a844c21a10794a286ccdc1827fb25058ed2284571293b9","ssdeep":"","tlshash":"9ea00273c629c657403865a057973116e12857608816a00c435a569d75e941bfe9859a","size":62,"data":"","first_seen":"2023-12-21T04:50:35Z","last_seen":"2026-05-26T15:46:04.188662Z","times_seen":4897,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"83878c91171338902e0fe0fb97a8c47a","sha1":"516b9783fca517eecbd1d064da2d165310b19759","sha256":"148de9c5a7a44d19e56cd9ae1a554bf67847afb0c58f6e12fa29ac7ddfca9940","sha512":"929872838cb9cfe6578e11f0a323438aee5ae7f61d41412d62db72b25dac52019de2d6a355eb2d033336fb70e73f0ec0afeca3ef36dd8a90d83f998fee23b78d","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000c00","size":1,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2026-05-26T17:22:03.484605Z","times_seen":72041,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"805d3686a209b4a66a96a215692258de","sha1":"45c94be1c8acc8fcd09ef719d25aa16ff587dbc6","sha256":"dcd1ab1d0f768819a6f0d187638775799862cc13243a90c9b54b7bc050c37e87","sha512":"46229de5638277e0ea8bc5ef919a03f648c48039f0e393a08b55ca2bb232a9695dd4578b9be9727c8d2b7b133fbf2235d35a9c5c19f66297945913bdd8c2cbc1","ssdeep":"","tlshash":"31d0a7c074a6ea3d8563c73a000711814d65c974e91d8cfaaa22f75ed43179b1dfb7c6","size":222,"data":"","first_seen":"2025-10-01T14:03:14.970001Z","last_seen":"2025-10-14T06:58:35.432516Z","times_seen":1011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b28574fc34e961d26002f2b75ffaeed1","sha1":"9a12fb879be68e36468fb1c8f658aae59ce36172","sha256":"9684e02d1317f6bac5c1ba92564e76c76b0854a89fd7bc551d2a55311e1e331c","sha512":"e0730658990bb66aa120f125f582c3efa842b86528681c926d7fab1e70ae311fdfb4c78d1e2dce371d4b205d7039f57c41423b504b44980e4179e493d380a858","ssdeep":"","tlshash":"027000282c28b000022230300ccb0808ac22002000080002800000c88f3000a2082808","size":22,"data":"","first_seen":"2025-10-02T03:23:46.428524Z","last_seen":"2025-10-14T06:58:35.46817Z","times_seen":992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e8b43f5f43cf93d1a780029e3f94d5d3","sha1":"191feea0ee2fc282f583f7e40fd0cf9f13c9ac73","sha256":"5348c9bd212bdec411d8400ba5f33f0b946df706bd0cc69a966a98d82f6ca918","sha512":"7bebed9189a80640e1c17d2674334999f66d0daefd5cbf3ebee457e11375268d35abf167c4203479b5385501550ec60c7f2e8d24e59545cdd27ec7ef08484cb3","ssdeep":"","tlshash":"479002c4306bb6009a16e0950f1f005551793ca114041d1c6902544134259154026a18","size":50,"data":"","first_seen":"2025-10-02T03:23:46.338415Z","last_seen":"2025-10-14T06:58:35.361786Z","times_seen":986,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"42b5f901281d9890443ad992968a3041","sha1":"c2dbac5e20e6514e1f94ff973b4f69f44ce7ea8b","sha256":"7b6697d37939e940a1e6057e2e37e25b8144f0eda878fb4c4d85d8d584bb19ac","sha512":"b3b3cbba36c82e843ad88a16376d04a37fd90fea88d1f83c481e4776057b02ba8649e908f0ff7f711848fd9108fc47b48232833749ea50151ad3ccc3d51c072d","ssdeep":"","tlshash":"3f11549f6b92cb7008e85ae55c4ff6b0c471a4076d5e3e8ff84173e0488b01b6015d22","size":1004,"data":"","first_seen":"2025-10-02T03:23:46.31691Z","last_seen":"2025-10-14T06:46:57.905307Z","times_seen":1005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1d6610702b133a044fbd4fea2b0fa509","sha1":"7f5560bd68bd9756c6617717b88fe959f82aa923","sha256":"3e6cbb6a2deced91a0b08af5dda4499c27b473027842193b8f234cf6f424794e","sha512":"20b82919cbb848f51d55e18bbfb3d3cf1d0bceda9f97a3c25a42756557665455262afcedf39fabc9f8a15cc608632179b8afb20fe5d55661412e12daf253e567","ssdeep":"","tlshash":"b6d0a7407510c53956a4d82414b5dac0688d652356aad91cb71ec20117d3915401eae6","size":220,"data":"","first_seen":"2025-10-02T03:23:46.467732Z","last_seen":"2025-10-14T06:58:35.164192Z","times_seen":995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_ias.vflset/en_US/embed.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"652f1bf9d51ccc032e720af32da5b8cc","sha1":"8f7d2f8f47b9e35b84c69e7e354f3e961005c3ad","sha256":"08fb33a47e1d9fc813e540d0baa624c34d2f7225ecf8063a425194077c3c17e1","sha512":"836a4854cae1a6f59584ca0710c2e6171b94a1fffd5b07f84a07203f7e8a349c09db6497342bd1f62a7e7c1dd33abe84f796af8600f9f909ead9eebfa5e9c552","ssdeep":"768:V+1oNSYuOQEU+a6oWmMii0q/anDq9MT3DFNf:5oWmMh/aDjj","tlshash":"ece2d64eb7e1e4349265e2ee2c0b1104673b94cc58a0a35c763edde92db4d25b07afb1","size":33150,"data":"","first_seen":"2025-10-09T07:44:53.059014Z","last_seen":"2025-10-09T07:44:53.059014Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f186217753c37b9b9f958d906208506e","sha1":"08a914cde05039694ef0194d9ee79ff9a79dde33","sha256":"c4694f2e93d5c4e7d51f9c5deb75e6cc8be5e1114178c6a45b6fc2c566a0aa8c","sha512":"780556c04b2714ff1d7ecedc573260faf169d059871cb3154153f9c00636242d83bd555ad0d723ae7c0b7b6397850577f70d5c5fafd5155d7d27b6663c9bb576","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000c0000000000c000000000","size":1,"data":"","first_seen":"2023-03-07T01:36:03Z","last_seen":"2026-05-26T17:25:28.652888Z","times_seen":67537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"88cb1cc54c3f37fd47932ab3f18cd858","sha1":"5a1e1b98a069e281ee12902fd7d013716e4d05ec","sha256":"cf80a91ab1fb2088c958016d9efc0c07c44b5ecff32bf9035dad502530887553","sha512":"526a2abc1d31f62b372c1256c145c32f95808046068e486da339e44a06c3e06b56ca096c4cc0c51af7efa8b6bd0e8a2ed7a899b56cfcc218cfafc60413eab30a","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T17:04:31Z","last_seen":"2026-04-21T11:14:46.785239Z","times_seen":1660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e45fbcf6ca3b21f17c5f355728a2fbec","sha1":"de501127da94246b2d3aa947637b49fbc17d5e47","sha256":"a0029ec80695df905545b98a2453cd6376e1fcd26767cf94b02eb6a6f4160a36","sha512":"6177eb74fa39e80de49dde1df783715f70a4283334622cc5c8a966ebc58cccb7c6fbea0766888186c28c92ee0f87eab9f03d013f27fcbc03674913a6a23fe7e8","ssdeep":"","tlshash":"c7100000000000000000000000000000000c000000000000030003000000000c000000","size":2,"data":"","first_seen":"2023-03-07T17:52:57Z","last_seen":"2025-12-08T14:30:47.375545Z","times_seen":1899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-26T18:21:48.088861Z","times_seen":336413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T16:53:36.485058Z","times_seen":109707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-05-26T18:19:09.748735Z","times_seen":271978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6b1c7b1d1e9af8c5cd4e4d4e34867cf","sha1":"f473fc014546c3a815f2eb4a021de18f009dc0e1","sha256":"1cbb89944323db675425ccecf84d0ae66a4960335b4ee167ac30ba48e65bbdee","sha512":"6eb02115d0a68296be516912514f0f8930e1f95839b3ee12dae388ac4b2554ed3615fcf3de5e2f00616eb16a5a19c0c2b86c262ed4d7a71003b3b93c7660b280","ssdeep":"","tlshash":"d4c09bcd35465d7195fb57504f1ff908b191325198d11d31495573455b31c179754860","size":148,"data":"","first_seen":"2024-12-27T15:15:37.723631Z","last_seen":"2026-01-10T23:27:53.450524Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"88cb1cc54c3f37fd47932ab3f18cd858","sha1":"5a1e1b98a069e281ee12902fd7d013716e4d05ec","sha256":"cf80a91ab1fb2088c958016d9efc0c07c44b5ecff32bf9035dad502530887553","sha512":"526a2abc1d31f62b372c1256c145c32f95808046068e486da339e44a06c3e06b56ca096c4cc0c51af7efa8b6bd0e8a2ed7a899b56cfcc218cfafc60413eab30a","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T17:04:31Z","last_seen":"2026-04-21T11:14:46.785239Z","times_seen":1660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"57f372af5af8b71731825cdcc665196c","sha1":"771781dddb5782bca612e70179afa1c898888bfa","sha256":"022606c7594ff70eac1b40e6f4049356d838425fdbc4bf12cc9c3cb48c55745f","sha512":"db57240ed1041abd16c4f83d55ef8ae5e4c7418b474f2a5efa1fb0f0566f33c2aac0601b402d62a4f59740c4319dc6b84e9908f2886e7e28a52c80ea872c331e","ssdeep":"","tlshash":"e4c02b4b9310038063af87a12c0306ff800028966f903d0cd743d501c75c18300b7ebf","size":148,"data":"","first_seen":"2025-10-02T03:23:46.494881Z","last_seen":"2025-10-14T06:58:35.066744Z","times_seen":1001,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bc5bc98ee4146d8ecc0a8f92936e873e","sha1":"c77266c5313eeddd6c22b6d4ae3c2df118840f6a","sha256":"7d76fd022f0ac9fc36134764159944d6076f369009f707dd37379c80d8fbbefb","sha512":"aba2f5de3d50cac0d2ea813e97856eaa3defb4eafc632a227f47f87e290bc7f243564f2f36dd4a5049c217cb14e0bdf6cb50c3af8e927e444623c0bedc8b18e4","ssdeep":"","tlshash":"67e02640b90515b6f4a78f61d06b720022d0b02a86be6f2c6227ff36d8f528202ebcc1","size":327,"data":"","first_seen":"2025-10-02T03:23:46.344576Z","last_seen":"2025-10-14T06:58:35.295815Z","times_seen":987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"71d895c6f3dea1912301b7d20743ef50","sha1":"6bda34d11e1f65c3eb99e08174f68ff786df3d36","sha256":"32e983a3edc1b73e7b0c2f6fc308a17b4833276b6469b89f71c1a75b4929db55","sha512":"e9bc6b189f778bdc4fd5aa208f724b6362f17343d912a9f9300bd67e44a37313a3f457ae50fa154bdca4c5e9f6ffecf42afca81012f7f9bdf5a94a745d34ac75","ssdeep":"","tlshash":"41b0122c7768d07982dd72451edb04b1ccf22ea1045c2408ca1310020b70fc200ddd30","size":106,"data":"","first_seen":"2025-10-01T14:03:15.134455Z","last_seen":"2025-10-14T06:58:35.546856Z","times_seen":1091,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f7948cfaf49af1236459567275bec384","sha1":"4cab7fb3ac7b48becdd85d27f4c1b7d632c95c42","sha256":"cc0d0941576ec0923be8ec8896beb10c7bb75cef78b2053f9baf9c25b9c6ef67","sha512":"0df6a371af99c49e08fbafed3807e00a12e154738e17e6cc19cf080de53455b32ba461f4779d16c56e7f81f74e57664187a3e16879b9de7b52191783823c0a27","ssdeep":"","tlshash":"82e02696b59640237616219aa1031c9c8b913e739828b89f824115604620fc1c59daeb","size":326,"data":"","first_seen":"2025-10-02T03:23:46.235627Z","last_seen":"2025-10-14T06:58:35.422164Z","times_seen":790,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbc81340f52dcc5e5c19d4dab1e2abba","sha1":"8bad759c99aca384c84440a3f2bc1f42d1e680f5","sha256":"85eb00ac943e564215df6b0efb3c15e010586ad5d11e9985fa8bee36d2bcd1ba","sha512":"11a3f9d6d23a557c947ae89dbd1a482d8e47637987bb17bf01b1a5bc8735651902bc3c3f793091e149826fb13f869769d29a4e8729e549c5a291ee0c49a4fd27","ssdeep":"","tlshash":"08d023991c768830559c024610b7f398257520507b136600c1cedc2f5e21dd348f155c","size":217,"data":"","first_seen":"2025-10-09T07:44:53.189946Z","last_seen":"2025-10-09T07:44:53.189946Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_es6.vflset/en_US/embed.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a0a848dd0674ec989a10862dfd83c28","sha1":"6e54eda70e06787854c1cae8aee9758a4468a648","sha256":"73df5a383b620cfb35fae1e2daec377775ff67125e230f1540f259fa43408646","sha512":"87efa6e275e9f6638f9b4d83dbfb2e8b46abf17e749108a480286e83f931cd544563077adc512794d9fd5f6980b0ab471f86280477b15cee7aadc5dfcd2e5f5f","ssdeep":"768:++1CTu5Kx9mYEUrQovGe046jbXBg7JlH43MFGF+H0Jv2fDm:JoO4eBXXf","tlshash":"17e2e74a73d1a43586a4d1ef6c071204ab1a94cc3860e36c7b3eddea6c75e16707af70","size":31772,"data":"","first_seen":"2025-10-09T07:44:53.063458Z","last_seen":"2025-10-09T07:44:53.063458Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"de46e4e39de08bc4f3f5b2348c23b656","sha1":"f29539b95968ef52c430ec4c82b88de59a9637ff","sha256":"4f98bf47b7396d3f026c5984325f20d5eb2afa2ee96a73da80515c2071181cb7","sha512":"f5546e234eb304cc2057a6f2768c1b817c31e8a0b1d0bc8b41ef151d0cd1b431fcaf79ee6a132cec97328010b98efa2cedddb20ab6dab6204308bea84cd511a1","ssdeep":"","tlshash":"4db0124456a801a04610ec37035f60409082a802150028de955cfd4f87237a7540786a","size":93,"data":"","first_seen":"2025-10-01T14:03:15.213894Z","last_seen":"2025-10-14T06:58:35.095366Z","times_seen":1100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c8600a0cc45fe853cb446a96bb8eae35","sha1":"6f31b5841ffad16885af1979573ca12123f717fa","sha256":"dbebc59f32afca6559883b7bd7bceae99675f33cc576f2b1c9440e63032f5bc8","sha512":"b6f392ccef9c7de189b6b5d807e1864073d8c4110b0dded6ce5c182cd4551b69e4c4c73845c3ecc75a1e88edbd97642d45d07d787b2ba8c1e01456d3275e4b3f","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000000000c0c000c00","size":2,"data":"","first_seen":"2023-03-07T12:07:29Z","last_seen":"2026-04-25T22:35:28.944729Z","times_seen":1767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"253b05314eff96742aa3d67d4d90a825","sha1":"21d0a2c1902dd04f79166b8e42ecadf8c883c07c","sha256":"410fe74107ee46619023c5c3436599d85dcfd6f1408c71ea2ad99a3826162a14","sha512":"537927f4b47a8010d4b50497a4b9fca77d8cc178f1a03a131c2be989b718ac516b9218b450bd8a1d5fd6996bb52019c0e40fa93dc967a25a007e3a51f2eb1f93","ssdeep":"","tlshash":"2ee0ebaa30c164a38a7d82f8f37b470c346121282848dd22f98f849826b4df620da8cc","size":305,"data":"","first_seen":"2025-10-02T10:05:42.579341Z","last_seen":"2025-10-09T07:44:53.286868Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8fb965e7ead2924508e97e5326bd3b1","sha1":"fae376d0cb54d4433b7bdc9aba04690cd6cb5d27","sha256":"57bb660c2fdf4369ff8e37f99b26963dba87c120b80c443ff3d31e030ab3a0f5","sha512":"c03eb6a1004f9dfcd1f960a6ca70a77932794808f72476b276bb16f02d0a1855fb2d93d07aab7c0c040d4b3c0eb4f861a4c1a9368a27e3a6430e425ff6ed2568","ssdeep":"","tlshash":"8e60000c00000000033000fc0000ccf00300000cc003c0c0000000000f0000c3c00000","size":13,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-05-26T18:19:09.806982Z","times_seen":231364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"de46e4e39de08bc4f3f5b2348c23b656","sha1":"f29539b95968ef52c430ec4c82b88de59a9637ff","sha256":"4f98bf47b7396d3f026c5984325f20d5eb2afa2ee96a73da80515c2071181cb7","sha512":"f5546e234eb304cc2057a6f2768c1b817c31e8a0b1d0bc8b41ef151d0cd1b431fcaf79ee6a132cec97328010b98efa2cedddb20ab6dab6204308bea84cd511a1","ssdeep":"","tlshash":"4db0124456a801a04610ec37035f60409082a802150028de955cfd4f87237a7540786a","size":93,"data":"","first_seen":"2025-10-01T14:03:15.213894Z","last_seen":"2025-10-14T06:58:35.095366Z","times_seen":1100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b2f5ff47436671b6e533d8dc3614845d","sha1":"54fd1711209fb1c0781092374132c66e79e2241b","sha256":"cd0aa9856147b6c5b4ff2b7dfee5da20aa38253099ef1b4a64aced233c9afe29","sha512":"19f142b018f307bfdf1c7009d15a29417c96d8678d2982eebce4961b2e67eeb118a8ebb1d75b70087c3e65bc793450e3fe4a10002befa2d038e5aed4796937f2","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000c0000000000c000000003","size":1,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-05-26T18:00:20.355795Z","times_seen":46976,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e8b43f5f43cf93d1a780029e3f94d5d3","sha1":"191feea0ee2fc282f583f7e40fd0cf9f13c9ac73","sha256":"5348c9bd212bdec411d8400ba5f33f0b946df706bd0cc69a966a98d82f6ca918","sha512":"7bebed9189a80640e1c17d2674334999f66d0daefd5cbf3ebee457e11375268d35abf167c4203479b5385501550ec60c7f2e8d24e59545cdd27ec7ef08484cb3","ssdeep":"","tlshash":"479002c4306bb6009a16e0950f1f005551793ca114041d1c6902544134259154026a18","size":50,"data":"","first_seen":"2025-10-02T03:23:46.338415Z","last_seen":"2025-10-14T06:58:35.361786Z","times_seen":986,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"644872e5dafa7fad68147401c6658d45","sha1":"680512d7d631369e6e7321ef173eb246848ac70b","sha256":"4f240c3fce857e766bc57dc127e931bdd4d17496a8e71c83b56feca4cc9b3c79","sha512":"6f279e7a32f8020a2fb11d1b529722438a52b326ac48921dd37f102d4ca9d1fe86b039e5036fd5aa1c5d2bc41bf90ba4b99c6c2c5b689f0f52573786f0b4b579","ssdeep":"","tlshash":"c710000000000000000000000000000000000000003000000300000000300000000000","size":2,"data":"","first_seen":"2023-03-08T05:58:52Z","last_seen":"2026-03-31T13:29:16.500091Z","times_seen":2919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f9f2d672039ed5d04839b769ad71e1b0","sha1":"9a86054ee3627014bb2f372f939ff22772a90aa5","sha256":"ef099fcece6eeca3777d0d4a6ac606beb557e08dcd95cf93d0d42a0334329c10","sha512":"52923fb4476412cf751131a95f749956c1a4c83641935695522af4434c3c42047820db169481885cb549e9a6a8c5ffbbc6ac49ad08f246612debd54bd3ee68e8","ssdeep":"","tlshash":"c71000000000000000000000000000c0000c0000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T15:11:30Z","last_seen":"2026-05-26T17:22:03.463963Z","times_seen":2177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d25d7652ef44de9cd4d5934f2849bd09","sha1":"8ef2a08c76f89ce31e25ccabb8bb3c3540545c9b","sha256":"c7882b334eb8d68a866b77bfb561395a8c9284b4ddf6e2c46217d5821791668d","sha512":"664473df3017a36a0db0342a49f78e00828bbe63cab7f5792dc31e9fce9cafe4f764d526eb97aea92d29920b53b7f0b6458ee8b87cfa6ea44265e8a3632b9f6a","ssdeep":"","tlshash":"6e8000382c08302008a3303080cb0c0c2cb230a383000c0302a00ac80eb002b0002808","size":28,"data":"","first_seen":"2025-10-01T14:03:15.228804Z","last_seen":"2025-10-14T06:58:35.527696Z","times_seen":1098,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b28574fc34e961d26002f2b75ffaeed1","sha1":"9a12fb879be68e36468fb1c8f658aae59ce36172","sha256":"9684e02d1317f6bac5c1ba92564e76c76b0854a89fd7bc551d2a55311e1e331c","sha512":"e0730658990bb66aa120f125f582c3efa842b86528681c926d7fab1e70ae311fdfb4c78d1e2dce371d4b205d7039f57c41423b504b44980e4179e493d380a858","ssdeep":"","tlshash":"027000282c28b000022230300ccb0808ac22002000080002800000c88f3000a2082808","size":22,"data":"","first_seen":"2025-10-02T03:23:46.428524Z","last_seen":"2025-10-14T06:58:35.46817Z","times_seen":992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T18:19:09.77222Z","times_seen":314560,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1d4bc60d8a888026ee42e0af3524454c","sha1":"9955fcad7de76bcc33db9a8deafba790afc6e2c4","sha256":"a2f5f987f145fcaca995f5a7e48576561a14da2c8c8a47d1070c297fa3934103","sha512":"8a8f07ac8d17531bd272f35b5eabdca1c04c0d6da1efccf842e21b24959cbebcaa72a0b96ea8f64b785b75d4773861a3820e3541d83d9d2c1e5f75199a5353be","ssdeep":"","tlshash":"32b0120806d410f024013e2403ba0408035b343ce18506ad900ca148279b74806c2417","size":92,"data":"","first_seen":"2025-10-05T09:35:29.427413Z","last_seen":"2025-10-14T06:51:15.751796Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"57f372af5af8b71731825cdcc665196c","sha1":"771781dddb5782bca612e70179afa1c898888bfa","sha256":"022606c7594ff70eac1b40e6f4049356d838425fdbc4bf12cc9c3cb48c55745f","sha512":"db57240ed1041abd16c4f83d55ef8ae5e4c7418b474f2a5efa1fb0f0566f33c2aac0601b402d62a4f59740c4319dc6b84e9908f2886e7e28a52c80ea872c331e","ssdeep":"","tlshash":"e4c02b4b9310038063af87a12c0306ff800028966f903d0cd743d501c75c18300b7ebf","size":148,"data":"","first_seen":"2025-10-02T03:23:46.494881Z","last_seen":"2025-10-14T06:58:35.066744Z","times_seen":1001,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"79affe94efa21de53dbbfb543ffad966","sha1":"58978b20f7a02d6be14dabed4fbd69e55ea2c7a7","sha256":"a73c7f0e45469dfc274f83a81a8e5673c556b642d29d4ad66b9ea1ef77528e65","sha512":"276fc0838fb9a1aeb96af36eba77b958faa457d318395b1239eb48c369bddcb15a4ed6330769957a6852b19d2c8b2ef61fec1acaec58c6cb44bc80e36fdcb104","ssdeep":"","tlshash":"4a8000382c08302208a23030880b0c082c3230a300002c0302c30acc0e3000b002280a","size":28,"data":"","first_seen":"2025-10-01T14:03:14.977767Z","last_seen":"2025-10-14T06:58:35.450013Z","times_seen":1104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"50dcba359f057b580fc6a0ddcc04ff73","sha1":"1b75c532bb23269e7f3a347f36905b0dfe85852d","sha256":"ae8cb854f50fcd6155ed041b0d102dd593448f9ae6f6cc76209fef44b0b1c58a","sha512":"c9bac114e6ee252fb49bdb739b72fa00c5fc773be72924f58c4ee981f7503a1750abe3967bcda1aa65627625d8236a828b7bffde36d33b3387ba5c45aaf96c3c","ssdeep":"","tlshash":"23a024c044f4f7f0c0104d105757000410c1403c000010fd5c0dc74c53357c11403474","size":77,"data":"","first_seen":"2025-10-02T03:23:46.292311Z","last_seen":"2025-10-14T06:58:35.595134Z","times_seen":1009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i737461746963o616464746f616e79o636f6dz.oszar.com/menu/sm.25.html#type=core\u0026event=load","fqdn":"i737461746963o616464746f616e79o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"107e713ee1be819b72679a9b20d1b704","sha1":"1d4a8f1f9af8ae391110851b0c5df66d50a1d8dd","sha256":"8eb57361472f7fa5e3b2def7d28f9a03330413fd300a2223ee2ca3291782a41f","sha512":"503b1a4d5d8ff0a9b6caf23041156bf016983c5243d3c129aa6da4a26b947dc73b4ca76400f3d0bed5b7e67c721948a6f77d4720eec763e78268718e4524ac3e","ssdeep":"","tlshash":"a7f0204ff21e393c86730615309a3c86e43e93708c003230a64fa38306d8b9b574af51","size":552,"data":"","first_seen":"2025-03-02T13:21:48.338565Z","last_seen":"2026-05-26T17:29:12.243392Z","times_seen":39584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-05-26T18:19:09.762554Z","times_seen":236630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"abe295e74fbc82f9450d6537bcfebbed","sha1":"6f31beb67567c94a02c382a3172cd288883189ba","sha256":"c1581457554816bb9acd0212f6be8a7466be96f75846634bd5621ede5d7deed5","sha512":"bd5b649325776706548ed3893f40d4b2859b2f258aeab9f218c012dcddced7d0e2f8e1eda24e2aaf75351ef071667b6258adb081a0bceb3ce4eaa2425fb47b5c","ssdeep":"","tlshash":"c71000000000000000c00000000000000000000300000000000000000000000c000000","size":2,"data":"","first_seen":"2023-03-07T22:48:07Z","last_seen":"2026-05-10T08:03:39.432959Z","times_seen":1940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b2f65403b5c256981aeed2af06288f48","sha1":"ed06a10d14ca36e0d4926b326275f1a979b49ef6","sha256":"a4fa102ddced552d569a93d45d407f623cb0f8f0c2ec5d3399826669c1b27949","sha512":"92d3fe7b8551f7cc414ad02189db4aaf7af7649f2b4b7497d28451ea0e4a00b144f84f52833c75030bcb469b5466399a78e8508cb49f012e8b38c5a0fcf57f6f","ssdeep":"","tlshash":"5ad09740c0ce24326964337003dfe47c296ff0253b28c3048a0492f0c8602fc823ee4c","size":260,"data":"","first_seen":"2025-10-05T08:40:13.694433Z","last_seen":"2025-10-14T06:51:16.109003Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i63646eo75736572776179o6f7267z.oszar.com/widget.js","fqdn":"i63646eo75736572776179o6f7267z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12713eeca3840e63feb80b6d74fd0aa4","sha1":"9e8e2a8fef17853da4d65d0ef77573980ffc645f","sha256":"a0af9b9f267f59eb1a35de064cfdd5666652140604f284d8149a396cf5a8ca74","sha512":"8b3a95ce98ad760cd0a6f2f625898d67e467e66b3f8e868fb8c56d67261b864edb5ff37b30e566a2ec866ae5bcc7dc2b6f3efc4304fcf709e234705b00c9bd2c","ssdeep":"","tlshash":"fa31853a7164f0370397145ba29a9b5c357b306af206cd51902eed685b18d9b5427cc8","size":1812,"data":"","first_seen":"2025-10-02T10:05:42.368564Z","last_seen":"2025-10-09T07:44:53.161445Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/www-embed-player-es6.vflset/www-embed-player-es6.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed3cff0ba88089f084ccce68c2873a5e","sha1":"c731f324bd9cdecc9bf2d7325173ed1f3e682e4b","sha256":"794649875d122feb54d45e8460bf88320807bceec7439d35cbe0c8411d74222c","sha512":"597e74c8621a805eb71a5295f76517f872c9161017edee8347e9d27570f7296851707b40663f457dd6178c921378799058cbadbd5a7a7c4fff63244bc888d2b5","ssdeep":"6144:X95Q/swSqrETw0xWYGna9gZhGXTXArZFrSh3m9aKmHlzKhbLY5H6LNjav8Pj/NVE:X95Q/swSqrETwmHGna9gnGXTArZFrSh/","tlshash":"3b745bc9776270a702e285f4502f1502b539a8a6f80cc8bcb5dcddda2d2595a43bbf3d","size":340010,"data":"","first_seen":"2025-10-09T07:44:53.115252Z","last_seen":"2025-10-09T07:44:53.115252Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PNFHQ1FTKQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a477052125025520ae105e383119cf2","sha1":"2f3497f731a6f102d98c91d836deadf51992a8a8","sha256":"08f26ac789420c719b0a59a59885412124d8731297b3a44a98f50a99190cfb71","sha512":"45a3ed30afb383960a83cd36730f4a1211103b73c11b02f0741d6f2ecbf72e0b819fec5be205100e10a4c66b4fdfb3ba40f0ab650ae8c180d7348176ac7eca90","ssdeep":"6144:0Bm/yp2a4t90uwbWZJT+Nju5204O0nsYXdXAQ2:K3YJH0KZJu0qC","tlshash":"099419de73d674225396f078503f018ba57b28a2b44cc89af189cde42e74a9a4177f7c","size":427170,"data":"","first_seen":"2025-10-09T07:44:53.060498Z","last_seen":"2025-10-09T07:44:53.060498Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cdb2cf872763d721b1ea8385cecd9343","sha1":"23bf5e2e27e97238d413f5ecf90425acd115185d","sha256":"d4563cb3c750021c344e346a3896f58e917f24a4959682ef5586bb11191aa450","sha512":"c9544b608df23b83b07e7926a87140a19ddce3d08ef7bdffcdc65c301755f064932ecec85b6ead842efb983f8012c82aef5b68cb594a734da188c106ca7cc6e8","ssdeep":"","tlshash":"a5d02350752c72f5c44f2c6f0fd7d4b6059650033800453e01af555055f9c44a155c2c","size":230,"data":"","first_seen":"2025-10-02T03:23:46.30168Z","last_seen":"2025-10-14T06:58:35.158102Z","times_seen":1009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c18ee877cd31213f51e9dde8dcb2edbe","sha1":"383e4898166a40d13039d223b73b574da20de006","sha256":"13ec6244e64921ebeff9c580f114302e6ab3cac755aeeca4c5fabfb2c309f99e","sha512":"3cfd2a4e63acc09fc65b3d5c0f822f799db2c9eb7ee323f272e49e49b5ad3a6ee75639ddb305ad6c9d1ba0e855206d4589191cab8ee058924dcb714eddea181f","ssdeep":"","tlshash":"95c08cc0b2907218c29290b6842642006a9b8994840084888246e9a8c572b2a083ca02","size":132,"data":"","first_seen":"2025-10-01T14:03:15.001208Z","last_seen":"2025-10-14T06:58:35.504122Z","times_seen":1006,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5804bda3ab472006bfedbe8865a99956","sha1":"cfdf2e45cf72a91b473d1d4f82a0f335e08c6dad","sha256":"7b1fb213a048a655c9d6f162109bfd8ec7a1ff8ead77f2ef8816872356fc4775","sha512":"eb3864a8e83c993654dbc8494d7fbe346d84eda43e97bb323be0e8c0ed4291f4088ce33f841850529704cdca4b6653514098ae98bd0afba5cd07449bb1d8fc81","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000003000000000000000000000","size":2,"data":"","first_seen":"2023-03-14T05:21:05Z","last_seen":"2026-02-03T15:02:47.724872Z","times_seen":3972,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2a9a6a2a06daa7270e82e6db2a78b896","sha1":"aec41190618af5a1f2d6a4542cfb212cafec84c6","sha256":"ba76f75a11ad9c9f9fe20f1cca025344167d9d4b9b8ed95357b5144f96f0e1c5","sha512":"2982bf261ae60270aeeb5f2ae84ec273723072eaac917d508b703713f1f4a95c8d31b8f95ec4b41f4c3f8e420c8a589fd820c772d36b8853e272ec74f00c1e30","ssdeep":"","tlshash":"f3110ee4b02732207252c9a12cbbce68757570262e383d6d224290f75ff923e9546f0b","size":1009,"data":"","first_seen":"2025-10-01T14:03:15.074899Z","last_seen":"2025-10-14T06:58:35.494345Z","times_seen":1005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1d6610702b133a044fbd4fea2b0fa509","sha1":"7f5560bd68bd9756c6617717b88fe959f82aa923","sha256":"3e6cbb6a2deced91a0b08af5dda4499c27b473027842193b8f234cf6f424794e","sha512":"20b82919cbb848f51d55e18bbfb3d3cf1d0bceda9f97a3c25a42756557665455262afcedf39fabc9f8a15cc608632179b8afb20fe5d55661412e12daf253e567","ssdeep":"","tlshash":"b6d0a7407510c53956a4d82414b5dac0688d652356aad91cb71ec20117d3915401eae6","size":220,"data":"","first_seen":"2025-10-02T03:23:46.467732Z","last_seen":"2025-10-14T06:58:35.164192Z","times_seen":995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T16:53:36.485058Z","times_seen":109707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b57117ba1e4d7a9d9861a349958c5ce5","sha1":"2b942009bc46a6ca6545ffbd37f7746584df56aa","sha256":"ba53a0ed74b65952afcca48bc6bf920c2163f49deb80355c514bfd912150c6d5","sha512":"4fdcc6006b27acee716306fef4d1565cf39ac2abd8537161eb6bebd9dc60f0ede9e294dee8d470c5136179d43718ff3980d129f353f1c06955267d882eff0c15","ssdeep":"","tlshash":"c710000000000003000000000000003000000000000000c00000000300000000000000","size":2,"data":"","first_seen":"2023-03-10T02:20:13Z","last_seen":"2026-05-05T20:59:59.816666Z","times_seen":4786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8021f7e4b05dada0ad3d47567e52249e","sha1":"0d94103eaba0e8fcbb475d8c9ebcf4752ef898ed","sha256":"ec5acd5e21ac22d556a4783140a064054939e9c8b9217b0fe94f3496024a84d3","sha512":"f14b0258093615758b1ad6d5af14fcac4f75a6b00f2d69b3acd59ee6aa57d5ffbbb63986172203f17d5f8e8259b74dd84e65d9c7f17b4cb92179174b0e625b78","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000c00000300000000000000","size":2,"data":"","first_seen":"2023-03-26T03:09:36Z","last_seen":"2026-04-13T06:36:38.208179Z","times_seen":2011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o676f6f676c657461676d616e61676572o636f6dz.oszar.com/gtm.js?id=GTM-KXWC6JH","fqdn":"i777777o676f6f676c657461676d616e61676572o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b253055425a357148dc70d6301ae3e52","sha1":"f79f47454334611c5e6b15cba2f41c3858dd01f0","sha256":"e9060810dceb9bdc55d04668d35f0866a9d81e0af0852412a991fe809fbb72e2","sha512":"9b7ca0367cb6bb8c837d7effb3e0f503fd5dc8be8cf771ed73e4ab41b656f9d65f4b2eb2200e3aa70ec6790d3f9408bdec25b570b82f68070e6b20508f539424","ssdeep":"3072:GDEXCaQ+UT4epod0Lfnev0Bvp9ScCcjD1EnJfa/aqbXV4rvoB6XTAN/6UcNDYUhh:jSwepoco05jCnCXV4rvoB6cNiU6YHW","tlshash":"438419cdb3d674224396a474503f018bb53b28e2b84cd895f18acdd42e74aaa5237f7d","size":374910,"data":"","first_seen":"2025-10-09T07:44:53.117412Z","last_seen":"2025-10-09T07:44:53.117412Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4a8a08f09d37b73795649038408b5f33","sha1":"84a516841ba77a5b4648de2cd0dfcb30ea46dbb4","sha256":"2e7d2c03a9507ae265ecf5b5356885a53393a2029d241394997265a1a25aefc6","sha512":"acc28db2beb7b42baa1cb0243d401ccb4e3fce44d7b02879a52799aadff541522d8822598b2fa664f9d5156c00c924805d75c3868bd56c2acb81d37e98e35adc","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000c00000c00000000","size":1,"data":"","first_seen":"2023-03-07T01:15:05Z","last_seen":"2026-05-26T17:28:29.900917Z","times_seen":69995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"49b28fa7f96ccc39ffc6232700dd76b1","sha1":"9f8daebe293d3f81a48679d119d864358d8378f4","sha256":"ca1f6dd44589793c12e8f766c91cf0370eaea86e948cfff2d3332539a48a9971","sha512":"5957626faf843028c77c7d6bc0f8c9e11ad015a4af6ad071e72ae0ba501ebb8400b264c40d77301361bb968d3d89bc44ec53a003e766acc14ed7cc5a560545ba","ssdeep":"","tlshash":"bae06880b4012175e097cfa0d41b624021c0f40995bd2f18a322ff31d4f619202d7c49","size":352,"data":"","first_seen":"2025-10-02T03:23:46.419925Z","last_seen":"2025-10-14T06:51:15.798262Z","times_seen":992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5475511b48cd35b1f04b7aee095faae4","sha1":"371a5be042c219eec80b9e01fee867affd53ebf4","sha256":"b23f5f4041c49fa269dab012f993d6a7b8d70f6b638dafd0f6f7de927f9b5942","sha512":"8b5aa71040cb23ae84dff7cc8b63a2c102243efabd092b2df388ff992787a0b1036cfe15401d9de62e2e85fa4eca06723ec3220ed4ee6df2e6b358ef55807be3","ssdeep":"","tlshash":"78a022c088fcb3f0c0208e20abab000820c2803c000000feac0ecb0ca33abc220038b8","size":77,"data":"","first_seen":"2025-10-02T03:23:46.410071Z","last_seen":"2025-10-14T06:58:35.55647Z","times_seen":1007,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"61cedcb2c1ba92bd633a1265a4922b66","sha1":"0c1021d870738332cc72fcea36efa446a6f08056","sha256":"b7acb3af3adac9ab51fd0c4070eac0c25aebe702f901bd0abe1b4e797637a2b8","sha512":"930044d39b63d128ca22e17911a44269d3444ba26be8807316b284f5a8d2760006dfc1710c9aba5ed2ac1d00314ea2d1c786516441c5e853e73301fac2858478","ssdeep":"","tlshash":"0ba0228a0ebe30f883028380083323222300e08088000088c0200020380c0cae0a0f22","size":67,"data":"","first_seen":"2023-05-24T02:48:57Z","last_seen":"2026-05-19T23:06:44.991149Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c18ee877cd31213f51e9dde8dcb2edbe","sha1":"383e4898166a40d13039d223b73b574da20de006","sha256":"13ec6244e64921ebeff9c580f114302e6ab3cac755aeeca4c5fabfb2c309f99e","sha512":"3cfd2a4e63acc09fc65b3d5c0f822f799db2c9eb7ee323f272e49e49b5ad3a6ee75639ddb305ad6c9d1ba0e855206d4589191cab8ee058924dcb714eddea181f","ssdeep":"","tlshash":"95c08cc0b2907218c29290b6842642006a9b8994840084888246e9a8c572b2a083ca02","size":132,"data":"","first_seen":"2025-10-01T14:03:15.001208Z","last_seen":"2025-10-14T06:58:35.504122Z","times_seen":1006,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"50dcba359f057b580fc6a0ddcc04ff73","sha1":"1b75c532bb23269e7f3a347f36905b0dfe85852d","sha256":"ae8cb854f50fcd6155ed041b0d102dd593448f9ae6f6cc76209fef44b0b1c58a","sha512":"c9bac114e6ee252fb49bdb739b72fa00c5fc773be72924f58c4ee981f7503a1750abe3967bcda1aa65627625d8236a828b7bffde36d33b3387ba5c45aaf96c3c","ssdeep":"","tlshash":"23a024c044f4f7f0c0104d105757000410c1403c000010fd5c0dc74c53357c11403474","size":77,"data":"","first_seen":"2025-10-02T03:23:46.292311Z","last_seen":"2025-10-14T06:58:35.595134Z","times_seen":1009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"805d3686a209b4a66a96a215692258de","sha1":"45c94be1c8acc8fcd09ef719d25aa16ff587dbc6","sha256":"dcd1ab1d0f768819a6f0d187638775799862cc13243a90c9b54b7bc050c37e87","sha512":"46229de5638277e0ea8bc5ef919a03f648c48039f0e393a08b55ca2bb232a9695dd4578b9be9727c8d2b7b133fbf2235d35a9c5c19f66297945913bdd8c2cbc1","ssdeep":"","tlshash":"31d0a7c074a6ea3d8563c73a000711814d65c974e91d8cfaaa22f75ed43179b1dfb7c6","size":222,"data":"","first_seen":"2025-10-01T14:03:14.970001Z","last_seen":"2025-10-14T06:58:35.432516Z","times_seen":1011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3049a829335281c64692e45b83678335","sha1":"34123d20b0cff9a50d739bb5431d49b06a72da30","sha256":"13825a5374182a0a3e242d511dd6c3ad0f03d89c5107bdd63d31a5bf5912b38e","sha512":"62e4869bd3e6d181b7195c58e4bb049303f326d226be013c11e2e44e7d727bd4f04ee48b7769d1482b4f8ff865af48da1569d4b2ceb4ae6d61aca7e79c821497","ssdeep":"","tlshash":"c71000000000000000000000000000000000000000000000300000000000c000000003","size":2,"data":"","first_seen":"2023-03-10T13:29:47Z","last_seen":"2026-04-02T00:14:36.048143Z","times_seen":1129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9b2c31d997762189106ed38e81fc6721","sha1":"65b2468d85de361bf1f1513c017cfa5e5cc045c4","sha256":"a2cac002e2305a136fc27bb1c9c1f22f1e047cafa87f0bea2b114009ccb6bc0a","sha512":"3e37400b1b8eb8a12ca6369210c13a549b244eae54b5a54dcc0bbe5a14c94c843dc7137cba6e27ca9ec51c6df359d3af3d8c5ec59bc6d961f7b4a5b1ddf1c3a4","ssdeep":"1536:LqB7KiF6iLiS6eBcvW01eJKx+cUnK66k74GurB:i7KiF6iLiSh01ec4Ln74b","tlshash":"384309cff2d1673089f369f2115b410921bea826dc542c6ebd16e3f46a75a87402bf29","size":60274,"data":"","first_seen":"2025-10-09T07:44:53.297163Z","last_seen":"2025-10-09T07:44:53.297163Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/js/clarity.js?t3eiuv","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a56d237f8911ac24b8ee4ab2359696e","sha1":"1fdeaeb01174789957fc51856aa78ebae9a35d0a","sha256":"bd544d8f59ce055b3828fe7b7e8fb77422a52b62e6493e35cd40195c33d924b6","sha512":"e3a9302c2c08ddb2a8bd893560102253d0865c134723601b66556f58a864d95ac57d4bb1bd05449d065b72473bd08a6c3d52f45c2a60d14007b187e5658c1b0d","ssdeep":"","tlshash":"5ee07d4d30c55027067600b563b7534924263e3ad489cf52495fc9d646688a504c24cc","size":305,"data":"","first_seen":"2025-10-02T10:05:42.436871Z","last_seen":"2025-10-09T07:44:53.030747Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"16250e7e55747e36e5f1fc08f725ef71","sha1":"dd8feae79756735419b284bf4291b338fef79e85","sha256":"e061428097b79aab3d587dbb523e19f4e58b67346699208c81f8b5a9449ffe6f","sha512":"54120a707e8eb330a6960dd05a942a271f2f244392c1a2058a7440cc10a1f7098b268b58b91248d3e21353d1c30780d380b5aa4be607b3e6c9b60fd565f7fdfa","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000300000c00000c0c000000","size":2,"data":"","first_seen":"2023-03-10T12:27:35Z","last_seen":"2026-02-11T08:00:18.046548Z","times_seen":3544,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"71d895c6f3dea1912301b7d20743ef50","sha1":"6bda34d11e1f65c3eb99e08174f68ff786df3d36","sha256":"32e983a3edc1b73e7b0c2f6fc308a17b4833276b6469b89f71c1a75b4929db55","sha512":"e9bc6b189f778bdc4fd5aa208f724b6362f17343d912a9f9300bd67e44a37313a3f457ae50fa154bdca4c5e9f6ffecf42afca81012f7f9bdf5a94a745d34ac75","ssdeep":"","tlshash":"41b0122c7768d07982dd72451edb04b1ccf22ea1045c2408ca1310020b70fc200ddd30","size":106,"data":"","first_seen":"2025-10-01T14:03:15.134455Z","last_seen":"2025-10-14T06:58:35.546856Z","times_seen":1091,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_ias.vflset/en_US/base.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd9f6a83ae30eb5bf701368e271616cf","sha1":"963ddc8240e99f9bb851948b04533d8a32198537","sha256":"c75a17e3b011f8bcbeacd3b58c9191bb9e37e71a7fdcb50fe0328e34ade0d80a","sha512":"6d9b34f9e772f609250e75a31b7f77bc503472d38148f95c38e5d8950e406e7c5b7ed13a0e4d452fb7fb51ae63292b21c97183e6881b80a3fc7c91be413ab1ce","ssdeep":"24576:cRKwA4Zf1xodTYUHOUwgeOGuYW6RlVtsUwpApQmvpo8iT3qjNUi3:cRxA0fPoiUPwfOGuYW60p6LjKi3","tlshash":"afc53ddcb296b8516363f0b9483f2206f23b64588849871cb16bd9da5cb4c1e913bff5","size":2636935,"data":"","first_seen":"2025-10-09T07:44:53.245896Z","last_seen":"2025-10-09T07:44:53.245896Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9393cb701efd9874f38be79bca77cfb9","sha1":"fde432f9941c92f8d896d7d0e4c28bbf95d1087a","sha256":"f406ea3e85c019f66d52b76a5f6fd2b6f395528eed544759cefad5f0eb6b5137","sha512":"a5264035232492356662d95fb373c9bedeb7d801c40bf6d3d36d25d197d84067eef29101f37626e12fbdd906f4d993fe5eb5c6bf5e621213e4f0a2bfe9e7661a","ssdeep":"","tlshash":"c7100000000c00000000c0000000000000000000003000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-11T15:36:03Z","last_seen":"2026-02-15T03:59:57.235035Z","times_seen":2063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"61a6f2652a0b6db05139abddb9b96ab7","sha1":"05548eab56f32db3c8c42fd2487a3f3b3ccf0ee1","sha256":"cc6e0d6af3dc4f620458aa79c4f4c0631ebc1bd55a148f5e9a06ea8874885831","sha512":"f2f89b1252cfe849de0cb4e8e8b7ee29cf99c563c5113ede3c45d470d5d14c45e0a3e30e560a79d14bfd4c46943c24a8444a1e81e4a0e93addf71ebdeaccaef4","ssdeep":"","tlshash":"4780047cdd4c5c350f157415001740441177700d50150005170004c44f311c5140fddc","size":38,"data":"","first_seen":"2023-03-11T13:53:37Z","last_seen":"2026-05-26T18:19:09.758293Z","times_seen":243211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7b8b965ad4bca0e41ab51de7b31363a1","sha1":"d1854cae891ec7b29161ccaf79a24b00c274bdaa","sha256":"1b16b1df538ba12dc3f97edbb85caa7050d46c148134290feba80f8236c83db9","sha512":"917148ec47923f2e0e3d73142ac4f94ec4c73078865ba6d29f0ea172cd6f4bf34db699af5c33535d3694d4aef91a11f916004d0382f794448a8550623d34c985","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000c00000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T17:02:24.243737Z","times_seen":59390,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o636c6172697479o6d73z.oszar.com/tag/q4i31mzsxs?ref=gtm2","fqdn":"i777777o636c6172697479o6d73z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc93485fbcf8b60dfedeff958c38a80e","sha1":"6b6b65715d1430cc743f450bdf5d6309f9515a4c","sha256":"718bf91b16ac2481a39bee428902cfbf98c37a0307cc1eff45b23ccee2fe643b","sha512":"92deb6e015336bd5d70091cd516f7e48351289c489fe2738229b3b56162e6b44163697ae13dae6402aa22d60585df4cdc2621622a7f38af8124776a294290cf4","ssdeep":"","tlshash":"94014435204ea47567bab09433ebdb047877121e11181103e59fc976662cfcb61e388e","size":727,"data":"","first_seen":"2025-10-09T07:44:53.002047Z","last_seen":"2025-10-09T07:44:53.002047Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PNFHQ1FTKQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"48a7cc69bb1bde48329fea16b77b302a","sha1":"185982a8aa4b456c2a35d225f1e49c86c0a8ba0c","sha256":"00fc462ef7f9ceba8e8d4d10836a28823acdb238b3996c7568c3c171008f0904","sha512":"8dd76ae8c4fa51581032d5c22d02e0ee681d479140eea6df9b4bc4b56da2e8383c870cc8cf78f26ae21f4e410b6e161cc299ae7a943da8306dae8a7b412f3635","ssdeep":"6144:0B6wep2itv0njCnzGwXV4rvoB6b6GBQ5w0yNWXy:KyY8snjYGdoT5y","tlshash":"149419ce73d674225396f478503f018ba57b28a2b44cc89af189cde52e74a9a4137f7c","size":426867,"data":"","first_seen":"2025-10-09T07:44:52.993353Z","last_seen":"2025-10-09T07:44:52.993353Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c18ee877cd31213f51e9dde8dcb2edbe","sha1":"383e4898166a40d13039d223b73b574da20de006","sha256":"13ec6244e64921ebeff9c580f114302e6ab3cac755aeeca4c5fabfb2c309f99e","sha512":"3cfd2a4e63acc09fc65b3d5c0f822f799db2c9eb7ee323f272e49e49b5ad3a6ee75639ddb305ad6c9d1ba0e855206d4589191cab8ee058924dcb714eddea181f","ssdeep":"","tlshash":"95c08cc0b2907218c29290b6842642006a9b8994840084888246e9a8c572b2a083ca02","size":132,"data":"","first_seen":"2025-10-01T14:03:15.001208Z","last_seen":"2025-10-14T06:58:35.504122Z","times_seen":1006,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"173a08c5d6adc5c93611a599bcb2c717","sha1":"735a7301e66ae2c3584357f7bf0bf09eefb62df0","sha256":"271e6368679a21c3416e2a0325db33d6bc445d601c72a49914081b5efd0cdf3f","sha512":"cf15a9aa7e406207f3b85c7ab7d6453fd2351616b4dbb2db767ad854f866ae8256045b8cb74948f44d09fedb6c200c56fa2e2ab83d1ab997f5b0068edee7349b","ssdeep":"","tlshash":"b0800000c08a0030c3200c082008c28038802002a8f2002208200000a0032fca0020ca","size":26,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-05-26T18:19:09.794158Z","times_seen":234604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DHnPzxr_IYrE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=CCoxdgK2dmAuUjR4t6ad6G1Sf3FLozO12TgxZYCeTRw\u0026media_oembed_control%5Bprovider_name%5D=YouTube","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"39609d7d57ca26a0fcf6ef97c44bed29","sha1":"9418d0f733e1406a7f45b528948e04f639583d3c","sha256":"5e70098ca6b0df385d2e73381109b1cc1922dbd2f4900988a0e79c732417aa19","sha512":"56f9e86df37bf15155759875e2a9b9e04cc6212d9addaf839b00ec1b1e0ce6ff6860a1371d2fbf635d475aefa45c8fdfcede67041ab8c8ad366a00ac73772782","ssdeep":"","tlshash":"9b41be1921f911248467b1e62baf62153434108725058b0afe0efa8e7f5c47b46f8bcd","size":2278,"data":"","first_seen":"2025-10-02T10:05:42.526047Z","last_seen":"2025-10-09T07:44:53.185294Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4a8a08f09d37b73795649038408b5f33","sha1":"84a516841ba77a5b4648de2cd0dfcb30ea46dbb4","sha256":"2e7d2c03a9507ae265ecf5b5356885a53393a2029d241394997265a1a25aefc6","sha512":"acc28db2beb7b42baa1cb0243d401ccb4e3fce44d7b02879a52799aadff541522d8822598b2fa664f9d5156c00c924805d75c3868bd56c2acb81d37e98e35adc","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000c00000c00000000","size":1,"data":"","first_seen":"2023-03-07T01:15:05Z","last_seen":"2026-05-26T17:28:29.900917Z","times_seen":69995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_ias.vflset/en_US/embed.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"652f1bf9d51ccc032e720af32da5b8cc","sha1":"8f7d2f8f47b9e35b84c69e7e354f3e961005c3ad","sha256":"08fb33a47e1d9fc813e540d0baa624c34d2f7225ecf8063a425194077c3c17e1","sha512":"836a4854cae1a6f59584ca0710c2e6171b94a1fffd5b07f84a07203f7e8a349c09db6497342bd1f62a7e7c1dd33abe84f796af8600f9f909ead9eebfa5e9c552","ssdeep":"768:V+1oNSYuOQEU+a6oWmMii0q/anDq9MT3DFNf:5oWmMh/aDjj","tlshash":"ece2d64eb7e1e4349265e2ee2c0b1104673b94cc58a0a35c763edde92db4d25b07afb1","size":33150,"data":"","first_seen":"2025-10-09T07:44:53.059014Z","last_seen":"2025-10-09T07:44:53.059014Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"30d4cdfc5cdb53b8fb05da340b54bba0","sha1":"482f1838dc2d123ac1a86f8693f0af1ec1b3d9d6","sha256":"11f9ae9186eb37867b95cfa5d1b8cbb283a1d15432e36f530b12be280d594fd3","sha512":"0d997162c949dd28f347eccfcdaec5689dfa9bb1d33cf4df8298d2b958eaae5b8f69743b5cbc6a2e78cc8c0b7c29acf7ac3951c4ec26215181a74d23f1f3041a","ssdeep":"","tlshash":"5f01ddba2f1ca2f40004956379eb359ce43208db2d02fc096aa68d91189eecb07bf570","size":658,"data":"","first_seen":"2025-10-02T10:05:42.46781Z","last_seen":"2025-10-09T07:44:53.301323Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/js/js_xyF5ctzSbdc7CL2SNjDCUOijQ1bKF0bb8TI42omVJYA.js?scope=header\u0026delta=0\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyFU9GyozAI_SE1-7Lfk8EELS0GJyG2_ftLtb29td29MxmFcwjhQAIxqkC6Orgb3ZAladNDOHkVW7P7YftjaYKw5F4uLuIAlfUb8JSYErqd_-RZILoXz7iMLuY6A3cqNRxwwaSlVSzaYJl8DwXdw3hHusHSKKXRT5jqyocDaC_qftieacE3siDkcHhySZQGCpZOUrHsKWF2_yLWHWfriB5wMs0MmfS6R2tRsUJZwqnT64wd9FLVLxRRyq_BlBZrg2SfkbfDf93CmOKtGyrCJ9Jd_NpcHyDHHbEN_RUbWXrg9rg_9BtvDwj7RAxXE7jV0lfiiNn6HG7F_ydykJqDVJ6SV-iL__vH1j6eysfSb3PfskxA6XkNPkUU63sP2Q-Uy15ukojdQnju1un4oTKXkBH3hWccTU13E_92Ddb9ZYKsfoCgxRemNar6IHIitN80M0EKNo0PYIMXtUdzeryJu9uMIiOjdWd0o332fgdHuLyCU1PIsqKfZa7zdkeK-4A1t6KLPdaBEil6Ey3Mq5TSPtB2Q5sz9oPkyd3_XSRgGb8ACYWv7g","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dec2313a7f8790ead8fdd547d7fb0b6a","sha1":"cb651694ded6fea99d7e77bcfb106e36b5a43f6a","sha256":"c95eb5b7a73ad2d47cf8ce017c6bc46b271efb8fe3f0e0d05a573f39b94d9817","sha512":"f16a05ea9b20da9e949a92a12c32141ba0ba392d18b5a9e76e57d7dd9c9faacd0100014b06aec9284a256354ec95689a637a8244e7e3124b60bffadf91df90f1","ssdeep":"","tlshash":"d5f0ebc13462883e948f247bee67f38e36220c2d3070f0a4451c698922fcaf79408eed","size":605,"data":"","first_seen":"2025-10-02T10:05:42.388889Z","last_seen":"2025-10-09T07:44:53.157186Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-4D2Y9B123H\u0026cx=c\u0026gtm=4e5a71","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec6e30693aad7785e80b339c1a9decff","sha1":"cc22900c3db77306b825c025dbe2886d75843469","sha256":"f98dc8cec58f8457aec0eeda8b2f2d66a36f791ef66d5092a0c3f4f920cfdefc","sha512":"aac080d80eb723a2cfce4d480dc132673dd3f45a13d76f02032dac6a6ce635f85a85345ff9c0a3186511fb8c2c88e4cf804cddccfbba7e45a08bd47b59082dbe","ssdeep":"6144:VBZpwep2itv0njCnzGwXV4rvoB6QEGBQ5w0yNuWy:rfY8snjYGdoOUy","tlshash":"479409de73d674225396f478502f018ba57b28a2b44cc89af1c9cde42e74a9a4137f7c","size":429978,"data":"","first_seen":"2025-10-09T07:44:53.139966Z","last_seen":"2025-10-09T07:44:53.139966Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"173a08c5d6adc5c93611a599bcb2c717","sha1":"735a7301e66ae2c3584357f7bf0bf09eefb62df0","sha256":"271e6368679a21c3416e2a0325db33d6bc445d601c72a49914081b5efd0cdf3f","sha512":"cf15a9aa7e406207f3b85c7ab7d6453fd2351616b4dbb2db767ad854f866ae8256045b8cb74948f44d09fedb6c200c56fa2e2ab83d1ab997f5b0068edee7349b","ssdeep":"","tlshash":"b0800000c08a0030c3200c082008c28038802002a8f2002208200000a0032fca0020ca","size":26,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-05-26T18:19:09.794158Z","times_seen":234604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5475511b48cd35b1f04b7aee095faae4","sha1":"371a5be042c219eec80b9e01fee867affd53ebf4","sha256":"b23f5f4041c49fa269dab012f993d6a7b8d70f6b638dafd0f6f7de927f9b5942","sha512":"8b5aa71040cb23ae84dff7cc8b63a2c102243efabd092b2df388ff992787a0b1036cfe15401d9de62e2e85fa4eca06723ec3220ed4ee6df2e6b358ef55807be3","ssdeep":"","tlshash":"78a022c088fcb3f0c0208e20abab000820c2803c000000feac0ecb0ca33abc220038b8","size":77,"data":"","first_seen":"2025-10-02T03:23:46.410071Z","last_seen":"2025-10-14T06:58:35.55647Z","times_seen":1007,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7a45e6fab93673db05bbed92be9e5936","sha1":"2ad917c607e590479eaa2fb6df97beb898f1d061","sha256":"be9c5a4b6d376bc487cf71d26bcf3e2d986965a9a382da0efde8b964d3ad55f2","sha512":"f45f4429c3131bd622c8031ed87a46818f2eddd6e01d4d7d962bfb3e12ea24267425327c7d262706ab6dbab142fce6dcdf7d3d4413a6bf233e9a76cae7ceed7d","ssdeep":"","tlshash":"41a022c088f8b3f0c020ae20abab000820c28c3c000000feec0fcb0ca33abc220038b8","size":77,"data":"","first_seen":"2025-10-02T03:23:46.418292Z","last_seen":"2025-10-14T06:58:35.597595Z","times_seen":1007,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cb21a4a80210f794fae21638e1cb3791","sha1":"fbc6fc4df1c77788c5c8b8f34567e5e20546e1d6","sha256":"5c8c8e3b610a9bff0ee7df0671ad4b5b4699e01e234182b5ee5abfc634eeef9b","sha512":"750e0587cafa1a80dbbc192f5bf3772c9ee953eefea555c00f321ee4617f6da89049a45a5d08307c867bc1f9fe7be98a02e4e65d48bf50c5b256f1d3099f075f","ssdeep":"","tlshash":"7ce07dc86b593e32e3876c51e06313023040920308c37b0923a37628a8989662203c18","size":312,"data":"","first_seen":"2025-10-02T03:23:46.393138Z","last_seen":"2025-10-14T06:51:15.886662Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"af2b5937448209e714009fe546bdf4da","sha1":"963e2ed6a24aa48d6198a6d087f3efcf0ef44659","sha256":"ab5a863336d71db30ead891e2992e74f6216a235af99345c8d6545032e4223d5","sha512":"8ee4f99a46a393696d6e6fc4afd8a9ed67863fb998c9c99af7c0bf7462d099191aec0d721144d06af474cbed8ee5eb929046d162c1ab5186b3b3611b23939fca","ssdeep":"","tlshash":"f4e06880b4012175e097cfa0d41b624021c0f40995bd2f18a362ff31d4f61d202d7c49","size":354,"data":"","first_seen":"2025-10-01T09:58:29.841467Z","last_seen":"2025-10-14T06:51:16.114639Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"83878c91171338902e0fe0fb97a8c47a","sha1":"516b9783fca517eecbd1d064da2d165310b19759","sha256":"148de9c5a7a44d19e56cd9ae1a554bf67847afb0c58f6e12fa29ac7ddfca9940","sha512":"929872838cb9cfe6578e11f0a323438aee5ae7f61d41412d62db72b25dac52019de2d6a355eb2d033336fb70e73f0ec0afeca3ef36dd8a90d83f998fee23b78d","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000c00","size":1,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2026-05-26T17:22:03.484605Z","times_seen":72041,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=1920\u0026max_height=889\u0026hash=xWhLk7Ki-rPBwB_EPDITkxWUpG5V83Ou8MnuaDYyfjM\u0026media_oembed_control%5Bprovider_name%5D=YouTube\u0026media_oembed_control%5Bsettings%5D%5Bvideo_autoplay%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bloop%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bvideo_background%5D=0","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"39609d7d57ca26a0fcf6ef97c44bed29","sha1":"9418d0f733e1406a7f45b528948e04f639583d3c","sha256":"5e70098ca6b0df385d2e73381109b1cc1922dbd2f4900988a0e79c732417aa19","sha512":"56f9e86df37bf15155759875e2a9b9e04cc6212d9addaf839b00ec1b1e0ce6ff6860a1371d2fbf635d475aefa45c8fdfcede67041ab8c8ad366a00ac73772782","ssdeep":"","tlshash":"9b41be1921f911248467b1e62baf62153434108725058b0afe0efa8e7f5c47b46f8bcd","size":2278,"data":"","first_seen":"2025-10-02T10:05:42.526047Z","last_seen":"2025-10-09T07:44:53.185294Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7188b9b84dda84add3830c8dedd51ed4","sha1":"ad2d81c14129884932b81b83a5e20cc47c3777f6","sha256":"bff491f992dc0798228046800761f6f9b2ce8f822e8d7030f5fc7a2c481653fe","sha512":"6727bbd9f2bb8067651230ac178d3102889e917a4989ea33ec394b452865498aaf32a65fee659b5796bee34b3238a554364741f65dc01f9e6057a242f4e8c961","ssdeep":"","tlshash":"03d02bc0bc6576188ad3803b4017004054008822d71c49b8a111ff25d46174a19e9a45","size":229,"data":"","first_seen":"2025-10-01T14:03:15.018299Z","last_seen":"2025-10-14T06:58:35.40575Z","times_seen":986,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"da984e42a5899bbdac496ef0cbadcee2","sha1":"8df74dda184c19df19d4755602108540e071bf38","sha256":"88b3e13a98900e3dfa4b36074ae14aededf166e6f21f2ba668ba5fbec88922a2","sha512":"8630f578cb6dd0ae8d2e8ae8cbb510a982e0e8e043b1a7b56ff77204772a92a27184da4e832d75d868ea1a556e50d2211a3158c9d24938c8159df21558f49e8d","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000000000000000c00","size":2,"data":"","first_seen":"2023-03-12T14:32:33Z","last_seen":"2026-05-23T19:43:07.183267Z","times_seen":1200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"61cedcb2c1ba92bd633a1265a4922b66","sha1":"0c1021d870738332cc72fcea36efa446a6f08056","sha256":"b7acb3af3adac9ab51fd0c4070eac0c25aebe702f901bd0abe1b4e797637a2b8","sha512":"930044d39b63d128ca22e17911a44269d3444ba26be8807316b284f5a8d2760006dfc1710c9aba5ed2ac1d00314ea2d1c786516441c5e853e73301fac2858478","ssdeep":"","tlshash":"0ba0228a0ebe30f883028380083323222300e08088000088c0200020380c0cae0a0f22","size":67,"data":"","first_seen":"2023-05-24T02:48:57Z","last_seen":"2026-05-19T23:06:44.991149Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4a8a08f09d37b73795649038408b5f33","sha1":"84a516841ba77a5b4648de2cd0dfcb30ea46dbb4","sha256":"2e7d2c03a9507ae265ecf5b5356885a53393a2029d241394997265a1a25aefc6","sha512":"acc28db2beb7b42baa1cb0243d401ccb4e3fce44d7b02879a52799aadff541522d8822598b2fa664f9d5156c00c924805d75c3868bd56c2acb81d37e98e35adc","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000c00000c00000000","size":1,"data":"","first_seen":"2023-03-07T01:15:05Z","last_seen":"2026-05-26T17:28:29.900917Z","times_seen":69995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i73637269707473o636c6172697479o6d73z.oszar.com/0.8.33/clarity.js","fqdn":"i73637269707473o636c6172697479o6d73z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"222f5a85d5ae47592f07b769405567d9","sha1":"a7774145b147b9881ee3f94f9754749423638ec3","sha256":"e15d1d235049e835e8a5dc14bb753336c597d2fe156d6029f425a05bb178b53d","sha512":"b715fb7e38774348094958b0b1242db00890b5776431e4d9df245e1a73566868c82a7bd710d8109a2b1e5972a88006bce5bd3e74ddfdd55f396f1291b1b97cdf","ssdeep":"1536:YQPzHqofC4+Nvtl8HTHpn1z2sA0T+q+PGySI:pP7qofBSAXz2sA0Ty","tlshash":"4573e6dc7243707e42a760b5807f120bf23a6d4a780b5c50da66d6c43c78e9692bbf6d","size":78490,"data":"","first_seen":"2025-10-09T07:44:52.990454Z","last_seen":"2025-10-09T07:44:52.990454Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T18:19:09.77222Z","times_seen":314560,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cd08d902319dc4298b865c325e108d93","sha1":"e895170e3f608304fa898ec32388302cac44825c","sha256":"852dadad5ceaa5f6061b7a90f567a5187d57ca108d719e1b89a98f33f8443eb1","sha512":"58dc1b80b3e0b4579468f5d297f22e4f4a7bdfd969cbb5fdd3c3068a99aa55818e9c272f615ce3c4e8b763d77bbf41a70fa5feac694a5e518cae57f149c078eb","ssdeep":"","tlshash":"b3e026f9d1bb8c6160ea59e8e2ef61c440861d7255931c9de606e1e803b3eaa028d916","size":342,"data":"","first_seen":"2025-10-02T03:23:46.411752Z","last_seen":"2025-10-14T06:58:35.496595Z","times_seen":993,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b57117ba1e4d7a9d9861a349958c5ce5","sha1":"2b942009bc46a6ca6545ffbd37f7746584df56aa","sha256":"ba53a0ed74b65952afcca48bc6bf920c2163f49deb80355c514bfd912150c6d5","sha512":"4fdcc6006b27acee716306fef4d1565cf39ac2abd8537161eb6bebd9dc60f0ede9e294dee8d470c5136179d43718ff3980d129f353f1c06955267d882eff0c15","ssdeep":"","tlshash":"c710000000000003000000000000003000000000000000c00000000300000000000000","size":2,"data":"","first_seen":"2023-03-10T02:20:13Z","last_seen":"2026-05-05T20:59:59.816666Z","times_seen":4786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e3669d19b675bd57058fd4664205d2a","sha1":"7a38d8cbd20d9932ba948efaa364bb62651d5ad4","sha256":"4c94485e0c21ae6c41ce1dfe7b6bfaceea5ab68e40a2476f50208e526f506080","sha512":"7b0776dbac74a9abb8a0d0119c73ae82efbb1b95af009f0669e2b52c9664f7fbb458ddf3abd7ccf0617ab69362a13ade046c4f19490710e5d8937ba72efa90aa","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-05-26T17:43:38.943591Z","times_seen":56677,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f15ecdc090b19e03eaed156c8a178bec","sha1":"dcf479805e174e3d9db706ca7983dd6df1a6a4e2","sha256":"7b26fdf04862c94b0fddf0a28a82a79ec0d49115f8e0f71372847e39ee536891","sha512":"4032a9965b6370094268400f23f902dbe72cad4c27f9f2702e04cd8e7fefb42c30ca74ff3ed6ea4548807081b7c009b8d79505c5fc128aa4b1584f9e4239cf0d","ssdeep":"","tlshash":"30f09e0c0744388ce84a9d9dc5506a709f9c927bbb413451f83e054dbde3beb9870557","size":522,"data":"","first_seen":"2025-10-07T23:24:37.134399Z","last_seen":"2025-10-09T20:36:36.438582Z","times_seen":778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/modules/contrib/google_tag/js/gtm.js?t3eiuv","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73fc475873aff0dc156d6989e2804a89","sha1":"c402533d57c201b5367cc60f4520e56469c8afe1","sha256":"74f8cc06b3bc0da846c970846f2cb719aa8e7211b5c5a0c548982b6b279a48e5","sha512":"d60addbbf3b1204c13d2feec6781f91441f73f28b1494a1b8f037af4a2a67bbc9246ee210122e19b617cb0376abe62bc54596af1fb994e3f3518c5910bdb3612","ssdeep":"","tlshash":"9f21cd513db6487e091219dac75f83b0355022362c41f8a8b9ad8d497e71fee89c1ecc","size":1263,"data":"","first_seen":"2025-10-02T10:05:42.387321Z","last_seen":"2025-10-09T07:44:53.076728Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/eu_cookie_compliance/eu_cookie_compliance.script.js?t3eiuv","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"36ab159b61a36403c4391e19c68deeaa","sha1":"00d335af472eaa8f3b6fc15f66682a3572423b98","sha256":"97293e10d2232afdfe8867066f571c8fd695bb3d271c092bc2d98ca4081522eb","sha512":"a2cdab43b8ff9bbe47c1c03c5871759878b2d0391765b3e3a3fbfaee28980b3de843981a7a9599d836f2e49a27af55622a1df528dfbf202bf0feb47fa58aba77","ssdeep":"","tlshash":"c801bd3a6ef980342216101f92e7c318375050071052ccd67e8cca8cafd5afaada9bd9","size":843,"data":"","first_seen":"2025-10-02T10:05:42.315051Z","last_seen":"2025-10-09T07:44:53.046902Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f186217753c37b9b9f958d906208506e","sha1":"08a914cde05039694ef0194d9ee79ff9a79dde33","sha256":"c4694f2e93d5c4e7d51f9c5deb75e6cc8be5e1114178c6a45b6fc2c566a0aa8c","sha512":"780556c04b2714ff1d7ecedc573260faf169d059871cb3154153f9c00636242d83bd555ad0d723ae7c0b7b6397850577f70d5c5fafd5155d7d27b6663c9bb576","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000c0000000000c000000000","size":1,"data":"","first_seen":"2023-03-07T01:36:03Z","last_seen":"2026-05-26T17:25:28.652888Z","times_seen":67537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i737461746963o616464746f616e79o636f6dz.oszar.com/menu/page.js","fqdn":"i737461746963o616464746f616e79o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf27ec4dfb9cf4ab2df3d553a5e075f6","sha1":"b0ad5b77f6f2881268c267d273c6e516f66e18fc","sha256":"602364402df92550d472b6fffb34d56b9ab0d8a47e980d2ef80b0532e0a5ff09","sha512":"fafd5dd46d62e029e60473eddb05f1ad6f9fb1177330a681b714e94623e7bd5e60a9968998b78cbb91e526eb355c2a2386522e2cdfbe5817c21eab5a1e5f9890","ssdeep":"","tlshash":"cd61a68f774fa8334a4b37b9819fba0e2223722f98608d048915d4c449bcec6601f97d","size":3237,"data":"","first_seen":"2025-10-02T10:05:42.381848Z","last_seen":"2025-10-09T07:44:53.126322Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/js/js_4-VNed07D_HVhxOzUXR7cgCOLUBq4wBg48vAbbnu3tI.js?scope=footer\u0026delta=2\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyFU9GyozAI_SE1-7Lfk8EELS0GJyG2_ftLtb29td29MxmFcwjhQAIxqkC6Orgb3ZAladNDOHkVW7P7YftjaYKw5F4uLuIAlfUb8JSYErqd_-RZILoXz7iMLuY6A3cqNRxwwaSlVSzaYJl8DwXdw3hHusHSKKXRT5jqyocDaC_qftieacE3siDkcHhySZQGCpZOUrHsKWF2_yLWHWfriB5wMs0MmfS6R2tRsUJZwqnT64wd9FLVLxRRyq_BlBZrg2SfkbfDf93CmOKtGyrCJ9Jd_NpcHyDHHbEN_RUbWXrg9rg_9BtvDwj7RAxXE7jV0lfiiNn6HG7F_ydykJqDVJ6SV-iL__vH1j6eysfSb3PfskxA6XkNPkUU63sP2Q-Uy15ukojdQnju1un4oTKXkBH3hWccTU13E_92Ddb9ZYKsfoCgxRemNar6IHIitN80M0EKNo0PYIMXtUdzeryJu9uMIiOjdWd0o332fgdHuLyCU1PIsqKfZa7zdkeK-4A1t6KLPdaBEil6Ey3Mq5TSPtB2Q5sz9oPkyd3_XSRgGb8ACYWv7g","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78031617af0b15da54ccd6ecf28d42ae","sha1":"ee961f6cde01b4c8a4a94e4e2c36538c96d5dd78","sha256":"23546b9c806a705e5e2e92e1d766e0dbe8abb2472d8d49853ce2a168ee82235e","sha512":"91a0e8681c16ba08dc87271a1db2f9b28f286cd7335f64035fb5f2105141d5529ec99d657ca46f40e18bf87d02cbfd1a4874da38cc6907ef2e61e24df1ea949d","ssdeep":"1536:axgjYybWiSz/GLN4qRKd1cjHMGxJfarPQ5RSqxn1MYfx+QlBFRNyLLFm6cjIIV7n:axQYyiz/G2qR2LtuNyE66IGbX","tlshash":"2ce31a49b120262641ef21ef74179609b3b36d345502d090f09ac1f96efda069ae7fee","size":145602,"data":"","first_seen":"2025-10-02T10:05:42.41788Z","last_seen":"2025-10-09T07:44:53.105093Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e795f2b1b495c31028edb86cb4f4e7b5","sha1":"d5d0d2d9e1538e5869ff9828d64664b94d6de653","sha256":"02c0ff09b0683b8853beac78e1dd6a3af9a8e10691130f6e1ff99647756e541f","sha512":"1cba9dc68dc86057efe7d75d45a8e4decc5cc620fe727688d90c1296a4498ab19425aa6de6ed4ab88f8216c266f70e39a30bf849715ad7c174910f4414d406f3","ssdeep":"","tlshash":"6f41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2084,"data":"","first_seen":"2023-10-25T23:30:09Z","last_seen":"2026-05-26T18:19:09.771159Z","times_seen":261352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe81353f0c3e106bb59598d92fd49a12","sha1":"cd09955588a1d236a25a76d3f774418a829cb5c4","sha256":"a366197fa3629365ab26195a99befce51c8f8ec90252df02e0b4cb44bd52d020","sha512":"91e97b195ebad1859d88fadc65abbc0fa276dc9677360385b98b783ab0530df5b002a775fbaf9e7d410fd4eae4110ac653c4459c3fbbc125c7e2b93d5082fc8d","ssdeep":"","tlshash":"991135251b715c27806a296232dfb309b8262372583c91dc8a81e365933661bbc3235e","size":1033,"data":"","first_seen":"2023-06-13T01:22:29Z","last_seen":"2026-05-26T18:19:09.790407Z","times_seen":235627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6b1c7b1d1e9af8c5cd4e4d4e34867cf","sha1":"f473fc014546c3a815f2eb4a021de18f009dc0e1","sha256":"1cbb89944323db675425ccecf84d0ae66a4960335b4ee167ac30ba48e65bbdee","sha512":"6eb02115d0a68296be516912514f0f8930e1f95839b3ee12dae388ac4b2554ed3615fcf3de5e2f00616eb16a5a19c0c2b86c262ed4d7a71003b3b93c7660b280","ssdeep":"","tlshash":"d4c09bcd35465d7195fb57504f1ff908b191325198d11d31495573455b31c179754860","size":148,"data":"","first_seen":"2024-12-27T15:15:37.723631Z","last_seen":"2026-01-10T23:27:53.450524Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o676f6f676c65o636f6dz.oszar.com/js/th/CfTnQukLks5bs8x-CaqyPUkLGsL_zVi8KCE037ufnyo.js","fqdn":"i777777o676f6f676c65o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09a3450a24dc078ae03de856372c1b8e","sha1":"237f85dee5c0a7dd5726cd88ae56d90d58c213bc","sha256":"09f4e742e90b92ce5bb3cc7e09aab23d490b1ac2ffcd58bc282134dfbb9f9f2a","sha512":"75478689fd0a17ec781ea26ec98d800620f622299e1a0d3e0e78bffd91c00550c56a1b7dd9fc015230188afcc153139a4cfbac0262970f8d51312d722e3a5e0a","ssdeep":"1536:jpkBjKiF6iLiS6WBcVW01eJKx+cUnK66kh4GurV:ejKiF6iLiS9k1ec4Lnh4j","tlshash":"9b432acfb2d2673089f369e2115b410921bea8265c543c6ebd16e3f46e75a87402ff39","size":58957,"data":"","first_seen":"2025-10-01T14:03:15.205419Z","last_seen":"2025-10-14T06:58:33.913817Z","times_seen":1101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T16:53:36.485058Z","times_seen":109707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6b1c7b1d1e9af8c5cd4e4d4e34867cf","sha1":"f473fc014546c3a815f2eb4a021de18f009dc0e1","sha256":"1cbb89944323db675425ccecf84d0ae66a4960335b4ee167ac30ba48e65bbdee","sha512":"6eb02115d0a68296be516912514f0f8930e1f95839b3ee12dae388ac4b2554ed3615fcf3de5e2f00616eb16a5a19c0c2b86c262ed4d7a71003b3b93c7660b280","ssdeep":"","tlshash":"d4c09bcd35465d7195fb57504f1ff908b191325198d11d31495573455b31c179754860","size":148,"data":"","first_seen":"2024-12-27T15:15:37.723631Z","last_seen":"2026-01-10T23:27:53.450524Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=1920\u0026max_height=889\u0026hash=xWhLk7Ki-rPBwB_EPDITkxWUpG5V83Ou8MnuaDYyfjM\u0026media_oembed_control%5Bprovider_name%5D=YouTube\u0026media_oembed_control%5Bsettings%5D%5Bvideo_autoplay%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bloop%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bvideo_background%5D=0","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:57.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=1920\u0026max_height=889\u0026hash=xWhLk7Ki-rPBwB_EPDITkxWUpG5V83Ou8MnuaDYyfjM\u0026media_oembed_control%5Bprovider_name%5D=YouTube\u0026media_oembed_control%5Bsettings%5D%5Bvideo_autoplay%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bloop%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bvideo_background%5D=0 HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\nrefresh: 2;\r\ncontent-type: text/html; charset=UTF-8\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=10,cfOrigin;dur=216, cfExtPri\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ndate: Thu, 09 Oct 2025 07:43:57 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GIUgDKHwqVxWeAb2PqjRAXq1k34Jlc47CK09gHDOnobl%2Fa9PNqZrlvZu1UxWMM9x3bTbmbC2%2F%2FVa8tyZisJnmZncZRCzOi2jppJ22UVk04PuhMFN9zxKq3S9zTsxAXvnO%2FW6C%2FZdotga\"}]}\r\ncf-ray: 98bc40008d5056b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6a532ed10ddcc9f012f8144fc8922022","sha1":"0ffefb6f16c5a5007ed6428e86ca604c72c28708","sha256":"6bd6d6803e0a9191ec775bb646dc32a1dba2c3043be403b5e042fda1238c0cda","sha512":"1221d384b5ded87cb4bacb6a0f4da4f91f0b9a9679c4ba05b8e1c75753678b9a077ff5c62f90d8dc7902d5590017513f4c8fc71737e1cb4db21f9130f5206025","ssdeep":"","tlshash":"ae60000c000000003030f30cf030f0033000c0c00c000c0f30cc000300c000c0cf000f","first_seen":"2024-07-24T08:29:06Z","last_seen":"2026-01-10T23:27:53.417708Z","times_seen":14,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i666f6e7473o67737461746963o636f6dz.oszar.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2","fqdn":"i666f6e7473o67737461746963o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:02.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1\r\nHost: i666f6e7473o67737461746963o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=4,i=?0\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Thu, 08 Oct 2026 05\r\ncache-control: public, max-age=31536000\r\nvary: accept-encoding\r\nlast-modified: Mon, 16 Oct 2017 17\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: fonts_gstatic_com=%7B%22HttpHost%22%3A%22fonts.gstatic.com%22%2C%22HttpDomain%22%3A%22fonts.gstatic.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fs%5C%2Froboto%5C%2Fv18%5C%2FKFOlCnqEu92Fr1MmEU9fBBc4.woff2%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Ffonts.gstatic.com%5C%2Fs%5C%2Froboto%5C%2Fv18%5C%2FKFOlCnqEu92Fr1MmEU9fBBc4.woff2%22%2C%22GirisIP%22%3A%22216.58.213.99%22%7D; Path=/; Domain=i666f6e7473o67737461746963o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:55 GMT\r\ndate: Thu, 09 Oct 2025 07:44:02 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\ncf-ray: 98bc401def5756b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15548,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15552, version 1.0","md5":"6ede2c7e1a2c2fec942f23dd1b831d05","sha1":"e19c69d68178386557f5d6c4d1868ceba3352a32","sha256":"f801d8d34f7352443ab57f101d2bcc4f0eb29f042137313c1964c5263d4b2109","sha512":"b3094c936524d464fd244961428411058773addcaaf010b5797799575833d990ed5f176ff999bd9d4d1176d20572430f5dc85ca051fd8ccc9848ae161fd950ba","ssdeep":"384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhz1:jslQ+LhUoTB0Qr6Qjkg/DmcJufz1","tlshash":"3062e103f2bc4c01e786193ebb5870237205272619efa67780ce7ea4c65ec81a39b457","first_seen":"2025-06-21T10:27:34.629895Z","last_seen":"2025-10-09T07:44:52.978989Z","times_seen":3,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/images/spotify-25.svg","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/images/spotify-25.svg HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/css/css_pmEoZYJoqAqjEHUOEhlJ89R2_IsF5X5U3dS8iCt6t8w.css?delta=1\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyNlAuO4yAMhi-UJquVqjkOcsBNmRrMYuhjT79O0s50sulDQkown4yx_RucKwzx0sH1p91ljqXpwR5MYV2pu_s3Bc-lsQd0vnDemkR18NGkkfDRYSymJ7aH7n7TWILM3UDcA22kXMjHobFMnHs-dw53UEm9csbO5ZqAWviE8w-D80A8zKbIOQD5v9g4MEcfrb_5tiINSjCnMdI9BuymANpySdhaTpfsh31ZILZK4WDuSOi5FvXskJf-_od7EG9fUj4eUW3ZZCQonuNrxwQ9ktFcHd5gMTpNqpaI6eBfv7D4Qrig8DhWzEJ2aweikcjq8dwwP20P60Fw0dxeM1c9OcxG0I4ZeULuuGbLlUI0BXox21-6nvAcUdurhmc-y4nfZ8zvrfnYvkW-iu2b_Niq2yXp-wzZo7SffyrmSyvkVUFLaL0SAWOdLtk86vUvQlPKBfOL41Yl_xDZI4zVGw0PmQA6HZ4SoirrIZudz_I4WmGrA2BVDJEdzlCCQQOvRAvi6PG0CThAySoT2RBMYlmhWpXIYK7n00amPC_vnNiIJ8msupoEMF6-RkmAXMwOrCpIa-nGnFdjmQ8e9RMSeYhWRbZiNLfRqEN3fPptGF63zdxW5qqjbu6sLzldT50Xy0dtpW5WRRN0eEPHGHp0WmedpWXshAQZhgxpL7drvi1tjan22nZ7dI14jQ9N4lTTPFOkW7E14_NlSoK0gV0l_AdXM4eY\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/svg+xml\r\nexpires: Tue, 06 Oct 2026 15\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\netag: \"208-63fc947b0a800\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i6535326263663133343864383435626639636261323661333262666136333636o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: lsjf_meX2aSC7cEb78W6latMjd4zanC3KGWHOqtAPBjhQSqrtpcvfA==\r\ncontent-length: 275\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BKJtnnKdy2bufP%2Fs%2B0BQ64qWYoJ%2BWr6MaUzEFWl64hJYAmyxczp4mvUQ75POpgZAAkKoxQgdwIuO5qcNyMc%2FExVSudv6IEspZMiyhw9eLRuVUUoTJn7182WtE%2BzYG%2Bz8L4cJK8pu5UI8\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40047daa56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba72730629079a182765bc66f1eba6ed","sha1":"be186916b3d687ddc6f4cad7258edd6ad7368570","sha256":"348b3d731b02dece7b107cf5eb9a082283bc1ece550589c534ade0481d5cb158","sha512":"ed235f827e65d0740bfec97f8ed6e01fc0b90a12dd5cfb813b3f523719dd205a37250caed0b53c89f990cf0c61603f2d96d7a8d3c9fd09c4f919040754326a31","ssdeep":"","tlshash":"b7f09af4273c05ec660b4b86aae8a0664baf71b4315f08e2a65da5f0d643d89df17804","first_seen":"2025-10-02T10:05:42.287698Z","last_seen":"2025-10-09T07:44:52.981287Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i65736d2d63686174626f742d7769646765742d70726fo65642d696e746567726174696f6e73o636f6dz.oszar.com/index.js","fqdn":"i65736d2d63686174626f742d7769646765742d70726fo65642d696e746567726174696f6e73o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.328Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /index.js HTTP/1.1\r\nHost: i65736d2d63686174626f742d7769646765742d70726fo65642d696e746567726174696f6e73o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DHnPzxr_IYrE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=CCoxdgK2dmAuUjR4t6ad6G1Sf3FLozO12TgxZYCeTRw\u0026media_oembed_control%5Bprovider_name%5D=YouTube","date":"2025-10-09T07:44:00.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DHnPzxr_IYrE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=CCoxdgK2dmAuUjR4t6ad6G1Sf3FLozO12TgxZYCeTRw\u0026media_oembed_control%5Bprovider_name%5D=YouTube\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Thu, 09 Oct 2025 08:32:00 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ihkr1yi7TrU9G3VOGkHyA%2Bjj7TAD2KIZROOPP6IUm%2FpCLDZQLSIudIRavV8c0aQ%2F2chEUGSdSKYdAKpTL9dWAFaE90MSGLXEyO6H97E6kmaU%2B2x7QTtqlq8vID6nqP%2Fhf7%2BTrUTJYrWz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\ncf-ray: 98bc40128e9156b4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T16:53:36.485058Z","times_seen":109707,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/styles/slider_big_image/public/image/2025-10/pierre-column-1920-889_color_right%20side2.jpg.webp?itok=ODze3dcb","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /sites/default/files/styles/slider_big_image/public/image/2025-10/pierre-column-1920-889_color_right%20side2.jpg.webp?itok=ODze3dcb HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/webp\r\nexpires: Thu, 08 Oct 2026 09\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 07 Oct 2025 10\r\netag: \"ac48-6408f31f76dc0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3439353963303933633837303037646163383136633162636563656131646632o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: SL2cIq0mL7DSTRoBJg7L0vx9DaDEumACocXUe5ag1jtdmzn3TrA4sw==\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9MINV2GlJOAW8lSaG6VpaebS2%2BcZQk%2BuzZ4%2FbyOeClLeU8ffcbIZXSlHgzNGlqY8upe1oq%2F4y05SYZrttJC0KOlfjb7RJ%2FsAyNM1K0imA%2BxGMvbC3YL631CU%2BZkD%2FSNJpYInfXHT%2BAtn\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40054db656b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":44101,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x889, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d29a261660db08b413a6420817ddda17","sha1":"43ec8c11de83d61f6ba9c3e189135aed9eee3071","sha256":"3be4f0c8fd32787215b5e3604f97421fe37354401d6b98fa7732cc3eea7ad17b","sha512":"42a0a1827de8b57e1b0add32c071798c7c19c1ca84d0e9988ccf7b30808bb9ff9cdaa23d530da49449e810ab53467a6c2adfd8bc2fc98fa4298401c1a6216016","ssdeep":"768:32llU9yaWRbt02u0/XJm7IRrj7w6a5fCdULpLHvhdsTQ52CrOwUObNO4gp7oohoW:Y69yaWMKZm7G/sD5fCERHvhq0PrOsVgj","tlshash":"6513f1ad6e516f8ac57da2f2f98e834233e50779295412fc80953683fd28f15af2c072","first_seen":"2025-10-09T07:44:52.98739Z","last_seen":"2025-10-09T07:44:52.98739Z","times_seen":1,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i73637269707473o636c6172697479o6d73z.oszar.com/0.8.33/clarity.js","fqdn":"i73637269707473o636c6172697479o6d73z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:44:00.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /0.8.33/clarity.js HTTP/1.1\r\nHost: i73637269707473o636c6172697479o6d73z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; scripts_clarity_ms=%7B%22HttpHost%22%3A%22scripts.clarity.ms%22%2C%22HttpDomain%22%3A%22scripts.clarity.ms%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2F0.8.33%5C%2Fclarity.js%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fscripts.clarity.ms%5C%2F0.8.33%5C%2Fclarity.js%22%2C%22GirisIP%22%3A%2213.107.246.44%22%7D; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: application/javascript;charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 08 Oct 2025 13\r\netag: W/\"0x8DE066F9A358F15\"\r\nx-ms-request-id: ee275c19-101e-0065-7164-38809f000000\r\nx-ms-version: 2018-03-28\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20251009T074400Z-177655d4c889nqcchC1IST6tz400000004a000000000a5kb\r\ncache-control: public, max-age=86400\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: TCP_HIT\r\ncontent-encoding: gzip\r\ncontent-length: 26819\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LOccZ2hpljWkqKbjHWK2RV3g4lbUJtxja1uEL5YxAJVmTm5h2BVAJTBC3mzjTfTCBlwmPRlgGpH66pJ7w5Db0umIuuLw1n%2Bul8YWkgwO%2B26iBb7LSQRZxfL9iEf3ntZuz5OuaRR83e4lGo8V\"}]}\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40119e7d56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":78490,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65420), with CRLF line terminators","md5":"222f5a85d5ae47592f07b769405567d9","sha1":"a7774145b147b9881ee3f94f9754749423638ec3","sha256":"e15d1d235049e835e8a5dc14bb753336c597d2fe156d6029f425a05bb178b53d","sha512":"b715fb7e38774348094958b0b1242db00890b5776431e4d9df245e1a73566868c82a7bd710d8109a2b1e5972a88006bce5bd3e74ddfdd55f396f1291b1b97cdf","ssdeep":"1536:YQPzHqofC4+Nvtl8HTHpn1z2sA0T+q+PGySI:pP7qofBSAXz2sA0Ty","tlshash":"4573e6dc7243707e42a760b5807f120bf23a6d4a780b5c50da66d6c43c78e9692bbf6d","first_seen":"2025-10-09T07:44:52.990454Z","last_seen":"2025-10-09T07:44:52.990454Z","times_seen":1,"resource_available":true,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i73637269707473o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i73637269707473o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i73637269707473o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i73637269707473o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i73637269707473o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PNFHQ1FTKQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:01.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=G-PNFHQ1FTKQ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 09 Oct 2025 07:44:01 GMT\r\nexpires: Thu, 09 Oct 2025 07:44:01 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141538\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":426867,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"48a7cc69bb1bde48329fea16b77b302a","sha1":"185982a8aa4b456c2a35d225f1e49c86c0a8ba0c","sha256":"00fc462ef7f9ceba8e8d4d10836a28823acdb238b3996c7568c3c171008f0904","sha512":"8dd76ae8c4fa51581032d5c22d02e0ee681d479140eea6df9b4bc4b56da2e8383c870cc8cf78f26ae21f4e410b6e161cc299ae7a943da8306dae8a7b412f3635","ssdeep":"6144:0B6wep2itv0njCnzGwXV4rvoB6b6GBQ5w0yNWXy:KyY8snjYGdoT5y","tlshash":"149419ce73d674225396f478503f018ba57b28a2b44cc89af189cde52e74a9a4137f7c","first_seen":"2025-10-09T07:44:52.993353Z","last_seen":"2025-10-09T07:44:52.993353Z","times_seen":1,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-4D2Y9B123H\u0026gtm=45je5a71v9223923711z8830280439za200zb830280439zd830280439\u0026_p=1759995838665\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1609304894.1759995840\u0026ecid=1102618926\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAAQ\u0026_s=2\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480710~115834636~115834638~115868792~115868794\u0026sid=1759995840\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fi777777o65736do6575726f7061o6575z.oszar.com%2F\u0026dt=Home%20%7C%20European%20Stability%20Mechanism\u0026en=gtm.js\u0026tfd=8387","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:44:05.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-4D2Y9B123H\u0026gtm=45je5a71v9223923711z8830280439za200zb830280439zd830280439\u0026_p=1759995838665\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1609304894.1759995840\u0026ecid=1102618926\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAAQ\u0026_s=2\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480710~115834636~115834638~115868792~115868794\u0026sid=1759995840\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fi777777o65736do6575726f7061o6575z.oszar.com%2F\u0026dt=Home%20%7C%20European%20Stability%20Mechanism\u0026en=gtm.js\u0026tfd=8387 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\ndate: Thu, 09 Oct 2025 07:44:05 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-J0YDDLDEYK\u0026gtm=45je5a71v894693559z8830280439za200zb830280439zd830280439\u0026_p=1759995838665\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1609304894.1759995840\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709~115616986~115834636~115834638\u0026sid=1759995840\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fi777777o65736do6575726f7061o6575z.oszar.com%2F\u0026dt=Home%20%7C%20European%20Stability%20Mechanism\u0026en=page_view\u0026_fv=1\u0026_ss=1\u0026tfd=3513","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:44:00.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-J0YDDLDEYK\u0026gtm=45je5a71v894693559z8830280439za200zb830280439zd830280439\u0026_p=1759995838665\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1609304894.1759995840\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709~115616986~115834636~115834638\u0026sid=1759995840\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fi777777o65736do6575726f7061o6575z.oszar.com%2F\u0026dt=Home%20%7C%20European%20Stability%20Mechanism\u0026en=page_view\u0026_fv=1\u0026_ss=1\u0026tfd=3513 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/images/play.svg","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/images/play.svg HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/css/css_pmEoZYJoqAqjEHUOEhlJ89R2_IsF5X5U3dS8iCt6t8w.css?delta=1\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyNlAuO4yAMhi-UJquVqjkOcsBNmRrMYuhjT79O0s50sulDQkown4yx_RucKwzx0sH1p91ljqXpwR5MYV2pu_s3Bc-lsQd0vnDemkR18NGkkfDRYSymJ7aH7n7TWILM3UDcA22kXMjHobFMnHs-dw53UEm9csbO5ZqAWviE8w-D80A8zKbIOQD5v9g4MEcfrb_5tiINSjCnMdI9BuymANpySdhaTpfsh31ZILZK4WDuSOi5FvXskJf-_od7EG9fUj4eUW3ZZCQonuNrxwQ9ktFcHd5gMTpNqpaI6eBfv7D4Qrig8DhWzEJ2aweikcjq8dwwP20P60Fw0dxeM1c9OcxG0I4ZeULuuGbLlUI0BXox21-6nvAcUdurhmc-y4nfZ8zvrfnYvkW-iu2b_Niq2yXp-wzZo7SffyrmSyvkVUFLaL0SAWOdLtk86vUvQlPKBfOL41Yl_xDZI4zVGw0PmQA6HZ4SoirrIZudz_I4WmGrA2BVDJEdzlCCQQOvRAvi6PG0CThAySoT2RBMYlmhWpXIYK7n00amPC_vnNiIJ8msupoEMF6-RkmAXMwOrCpIa-nGnFdjmQ8e9RMSeYhWRbZiNLfRqEN3fPptGF63zdxW5qqjbu6sLzldT50Xy0dtpW5WRRN0eEPHGHp0WmedpWXshAQZhgxpL7drvi1tjan22nZ7dI14jQ9N4lTTPFOkW7E14_NlSoK0gV0l_AdXM4eY\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/svg+xml\r\nexpires: Fri, 02 Oct 2026 08\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\netag: \"154-63fc947b0a800\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3362343630363133623536396538383066353561376265303833306364636661o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: -XjaGtHuN22acYlRgmMf28_YeKvWAK7xFKthrbIU0OjvrB2lOMS6Ng==\r\ncontent-length: 218\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RPlBCqeioBmPONILmqvmFk5ZACbbKSlffbMnfhLkdY6DpRkE4bUyCUfLpspHQPuuCDTPw5d1QYijUE87qounAKGim0Sgg5i%2F8ynAWkBqPTvTMjExnv2g%2FBpRSR3lRqmD1EOYIVvPuDUh\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40045da156b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":340,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d0544bcb4608c61d137650cd2dd65471","sha1":"fe7a93f8c449209214730120a8d9bf08be96a889","sha256":"795be479766cde96b0d0a62ade5b246a949145a742325b949333efc8dd59e2ed","sha512":"e001cfaa1cea849b338d56382dbef14b50d2a9f1505dbd06c9c5cf4c7d279352636b5b0cf3b26d0613c2cb8b6596f4afdbff82cd4d3839c4b26c355fe9fd3707","ssdeep":"","tlshash":"77e026742e0c488ed613c634997aa189432ea1bc712e09986b8c2ab0a513f2fcd4f855","first_seen":"2025-10-02T10:05:42.426836Z","last_seen":"2025-10-09T07:44:52.995824Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/images/Linkedin-25.svg","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/images/Linkedin-25.svg HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/css/css_pmEoZYJoqAqjEHUOEhlJ89R2_IsF5X5U3dS8iCt6t8w.css?delta=1\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyNlAuO4yAMhi-UJquVqjkOcsBNmRrMYuhjT79O0s50sulDQkown4yx_RucKwzx0sH1p91ljqXpwR5MYV2pu_s3Bc-lsQd0vnDemkR18NGkkfDRYSymJ7aH7n7TWILM3UDcA22kXMjHobFMnHs-dw53UEm9csbO5ZqAWviE8w-D80A8zKbIOQD5v9g4MEcfrb_5tiINSjCnMdI9BuymANpySdhaTpfsh31ZILZK4WDuSOi5FvXskJf-_od7EG9fUj4eUW3ZZCQonuNrxwQ9ktFcHd5gMTpNqpaI6eBfv7D4Qrig8DhWzEJ2aweikcjq8dwwP20P60Fw0dxeM1c9OcxG0I4ZeULuuGbLlUI0BXox21-6nvAcUdurhmc-y4nfZ8zvrfnYvkW-iu2b_Niq2yXp-wzZo7SffyrmSyvkVUFLaL0SAWOdLtk86vUvQlPKBfOL41Yl_xDZI4zVGw0PmQA6HZ4SoirrIZudz_I4WmGrA2BVDJEdzlCCQQOvRAvi6PG0CThAySoT2RBMYlmhWpXIYK7n00amPC_vnNiIJ8msupoEMF6-RkmAXMwOrCpIa-nGnFdjmQ8e9RMSeYhWRbZiNLfRqEN3fPptGF63zdxW5qqjbu6sLzldT50Xy0dtpW5WRRN0eEPHGHp0WmedpWXshAQZhgxpL7drvi1tjan22nZ7dI14jQ9N4lTTPFOkW7E14_NlSoK0gV0l_AdXM4eY\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/svg+xml\r\nexpires: Wed, 30 Sep 2026 09\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\netag: \"22a-63fc947b0a800\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3262643332613237613337396537356439613036306338633836343839623265o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: HLflHiv10BHIZcorlFrCJyyoqtqjc-wRngWDFeH0HXGSX73xYpDjVQ==\r\ncontent-length: 270\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMbpl7WgSrLSNYxyefKQNvGOP6Xj5QEsvD5nzZx7a%2BzAJmGTusdCCHRjOAUXeJP0cjK8Bz97xRqvj%2BfCLAgyH%2B1jVQQyj76XlBDUPghVDWMRJ2SaaXXwMYha7UFcdEvRV0i%2Fhpbl7rdx\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40047da956b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":554,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"12037feeb25aede861c4680ebc00913a","sha1":"c9a60a704879a9fe95aabc0d83819d8d5b0f1eda","sha256":"ab43cde0f2c6c17c793caa3cb6b9b343632993482c86f955b3c6715c178ede32","sha512":"43c236b88ae9bb68861710e89c8a18e1b35bb64be070cee3ba665eb9021e21fc333d6f21c4ede2b7546cef42895b07692547de21251a581db3901d2fedff604e","ssdeep":"","tlshash":"9ef04474927cc9dc3707450389e475eadb1f6490311b0a94803faee981cba85960bd34","first_seen":"2025-10-02T10:05:42.279622Z","last_seen":"2025-10-09T07:44:52.99798Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o636c6172697479o6d73z.oszar.com/tag/q4i31mzsxs?ref=gtm2","fqdn":"i777777o636c6172697479o6d73z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /tag/q4i31mzsxs?ref=gtm2 HTTP/1.1\r\nHost: i777777o636c6172697479o6d73z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; clarity_ms=%7B%22HttpHost%22%3A%22www.clarity.ms%22%2C%22HttpDomain%22%3A%22clarity.ms%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Ftag%5C%2Fq4i31mzsxs%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.clarity.ms%5C%2Ftag%5C%2Fq4i31mzsxs%22%2C%22GirisIP%22%3A%2220.250.198.32%22%7D; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g0$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: application/x-javascript\r\ncache-control: no-cache, no-store\r\nexpires: -1\r\nrequest-context: appId=cid-v1\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 477\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9aUWdKn%2BKscOALzSsFq4RB0mMLxgveryLxRhY4s9S7XCteTj7HHfwMAMvD7Tbr3LrTVaIrzYeDZPE8QGKiAJ5JrX1owk3Sv6X9LvVpVKrUj0Uw%2FOzftS64pghVwGFQx7EvKaNw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc400eae4456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":727,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (727), with no line terminators","md5":"dc93485fbcf8b60dfedeff958c38a80e","sha1":"6b6b65715d1430cc743f450bdf5d6309f9515a4c","sha256":"718bf91b16ac2481a39bee428902cfbf98c37a0307cc1eff45b23ccee2fe643b","sha512":"92deb6e015336bd5d70091cd516f7e48351289c489fe2738229b3b56162e6b44163697ae13dae6402aa22d60585df4cdc2621622a7f38af8124776a294290cf4","ssdeep":"","tlshash":"94014435204ea47567bab09433ebdb047877121e11181103e59fc976662cfcb61e388e","first_seen":"2025-10-09T07:44:53.002047Z","last_seen":"2025-10-09T07:44:53.002047Z","times_seen":1,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/css/css_O1n-fULVPhrNtb0ZsQ6GxhbpmBCzI6qKmYbZ_H5g_M4.css?delta=0\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJzLTU3JTNTPT81NSk3RSytKzE0FAEDoBtU","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=770\u0026max_height=433\u0026hash=iTRAyQa3AeIiqUeahtXarnWb21_0TxNsH-BYMy2WmlA\u0026media_oembed_control%5Bprovider_name%5D=YouTube","date":"2025-10-09T07:44:00.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /sites/default/files/css/css_O1n-fULVPhrNtb0ZsQ6GxhbpmBCzI6qKmYbZ_H5g_M4.css?delta=0\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJzLTU3JTNTPT81NSk3RSytKzE0FAEDoBtU HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=770\u0026max_height=433\u0026hash=iTRAyQa3AeIiqUeahtXarnWb21_0TxNsH-BYMy2WmlA\u0026media_oembed_control%5Bprovider_name%5D=YouTube\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: text/css;charset=UTF-8\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 30 Sep 2025 12\r\netag: \"8c-6400447f6b7b0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 07 Oct 2026 06\r\nvary: Accept-encoding,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3932663436633632613836663132346136643961376365313066323838666261o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: qb9HrDa_MvYw3a8pKx00VobsZGRibTcGUqQVX8rCv5akZlJSHbvQFg==\r\ncontent-length: 160\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B1ak8QlHb5ccfJKOLojWJgIlxzgODKh8eo0PFliN%2FgImEUqutd5NjOW0w9L%2FUAHKBZGbRBdJ9j0Ozfm2x8J7UWgu61GGUZQOvUzBmvh%2Fsei3J1iZtaCVSr%2BnrEJgL7V6xnHk%2BTucsUON\"}]}\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40127e8f56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":164,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"13c673c3ae136b2937d45629dd20b584","sha1":"49c0aba0a214a08a91ff1540a2ab5c86e4a252ab","sha256":"6233db2b3c979797e18dc3bdc806adf3977cdab6124f408a7d3fd7eb280883ad","sha512":"4a60807d4de11e3b570454dcb4c1ee65ae3e5f89b79459907cc8ad13397cac831f5a1f7db6028c2bcd67ce9c3c245a6d3bfdb07e2f2699019d693db748951923","ssdeep":"","tlshash":"35c080321671f52d580e735296a5454d2110841d7db10509870f774dc4df46174181f0","first_seen":"2025-10-02T10:05:42.292216Z","last_seen":"2025-10-09T07:44:53.007313Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:06.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nX-User-Agent: grpc-web-javascript/0.1\r\nContent-Length: 24\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Referer\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RevptaHSxRJPVnEdpG86lQ5FmxiUCYWYDEDNyr0rNhc1V1ZYxoKotKqR3OFj7P0nOe4uIfjwzt%2BKUOQc8LxpJ7gaFm8%2Fo9nBbpGRHBGHujSxNzRUijDnmklf0VGI4ihxJLRb3PuL%2Ba7u7hyQrVdhbGzM\"}]}\r\ndate: Thu, 09 Oct 2025 07:44:07 GMT\r\nserver: cloudflare\r\nset-cookie: jnn-pa_googleapis_com=%7B%22HttpHost%22%3A%22jnn-pa.googleapis.com%22%2C%22HttpDomain%22%3A%22jnn-pa.googleapis.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fjnn-pa.googleapis.com%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GirisIP%22%3A%22142.251.140.42%22%7D; Path=/; Domain=i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:42:00 GMT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc403a694856b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":12909,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"ASCII text, with very long lines (12909), with no line terminators","md5":"2d08a4e00ffb7a60a4eb4cfd56a7c6f2","sha1":"d80bd622cc3c8caa84f6e98bd37fdd224c640bb2","sha256":"c038b34dee55a466c15b281f485185f76946beeb35dafa264d631a3e328dfae5","sha512":"b6416210d15942032c3ee60da93018ea39671d45ac39fe92e3b623a008b19da2908f0edd7b9a331d3d9fa7f5bbd166e7777eb4e6285af914334a8df2a7b19469","ssdeep":"192:mxM11xPflhQaUXgMH16qGgWIhEuo+LGEIcfLL9xp51wwpRdSP/wChgXhPtvkwgMG:mKPflAxH16h8e5+qENl7515ly/LubzG","tlshash":"2642b75af80eb10476890259ce48b69ee737d98050604ce85207e73996fcb87df5db8f","first_seen":"2025-10-09T07:44:53.011189Z","last_seen":"2025-10-09T07:44:53.011189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:57.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Thu, 09 Oct 2025 08:31:57 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vnxjeyBfgSWtXPL9OZ7g7OLsLbyzXxjfUJJkX4unQjdu0y0iEvmSM45q%2BgV7MShFCOAve2PUFeXPrzBBGrVnYcZcAkJclhuz%2FJ%2FUlocHh%2FAyJNY9iJy4b8xbk758iTOXPJ4bXF%2Fxoyh4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 07:43:57 GMT\r\ncf-ray: 98bc40007d4e56b4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-26T18:16:38.466911Z","times_seen":351919,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/css/css_O1n-fULVPhrNtb0ZsQ6GxhbpmBCzI6qKmYbZ_H5g_M4.css?delta=0\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJzLTU3JTNTPT81NSk3RSytKzE0FAEDoBtU","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=1920\u0026max_height=889\u0026hash=xWhLk7Ki-rPBwB_EPDITkxWUpG5V83Ou8MnuaDYyfjM\u0026media_oembed_control%5Bprovider_name%5D=YouTube\u0026media_oembed_control%5Bsettings%5D%5Bvideo_autoplay%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bloop%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bvideo_background%5D=0","date":"2025-10-09T07:43:59.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /sites/default/files/css/css_O1n-fULVPhrNtb0ZsQ6GxhbpmBCzI6qKmYbZ_H5g_M4.css?delta=0\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJzLTU3JTNTPT81NSk3RSytKzE0FAEDoBtU HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=1920\u0026max_height=889\u0026hash=xWhLk7Ki-rPBwB_EPDITkxWUpG5V83Ou8MnuaDYyfjM\u0026media_oembed_control%5Bprovider_name%5D=YouTube\u0026media_oembed_control%5Bsettings%5D%5Bvideo_autoplay%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bloop%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bvideo_background%5D=0\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: text/css;charset=UTF-8\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 30 Sep 2025 12\r\netag: \"8c-6400447f6b7b0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 07 Oct 2026 06\r\nvary: Accept-encoding,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3932663436633632613836663132346136643961376365313066323838666261o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: qb9HrDa_MvYw3a8pKx00VobsZGRibTcGUqQVX8rCv5akZlJSHbvQFg==\r\ncontent-length: 160\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zj7m24LdXHqazQTUBeUEJsWRlM4oqqimkyBeOXhzRZgZ%2FTcV%2Bxe2fIgopiUre0AYDMblBFURN29crItkknJJoiPMmHWFkyHzQHa9tNBOgr89c16d5xVcW83P33KLfgnEl%2BFRB6m5l3kI\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc400c3e2d56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":164,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"13c673c3ae136b2937d45629dd20b584","sha1":"49c0aba0a214a08a91ff1540a2ab5c86e4a252ab","sha256":"6233db2b3c979797e18dc3bdc806adf3977cdab6124f408a7d3fd7eb280883ad","sha512":"4a60807d4de11e3b570454dcb4c1ee65ae3e5f89b79459907cc8ad13397cac831f5a1f7db6028c2bcd67ce9c3c245a6d3bfdb07e2f2699019d693db748951923","ssdeep":"","tlshash":"35c080321671f52d580e735296a5454d2110841d7db10509870f774dc4df46174181f0","first_seen":"2025-10-02T10:05:42.292216Z","last_seen":"2025-10-09T07:44:53.007313Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i666f6e7473o67737461746963o636f6dz.oszar.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"i666f6e7473o67737461746963o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:00.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: i666f6e7473o67737461746963o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 07:44:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15343\r\nx-powered-by: PHP/8.2.21\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Thu, 08 Oct 2026 03\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 16 Oct 2017 17\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nset-cookie: fonts_gstatic_com=%7B%22HttpHost%22%3A%22fonts.gstatic.com%22%2C%22HttpDomain%22%3A%22fonts.gstatic.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fs%5C%2Froboto%5C%2Fv18%5C%2FKFOmCnqEu92Fr1Mu4mxK.woff2%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Ffonts.gstatic.com%5C%2Fs%5C%2Froboto%5C%2Fv18%5C%2FKFOmCnqEu92Fr1Mu4mxK.woff2%22%2C%22GirisIP%22%3A%22216.58.212.3%22%7D; Path=/; Domain=i666f6e7473o67737461746963o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:54 GMT\r\ncf-ray: 98bc4013ceacc759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":15343,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"4bb85bd5f1bd1ed55457ccfabdfa10b7","sha1":"2ee726760bcab1645487325950b8e914f2fafb07","sha256":"65b539a25082aa481e31ef0aa09c2950de59504a203eff4601966d7791a17a88","sha512":"b3b6fe5abb521ac7bdc20fe0b3dae042ff20c2e241a05e87e892fff02259d83b226e8dc33c8eda16e290309045415cffb279f80480043a7b13e4c36d78fc3cf4","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/e:cqrVO++tw/9CICFbQLlxe","tlshash":"2462e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"2025-06-21T10:27:34.662214Z","last_seen":"2025-10-09T07:44:53.016198Z","times_seen":3,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":53,"dns":35,"connect":1,"send":0,"wait":476,"receive":39,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_ias.vflset/en_US/remote.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","date":"2025-10-09T07:44:01.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/player/38e0f4b0/player_ias.vflset/en_US/remote.js HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-type: text/javascript;charset=UTF-8\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\"\r\nexpires: Fri, 09 Oct 2026 07\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Oct 2025 04\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 42083\r\ndate: Thu, 09 Oct 2025 07:44:02 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncf-ray: 98bc401a2f0656b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124208,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (540)","md5":"5d12333ed9568e64057efd04329012c2","sha1":"bca2c8cae363cca0bb5341df1ca66a8ed1609580","sha256":"98dc2e664f296cac5470274e19ed5b6426623e3920a3d900540e7ab7da53b5f8","sha512":"4ec1ca4f53389fe92fc3b8966e3863bd41256b1365c5d3c06584e087d6de8c6dc55f43691d93597bd1e22e675650dd55acf564664c7219d9a12748a6da81273d","ssdeep":"3072:bfUrbVbsgsFzP6fNuXWKgDC6Tv2tIdgJb3yP2hx4mXjjYlyW7:bfUNbkFL6fNuX7g9Tv2tIdgJb3yP2hxQ","tlshash":"61c3e8acf651b42122b3f4761c3f2009963b54a4a885435c764adcd68cb8d5f923bff9","first_seen":"2025-10-09T07:44:53.020052Z","last_seen":"2025-10-09T07:44:53.020052Z","times_seen":1,"resource_available":true,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-KDHGVQDDS2\u0026gtm=45je5a71v894693559z8830280439za200zb830280439zd830280439\u0026_p=1759995838665\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1609304894.1759995840\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709~115616986~115834636~115834638\u0026sid=1759995840\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fi777777o65736do6575726f7061o6575z.oszar.com%2F\u0026dt=Home%20%7C%20European%20Stability%20Mechanism\u0026en=page_view\u0026_fv=1\u0026_ss=1\u0026tfd=3545","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:44:00.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-KDHGVQDDS2\u0026gtm=45je5a71v894693559z8830280439za200zb830280439zd830280439\u0026_p=1759995838665\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1609304894.1759995840\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709~115616986~115834636~115834638\u0026sid=1759995840\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fi777777o65736do6575726f7061o6575z.oszar.com%2F\u0026dt=Home%20%7C%20European%20Stability%20Mechanism\u0026en=page_view\u0026_fv=1\u0026_ss=1\u0026tfd=3545 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=770\u0026max_height=433\u0026hash=iTRAyQa3AeIiqUeahtXarnWb21_0TxNsH-BYMy2WmlA\u0026media_oembed_control%5Bprovider_name%5D=YouTube","date":"2025-10-09T07:44:00.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /embed/pIyTAxHfb7Y?feature=oembed HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy-report-only: script-src 'unsafe-eval' 'self' 'unsafe-inline' https\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: require-trusted-types-for 'script'\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_other\"\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreport-to: {\"group\"\r\norigin-trial: AsnbWYr3bqK88n/C2BgXPMpBC+msV4jf6vsgnAir+gFnHw3zXZEKmz271E4vhxTja+7SD2q3dr2BxZlHzvj9HA0AAACBeyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUtbm9jb29raWUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\nserver: cloudflare\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=4,cfOrigin;dur=374, cfExtPri\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 98bc4012ce9356b4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":118705,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (57414)","md5":"ce2a4272931a231b535fea0b8c32ae51","sha1":"1e2262c76c08002ecd1c12bbbf69d6b4cd8226d5","sha256":"baebb59acca4a86f11cc454eac29e5b2746c42300598028f9c8cca8c5e2eeae8","sha512":"70e960d053cfe45bd398f01448e877e8894520b92cbbcd37908ee95cfb482f802cdb68f5f5e6abf6c7a6847815f1b276d7d35c195106c9448f21eb0f08580d1b","ssdeep":"1536:x6i5k3kMVEcv+WyQDv/ZCIZhuvJMgBGylMD4yF6X5Cy7Lal54BKer:Jniyl+cJDG3D3dIa/Sr","tlshash":"76c3f8640868a8729493d447edf9ff3e9cf8027a4ac5996ebcbb875c01ec6510e9f413","first_seen":"2025-10-09T07:44:53.022904Z","last_seen":"2025-10-09T07:44:53.022904Z","times_seen":1,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/favicon.ico","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/favicon.ico HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g0$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/vnd.microsoft.icon\r\nexpires: Wed, 30 Sep 2026 07\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\netag: \"3c0b9-63fc947b0a800\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i6535326263663133343864383435626639636261323661333262666136333636o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: t1fqxuUU7yd7g2d2oVRDlTNfMy4JCy4wKtv0mpfEDNakkLAKb-sDcA==\r\ncontent-length: 12058\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BkTKFPM9m00lqLhTeLBh8CRlWhrbDV9rJvijU2p1NslhrNmo4KhL6yPN0qLZXbQq%2F53Rwc6OHeY8Z9o7CooevlpUXyW7XEG0NcDYC7HDBEnvI%2BWHXIpxpMByGoW1wBRoMOsPh918JncJ\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nserver: cloudflare\r\nage: 596345\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc400e5e4056b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":245945,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 6 icons, 16x16, 32 bits/pixel, 256x256 with \n- PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"7ec03ebf9613b5e2c3c39a6c3c577d08","sha1":"b3d85433514821a8e2f0e82bba1ec5e1e96ccd15","sha256":"46b867c5d01c208afcc17b8381fa0855025452c6f9f282fb2070207c2cb05b9d","sha512":"67bdc08e0bf7f26f911bb03ec53a7d3689c1ad3e79dfc9371d5c5abbedc56e3bddc76161bc2aa224dbb12bfede02ad6271179a90acd80ab1f13789213d24d7b7","ssdeep":"384:OtvWthyZHXaq6sew9rjPmm0bPseeeeeeeeeT8/GARweg6JT+orw:OlWthkX7OhQGegsT+orw","tlshash":"7234a7d63599f041cbe0aab4fe86a23f4ae70e207540e1076bb07e4d3b7261b9734756","first_seen":"2025-10-02T10:05:42.336346Z","last_seen":"2025-10-09T07:44:53.025387Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:04.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 07:44:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: content-type,x-goog-api-key,x-user-agent\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2VTvZUARle13VbIc1Luh2qw9o99AsMN2slVImJUJLcfT0EQKKATSrpCAf84eO4Vejq4Jm8YJfC8Exj8fMMmJvy5EJMrmoPEuKn712a40N3iUfZatno42UTuITZQUr09LPTDE%2BxPiGI7MXbch4I60oenZxXs%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98bc402efddfc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:05.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nX-User-Agent: grpc-web-javascript/0.1\r\nContent-Length: 24\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 07:44:05 GMT\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-credentials: true\r\nvary: Referer\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LogScm%2F%2BpFR9J4FaxM%2BriRUjTBzp54QOutOx75ffAjlfVYv2UeQ2xgeR65OH8GbZMq%2FDLBvxC9xDD5MHW5Vu0YMfIKmDWxNO9lkRSSvylC0kuQi4%2Fv2XcGJo6CXkZH5GHMWWpi8u78mtB3sEkTj%2BQNYE4tE%3D\"}]}\r\nset-cookie: jnn-pa_googleapis_com=%7B%22HttpHost%22%3A%22jnn-pa.googleapis.com%22%2C%22HttpDomain%22%3A%22jnn-pa.googleapis.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fjnn-pa.googleapis.com%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GirisIP%22%3A%22142.251.140.42%22%7D; Path=/; Domain=i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:58 GMT\r\ncf-ray: 98bc40304953c759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":12909,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"ASCII text, with very long lines (12909), with no line terminators","md5":"2d08a4e00ffb7a60a4eb4cfd56a7c6f2","sha1":"d80bd622cc3c8caa84f6e98bd37fdd224c640bb2","sha256":"c038b34dee55a466c15b281f485185f76946beeb35dafa264d631a3e328dfae5","sha512":"b6416210d15942032c3ee60da93018ea39671d45ac39fe92e3b623a008b19da2908f0edd7b9a331d3d9fa7f5bbd166e7777eb4e6285af914334a8df2a7b19469","ssdeep":"192:mxM11xPflhQaUXgMH16qGgWIhEuo+LGEIcfLL9xp51wwpRdSP/wChgXhPtvkwgMG:mKPflAxH16h8e5+qENl7515ly/LubzG","tlshash":"2642b75af80eb10476890259ce48b69ee737d98050604ce85207e73996fcb87df5db8f","first_seen":"2025-10-09T07:44:53.011189Z","last_seen":"2025-10-09T07:44:53.011189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":311,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:09.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nX-User-Agent: grpc-web-javascript/0.1\r\nContent-Length: 24\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Referer\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2kYexzbkIG9mA0jKv%2BpefDT65xvY2xTGwpkSFpFrymiz%2BcptwlVaqo9E4XEh7UfZRLCl1TmBdi6bBzBbX08qwhHDh3zXB5i%2FZOwZYFZlqmSGp285i6u%2B9qPiago6qERfV7XsTdVt%2ByWMKBRsVcOJjgwN\"}]}\r\ndate: Thu, 09 Oct 2025 07:44:09 GMT\r\nserver: cloudflare\r\nset-cookie: jnn-pa_googleapis_com=%7B%22HttpHost%22%3A%22jnn-pa.googleapis.com%22%2C%22HttpDomain%22%3A%22jnn-pa.googleapis.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fjnn-pa.googleapis.com%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GirisIP%22%3A%22142.251.140.42%22%7D; Path=/; Domain=i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:42:02 GMT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc404ae9c956b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":12909,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"ASCII text, with very long lines (12909), with no line terminators","md5":"2d08a4e00ffb7a60a4eb4cfd56a7c6f2","sha1":"d80bd622cc3c8caa84f6e98bd37fdd224c640bb2","sha256":"c038b34dee55a466c15b281f485185f76946beeb35dafa264d631a3e328dfae5","sha512":"b6416210d15942032c3ee60da93018ea39671d45ac39fe92e3b623a008b19da2908f0edd7b9a331d3d9fa7f5bbd166e7777eb4e6285af914334a8df2a7b19469","ssdeep":"192:mxM11xPflhQaUXgMH16qGgWIhEuo+LGEIcfLL9xp51wwpRdSP/wChgXhPtvkwgMG:mKPflAxH16h8e5+qENl7515ly/LubzG","tlshash":"2642b75af80eb10476890259ce48b69ee737d98050604ce85207e73996fcb87df5db8f","first_seen":"2025-10-09T07:44:53.011189Z","last_seen":"2025-10-09T07:44:53.011189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/js/js_HlQVDtS98WilbnZS3AwZg-gUhfWgD2ZDl3j7OuMYvZM.js?scope=footer\u0026delta=0\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyFU9GyozAI_SE1-7Lfk8EELS0GJyG2_ftLtb29td29MxmFcwjhQAIxqkC6Orgb3ZAladNDOHkVW7P7YftjaYKw5F4uLuIAlfUb8JSYErqd_-RZILoXz7iMLuY6A3cqNRxwwaSlVSzaYJl8DwXdw3hHusHSKKXRT5jqyocDaC_qftieacE3siDkcHhySZQGCpZOUrHsKWF2_yLWHWfriB5wMs0MmfS6R2tRsUJZwqnT64wd9FLVLxRRyq_BlBZrg2SfkbfDf93CmOKtGyrCJ9Jd_NpcHyDHHbEN_RUbWXrg9rg_9BtvDwj7RAxXE7jV0lfiiNn6HG7F_ydykJqDVJ6SV-iL__vH1j6eysfSb3PfskxA6XkNPkUU63sP2Q-Uy15ukojdQnju1un4oTKXkBH3hWccTU13E_92Ddb9ZYKsfoCgxRemNar6IHIitN80M0EKNo0PYIMXtUdzeryJu9uMIiOjdWd0o332fgdHuLyCU1PIsqKfZa7zdkeK-4A1t6KLPdaBEil6Ey3Mq5TSPtB2Q5sz9oPkyd3_XSRgGb8ACYWv7g","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /sites/default/files/js/js_HlQVDtS98WilbnZS3AwZg-gUhfWgD2ZDl3j7OuMYvZM.js?scope=footer\u0026delta=0\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyFU9GyozAI_SE1-7Lfk8EELS0GJyG2_ftLtb29td29MxmFcwjhQAIxqkC6Orgb3ZAladNDOHkVW7P7YftjaYKw5F4uLuIAlfUb8JSYErqd_-RZILoXz7iMLuY6A3cqNRxwwaSlVSzaYJl8DwXdw3hHusHSKKXRT5jqyocDaC_qftieacE3siDkcHhySZQGCpZOUrHsKWF2_yLWHWfriB5wMs0MmfS6R2tRsUJZwqnT64wd9FLVLxRRyq_BlBZrg2SfkbfDf93CmOKtGyrCJ9Jd_NpcHyDHHbEN_RUbWXrg9rg_9BtvDwj7RAxXE7jV0lfiiNn6HG7F_ydykJqDVJ6SV-iL__vH1j6eysfSb3PfskxA6XkNPkUU63sP2Q-Uy15ukojdQnju1un4oTKXkBH3hWccTU13E_92Ddb9ZYKsfoCgxRemNar6IHIitN80M0EKNo0PYIMXtUdzeryJu9uMIiOjdWd0o332fgdHuLyCU1PIsqKfZa7zdkeK-4A1t6KLPdaBEil6Ey3Mq5TSPtB2Q5sz9oPkyd3_XSRgGb8ACYWv7g HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: text/javascript;charset=UTF-8\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 30 Sep 2025 12\r\netag: \"de4b-64003fa0bba00\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 07 Oct 2026 06\r\nvary: Accept-encoding,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i6639613562643539656562656561343135313866313731666666386262396236o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Ijs-JaBYRyRswnMMCiSpAz9Ze8nFUK18RRqiLBMa_jhdBu7rcGIMMA==\r\ncontent-length: 57224\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s4tm7PgBBGwqIEO4XcMJfL3y%2BIS8Zbdvco9rpukkmO9jRXDYu2ur89KkNT14Kd%2FhSkyXpyVjc%2BRauDhASwRLrdNaGUCV98Xz91SWx%2B079psmB38y1wqOAD0CvbonBU1pwOoEtP9%2FCJJn\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40056dbc56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189525,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65327)","md5":"78ad33906e304e2cb9ef7c01d10c3edc","sha1":"3b431ca191f6c3b06c549b4a0855aa58716a88be","sha256":"fc9476ff3f90a45cec94e407e865eb7dfd0edad96aa7192f57d55bc75acc9ca6","sha512":"72c54da470e87946639421050c49422dbca7cccfcebd6ddf755f973da02844c46b7b2e2de3432fb47febbc1d24489ec5345e517cca1f7d64c0b526e14b0284a1","ssdeep":"3072:vHNwcv9VBQpLl88SMBQ47GKBa3WD4ghhJw9ktMkvZ:vHWK9VC78UBQ47GKQg+OCkvZ","tlshash":"760418ce7345312256eba2b9102f660fb236455da90d8448f16cc8deacbce496277f7c","first_seen":"2025-10-02T10:05:42.446332Z","last_seen":"2025-10-09T07:44:53.027754Z","times_seen":2,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/js/clarity.js?t3eiuv","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/js/clarity.js?t3eiuv HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: text/javascript;charset=UTF-8\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 07 Oct 2026 12\r\netag: \"11a-63fc947b0a800-gzip\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3134353633323666336234343334323966663663643364646266656664366461o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: mZ3JOZrn444iKtnQcmHGdbTDT8uxke3uTzO5h5eE35MWq1GLYt9CNA==\r\ncontent-length: 253\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zaj%2Blvpvs7E8E544yteo25in%2FLN%2B40mDzbIOTPC%2BHN6eYyaYNqoUWOPdVSXrp6YVbF%2FrGBB1s5Kgr4H%2FaXKttemNPPZj9mPQsrIG%2B73VO7prl6gz2yHeI4ZiSoZjVSIOnCSC%2BxdIUL3r\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40056dbf56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":305,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"6a56d237f8911ac24b8ee4ab2359696e","sha1":"1fdeaeb01174789957fc51856aa78ebae9a35d0a","sha256":"bd544d8f59ce055b3828fe7b7e8fb77422a52b62e6493e35cd40195c33d924b6","sha512":"e3a9302c2c08ddb2a8bd893560102253d0865c134723601b66556f58a864d95ac57d4bb1bd05449d065b72473bd08a6c3d52f45c2a60d14007b187e5658c1b0d","ssdeep":"","tlshash":"5ee07d4d30c55027067600b563b7534924263e3ad489cf52495fc9d646688a504c24cc","first_seen":"2025-10-02T10:05:42.436871Z","last_seen":"2025-10-09T07:44:53.030747Z","times_seen":2,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/styles/512x288sc/public/image/2023-12/ESM-1920-889-5.jpg.webp?itok=AMuEPLc8","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /sites/default/files/styles/512x288sc/public/image/2023-12/ESM-1920-889-5.jpg.webp?itok=AMuEPLc8 HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/webp\r\nexpires: Thu, 01 Oct 2026 19\r\nx-content-type-options: nosniff\r\nlast-modified: Thu, 19 Jun 2025 14\r\netag: \"13fa-637edb8664d68\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3364323065313339396236346336356164393030326162393863353034636461o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 0Wx-6Bjcvn-SQXGJ98SAGzKYay65fdB-2GfzA5sFGHyKikdEZY1Z5Q==\r\ncontent-length: 5111\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yW7vsOiXtvNJBnTzcuCaCsVwN%2BLH1MWs7Xb4518sk%2B%2Fgsh2yZxLsLEMq2DF274xc%2BGCiR3hJPkpF2U2u4vZzMxY0Jc3jqyZQzbQsy%2FdtOHXfyrwOLLy1AwiJYeSJCQplWNjG%2FogIvcRj\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bc400b6e2156b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5111,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x288, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"03a830296e438dda32e7e0008d9f926a","sha1":"50024f263ea7f1d64571096c900dc2be11aa1264","sha256":"f7c42f73b7c63cd78113b588018189307274e1375d8ce1280361a37bd13ff332","sha512":"470c75c9e7902a609fc472d098f32592c94600ee2fd56dd3830f08d5677c91545e05cf5df2f42f9ee1f2feb999becf420ac87ed98b31895c5153d9630ca7ccf2","ssdeep":"96:s3OhMyZPmVlrNaOt+R50JN7uVwAOxM2CfCO78/aa9XAgMDME4/yrMFh:CO/ZOVuMy0H7sdaOh4EDDrMFh","tlshash":"25b17ce6cb9b6adbedc7656cff1c2a533d932ce88125633582044228741e16016663dc","first_seen":"2025-10-02T10:05:42.289788Z","last_seen":"2025-10-09T07:44:53.032323Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/styles/slider_big_image/public/image/2025-10/2024%20carbon%20footprint%20report%20-1920-889.jpg.webp?itok=72VcINei","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /sites/default/files/styles/slider_big_image/public/image/2025-10/2024%20carbon%20footprint%20report%20-1920-889.jpg.webp?itok=72VcINei HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/webp\r\nexpires: Tue, 06 Oct 2026 12\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 06 Oct 2025 06\r\netag: \"120fa-64077b3323590\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i6639613562643539656562656561343135313866313731666666386262396236o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: jP1wue9jNEhLMKArb8PA_0wRdElCQbG08Q9F03gsxCgV1mq1cI2GWQ==\r\ncontent-length: 73974\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9UAusE5oNEy95OTuMBKfQ2KJw1o%2BtdrDoPYCp2pTfWOXx0e%2BplEUt%2FRuhxjxx1tId2F8b32vV0EZMCNURK8XKR9ZsXxdtfmo0ktj7uCMggKrjNuusm4UvDg6MH6IBRWqW3WZJ9UtOoyx\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bc400b7e2456b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":73974,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x889, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"16453eb2a144e8bbd9ec5f9c597515e3","sha1":"fe2aafbc253c1dd43600ccd287f533115354f60b","sha256":"573437c0cae5e4313f887bb86d9e5651487c6d2263531bb759b0bf42faeb4d6b","sha512":"1f1f88bdc7c9e74d2cd72f9166f11a932f436058f272d97cd2cd12f22d99ffec3e53aa9116827223c695f04c258c9a4edcbae471ff9b1bb618bad12624a51f60","ssdeep":"1536:eyHQncTtdQE8GZByKw0Sw5OHuWbWwKhmxoeKh8jNyK:0mtdQE8GZByKPwuWibh80K","tlshash":"7e73f11179b408a7becea5655402f086fe25c5127310eef3190be3b963618d05fb7bae","first_seen":"2025-10-09T07:44:53.034604Z","last_seen":"2025-10-09T07:44:53.034604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_ias.vflset/en_US/base.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","date":"2025-10-09T07:44:01.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/player/38e0f4b0/player_ias.vflset/en_US/base.js HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-type: text/javascript;charset=UTF-8\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\"\r\nexpires: Wed, 07 Oct 2026 12\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Oct 2025 04\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 928075\r\ndate: Thu, 09 Oct 2025 07:44:01 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\ncf-ray: 98bc4016bee156b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2636935,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1100)","md5":"4d209eb3ed72085fc52ef742427fe05f","sha1":"9a55353fef56ca9eaf3b28528099299ce7c3e9cd","sha256":"c632e9eb10115eebb73360d71e159f1cb024792719be2f65e2e6de71b7462aa4","sha512":"1609b0d7d0164403ec0361e8cf303c27a503456c24826db01d863820958fa17ddd7ad0a94a498118f2321fed0c3ef55bcc769556cf2849884dfc9f242296e5a4","ssdeep":"12288:9JJ7aNnKwAJJFqxZf1DlN1F9SqfgbGL+s050OyUlBO/:cRKwA4Zf1xodTYUHO/","tlshash":"c6253bdcb2a7b8515373f0b6482f2206b13b645458499a1cf256ead9acb0c1ed13ffb4","first_seen":"2025-10-09T07:44:53.036045Z","last_seen":"2025-10-09T07:44:53.036045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:14.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: content-type,x-goog-api-key,x-user-agent\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B2oifCE%2FknzE17Zw%2F732QXvkUKbiJjFUe5DudFB9RRgsc%2FpbuC9N1pTwiQURNdY32pdTEvOt0gE0%2F47SF8FqV3o6TMQ%2B6MNfiLTNy45i8uILJm%2FaMCXIu%2BY%2BH0%2FzmU5kxoZq07MKmvuEgkCEB%2FtJ0k6h\"}]}\r\ndate: Thu, 09 Oct 2025 07:44:14 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc4067db7356b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DHnPzxr_IYrE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=CCoxdgK2dmAuUjR4t6ad6G1Sf3FLozO12TgxZYCeTRw\u0026media_oembed_control%5Bprovider_name%5D=YouTube","date":"2025-10-09T07:44:00.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /embed/HnPzxr_IYrE?feature=oembed HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy-report-only: script-src 'unsafe-eval' 'self' 'unsafe-inline' https\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00\r\nstrict-transport-security: max-age=31536000\r\norigin-trial: AsnbWYr3bqK88n/C2BgXPMpBC+msV4jf6vsgnAir+gFnHw3zXZEKmz271E4vhxTja+7SD2q3dr2BxZlHzvj9HA0AAACBeyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUtbm9jb29raWUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nreport-to: {\"group\"\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_other\"\r\ncontent-security-policy: require-trusted-types-for 'script'\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\nserver: cloudflare\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=4,cfOrigin;dur=481, cfExtPri\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 98bc4012ee9756b4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":117028,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (57414)","md5":"6fa3f91bf56fcecf6399648659867d7f","sha1":"4d4146634d5a962ec594a6cf2275c5521e758d7a","sha256":"4beae5067885a22586974d7a02f27748fa1d2b9bfbbc5d4e121c654ee9ea26c5","sha512":"da111cc65a3400d18aafe1155080726c6a762211da5d8bf636fc7540e3308fab93832df529e7b3cd846d6d758dbec827c13f130e06408d963e78f2f3f1f95763","ssdeep":"1536:IZiPc3xVEWOcyClv/ZrIZhz7s99BYYbcj0JmjKueWaifaVymz:ByyU+z7kY9oLZUyz","tlshash":"67b3f8640c68a8729893d447edb9ff3e9cf812794ac5996ebcbb835c01ec6510e9f413","first_seen":"2025-10-09T07:44:53.037413Z","last_seen":"2025-10-09T07:44:53.037413Z","times_seen":1,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_es6.vflset/en_US/base.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:01.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/player/38e0f4b0/player_es6.vflset/en_US/base.js HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-type: text/javascript;charset=UTF-8\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\"\r\nexpires: Fri, 09 Oct 2026 07\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Oct 2025 04\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 834993\r\ndate: Thu, 09 Oct 2025 07:44:02 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncf-ray: 98bc40169edd56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2371176,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1425)","md5":"9652d2f99c264f6b2b26c361f08a0253","sha1":"8bf9f082fd253a6ad139c54cc71368b8c3c9be95","sha256":"0f8d015d14740c631e44ecb4ec630dcec2f56c4fe1c74ef9b95e4786fb39c90e","sha512":"deee5312d01891500f00685b395e85af5970d9871013c13751d9d6b3e3cdf59b4838bc6f2e7af4f57bc8218cebc13c0f62b06a987b5f9d5451655090c21e64f8","ssdeep":"12288:9lwvk2yrr59Zbc9zzfj9enVLhBpgK31qm6pcWF:9Wsdrr59Zb6zbj9UL7XQF","tlshash":"83253be87293b85247a7b0b2483f220af27f4810744ad858f15ae6696cb5c5fc57ff48","first_seen":"2025-10-09T07:44:53.039046Z","last_seen":"2025-10-09T07:44:53.039046Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1246,"receive":1227,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_ias.vflset/en_US/base.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:00.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/player/38e0f4b0/player_ias.vflset/en_US/base.js HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-type: text/javascript;charset=UTF-8\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\"\r\nexpires: Wed, 07 Oct 2026 12\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Oct 2025 04\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 928075\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: 98bc40136ea056b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2636935,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1100)","md5":"4d209eb3ed72085fc52ef742427fe05f","sha1":"9a55353fef56ca9eaf3b28528099299ce7c3e9cd","sha256":"c632e9eb10115eebb73360d71e159f1cb024792719be2f65e2e6de71b7462aa4","sha512":"1609b0d7d0164403ec0361e8cf303c27a503456c24826db01d863820958fa17ddd7ad0a94a498118f2321fed0c3ef55bcc769556cf2849884dfc9f242296e5a4","ssdeep":"12288:9JJ7aNnKwAJJFqxZf1DlN1F9SqfgbGL+s050OyUlBO/:cRKwA4Zf1xodTYUHO/","tlshash":"c6253bdcb2a7b8515373f0b6482f2206b13b645458499a1cf256ead9acb0c1ed13ffb4","first_seen":"2025-10-09T07:44:53.036045Z","last_seen":"2025-10-09T07:44:53.036045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PNFHQ1FTKQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","date":"2025-10-09T07:44:01.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=G-PNFHQ1FTKQ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 09 Oct 2025 07:44:01 GMT\r\nexpires: Thu, 09 Oct 2025 07:44:01 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141538\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":426867,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"48a7cc69bb1bde48329fea16b77b302a","sha1":"185982a8aa4b456c2a35d225f1e49c86c0a8ba0c","sha256":"00fc462ef7f9ceba8e8d4d10836a28823acdb238b3996c7568c3c171008f0904","sha512":"8dd76ae8c4fa51581032d5c22d02e0ee681d479140eea6df9b4bc4b56da2e8383c870cc8cf78f26ae21f4e410b6e161cc299ae7a943da8306dae8a7b412f3635","ssdeep":"6144:0B6wep2itv0njCnzGwXV4rvoB6b6GBQ5w0yNWXy:KyY8snjYGdoT5y","tlshash":"149419ce73d674225396f478503f018ba57b28a2b44cc89af189cde52e74a9a4137f7c","first_seen":"2025-10-09T07:44:52.993353Z","last_seen":"2025-10-09T07:44:52.993353Z","times_seen":1,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i666f6e7473o67737461746963o636f6dz.oszar.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2","fqdn":"i666f6e7473o67737461746963o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:02.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1\r\nHost: i666f6e7473o67737461746963o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=4,i=?0\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Thu, 08 Oct 2026 05\r\ncache-control: public, max-age=31536000\r\nvary: accept-encoding\r\nlast-modified: Mon, 16 Oct 2017 17\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: fonts_gstatic_com=%7B%22HttpHost%22%3A%22fonts.gstatic.com%22%2C%22HttpDomain%22%3A%22fonts.gstatic.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fs%5C%2Froboto%5C%2Fv18%5C%2FKFOlCnqEu92Fr1MmEU9fBBc4.woff2%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Ffonts.gstatic.com%5C%2Fs%5C%2Froboto%5C%2Fv18%5C%2FKFOlCnqEu92Fr1MmEU9fBBc4.woff2%22%2C%22GirisIP%22%3A%22142.251.141.35%22%7D; Path=/; Domain=i666f6e7473o67737461746963o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:55 GMT\r\ndate: Thu, 09 Oct 2025 07:44:02 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\ncf-ray: 98bc401ddf5656b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":15548,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15552, version 1.0","md5":"6ede2c7e1a2c2fec942f23dd1b831d05","sha1":"e19c69d68178386557f5d6c4d1868ceba3352a32","sha256":"f801d8d34f7352443ab57f101d2bcc4f0eb29f042137313c1964c5263d4b2109","sha512":"b3094c936524d464fd244961428411058773addcaaf010b5797799575833d990ed5f176ff999bd9d4d1176d20572430f5dc85ca051fd8ccc9848ae161fd950ba","ssdeep":"384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhz1:jslQ+LhUoTB0Qr6Qjkg/DmcJufz1","tlshash":"3062e103f2bc4c01e786193ebb5870237205272619efa67780ce7ea4c65ec81a39b457","first_seen":"2025-06-21T10:27:34.629895Z","last_seen":"2025-10-09T07:44:52.978989Z","times_seen":3,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:05.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nX-User-Agent: grpc-web-javascript/0.1\r\nContent-Length: 24\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 07:44:05 GMT\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-credentials: true\r\nvary: Referer\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2BML1HmnBAHopylVahGN%2Bws2nZNTeQikV%2FJgNUZu%2Fp0XGnh%2Fcp3tWJeUCUzOIP2mDx5EWYh%2Fq%2BOJpUVwTpJp65ISyj0QXTe4LpC3WRCZq9IotjfDTbXn8nQbckn9XYAqwrUbj9BNsH18%2FMcLPOabVJv8698%3D\"}]}\r\nset-cookie: jnn-pa_googleapis_com=%7B%22HttpHost%22%3A%22jnn-pa.googleapis.com%22%2C%22HttpDomain%22%3A%22jnn-pa.googleapis.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fjnn-pa.googleapis.com%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GirisIP%22%3A%22142.251.140.74%22%7D; Path=/; Domain=i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:58 GMT\r\ncf-ray: 98bc4030aa19c759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":12909,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"ASCII text, with very long lines (12909), with no line terminators","md5":"2d08a4e00ffb7a60a4eb4cfd56a7c6f2","sha1":"d80bd622cc3c8caa84f6e98bd37fdd224c640bb2","sha256":"c038b34dee55a466c15b281f485185f76946beeb35dafa264d631a3e328dfae5","sha512":"b6416210d15942032c3ee60da93018ea39671d45ac39fe92e3b623a008b19da2908f0edd7b9a331d3d9fa7f5bbd166e7777eb4e6285af914334a8df2a7b19469","ssdeep":"192:mxM11xPflhQaUXgMH16qGgWIhEuo+LGEIcfLL9xp51wwpRdSP/wChgXhPtvkwgMG:mKPflAxH16h8e5+qENl7515ly/LubzG","tlshash":"2642b75af80eb10476890259ce48b69ee737d98050604ce85207e73996fcb87df5db8f","first_seen":"2025-10-09T07:44:53.011189Z","last_seen":"2025-10-09T07:44:53.011189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/images/XLogo.svg","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/images/XLogo.svg HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/css/css_pmEoZYJoqAqjEHUOEhlJ89R2_IsF5X5U3dS8iCt6t8w.css?delta=1\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyNlAuO4yAMhi-UJquVqjkOcsBNmRrMYuhjT79O0s50sulDQkown4yx_RucKwzx0sH1p91ljqXpwR5MYV2pu_s3Bc-lsQd0vnDemkR18NGkkfDRYSymJ7aH7n7TWILM3UDcA22kXMjHobFMnHs-dw53UEm9csbO5ZqAWviE8w-D80A8zKbIOQD5v9g4MEcfrb_5tiINSjCnMdI9BuymANpySdhaTpfsh31ZILZK4WDuSOi5FvXskJf-_od7EG9fUj4eUW3ZZCQonuNrxwQ9ktFcHd5gMTpNqpaI6eBfv7D4Qrig8DhWzEJ2aweikcjq8dwwP20P60Fw0dxeM1c9OcxG0I4ZeULuuGbLlUI0BXox21-6nvAcUdurhmc-y4nfZ8zvrfnYvkW-iu2b_Niq2yXp-wzZo7SffyrmSyvkVUFLaL0SAWOdLtk86vUvQlPKBfOL41Yl_xDZI4zVGw0PmQA6HZ4SoirrIZudz_I4WmGrA2BVDJEdzlCCQQOvRAvi6PG0CThAySoT2RBMYlmhWpXIYK7n00amPC_vnNiIJ8msupoEMF6-RkmAXMwOrCpIa-nGnFdjmQ8e9RMSeYhWRbZiNLfRqEN3fPptGF63zdxW5qqjbu6sLzldT50Xy0dtpW5WRRN0eEPHGHp0WmedpWXshAQZhgxpL7drvi1tjan22nZ7dI14jQ9N4lTTPFOkW7E14_NlSoK0gV0l_AdXM4eY\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 09\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\netag: W/\"5c6-63fc947b0a800\"\r\nvary: accept-encoding,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3437393237386661303332353230326362356661313832326261633538313530o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: fpOSXE6hIu3zQMY-6Sj7sAJ29q9A42er4W929XB0z0JwrxWUQQzxzw==\r\ncontent-length: 781\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OqM8izw5CJSCv6vScnBGT8OECVAIvxcPOHsp%2FpfrRzXNM1Dsx15QnC9Rfq%2FcmVYZUCCmujBV%2FAOCZOdkW1yk5KPcE3BFftea6QqBg0XBe12a6lnAaibluaBIz7mx7FVyut76c1olw%2Fel\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40047da756b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1477,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b84aff72318158db79ebddcb3388ccfb","sha1":"8c64ea18f72e15f885e32d18376e26561834f813","sha256":"61509e94be0e515f14a0a66d4d610d1fd365ccd4d93af55d6cd0c04bd97ee102","sha512":"59b7b5e1e7c13aa022502a1e900aa91908c279bc006886032073622df8ea1b20b3a1457f077dffe6ca2aea88695292d44de9e6058d9fc61fa947e2d8a93220de","ssdeep":"","tlshash":"183162b4d3d8d9947407aff0d4336c70a93779f99621c5758ade6511ce2109c0085c90","first_seen":"2025-10-02T10:05:42.344794Z","last_seen":"2025-10-09T07:44:53.041034Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/styles/512x288sc/public/image/2025-09/esm-uni-of-lux-012-1920-889.jpg.webp?itok=2jEfNkbw","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /sites/default/files/styles/512x288sc/public/image/2025-09/esm-uni-of-lux-012-1920-889.jpg.webp?itok=2jEfNkbw HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/webp\r\nexpires: Thu, 01 Oct 2026 16\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 30 Sep 2025 13\r\netag: \"6728-64004cab91148\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i6639613562643539656562656561343135313866313731666666386262396236o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: t6s3ztbahUtAX8AJUi7xDzOQsklJNCjmBdUdvxRQ5Eb0zh2iiBv_tQ==\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RGI6L9JtTVqqDZ7j6lRko%2FTuD5HXCS4NOLEVw7oNlXrQCgSKVOm5%2F%2F3fnr%2FtZ85Ksr%2FmpSiJ9IV3vKknuidiSVobqYRnlStRaHgHaJRxgAUpTnB3Sshy44aWWbSWxJZ8Q7vMaoKdFhzi\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc400b6e2056b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":26405,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x288, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1fd316eaf7f434692f94f57ab948b502","sha1":"d6020636bd2c22ccf2ba4b2821f7aae9269966e9","sha256":"f5247f3096f59b94e5de2128be960e1769382decfde62ff40b27db39d1b61121","sha512":"faf42a497676f69b0bd8e6667cdcad3f240d31bb4c2500b78ffd055fc8a4971998511171251ab5d51e8b31f3c484d4db00f4bc39bbaf071748b97577120effc6","ssdeep":"768:ygg9l+S7k2Z+ydcbxjPJGpp34wuwSTirS:mlT7zZ+yIdPfwYZ","tlshash":"f7c2d0a8835ce318682593209fd8ff6a31e75d4db24bdd014a656c7dc4944c6fb2e8c3","first_seen":"2025-10-02T10:05:42.449613Z","last_seen":"2025-10-09T07:44:53.042411Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=1920\u0026max_height=889\u0026hash=xWhLk7Ki-rPBwB_EPDITkxWUpG5V83Ou8MnuaDYyfjM\u0026media_oembed_control%5Bprovider_name%5D=YouTube\u0026media_oembed_control%5Bsettings%5D%5Bvideo_autoplay%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bloop%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bvideo_background%5D=0","date":"2025-10-09T07:43:59.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=1920\u0026max_height=889\u0026hash=xWhLk7Ki-rPBwB_EPDITkxWUpG5V83Ou8MnuaDYyfjM\u0026media_oembed_control%5Bprovider_name%5D=YouTube\u0026media_oembed_control%5Bsettings%5D%5Bvideo_autoplay%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bloop%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bvideo_background%5D=0\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Thu, 09 Oct 2025 08:31:59 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u8dw8IlaU29dp0a8krZWeVnvdA96AOcozjUr1cVKbeWf9ty2RwiKjRr3qMoR4qWKhytDEvO%2BlIxWgftnom06pQtc1sCm0ahVNJ6poR7i%2BDKuEyX3E%2BX8fRhpXlJdkEOzKbRKcG05seIN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\ncf-ray: 98bc400c3e2e56b4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T16:53:36.485058Z","times_seen":109707,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","date":"2025-10-09T07:44:01.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Thu, 09 Oct 2025 08:32:01 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZpqDZg0h24Z1Ghg6WE1nRtovxYIpK2vl1NYOQRMBRte7O8a8sYKMvw8bG0BeqACCsr6Lr3jsVfb%2BHYxa2f1VwFsoPtYBQn5y8BWF9S474A%2FSFVzbht9B2LZDic3ml8IuXBSQdl%2F4HgfxQYPkU4cmGi5aL9jGZinC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 07:44:01 GMT\r\ncf-ray: 98bc40166ed456b4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T16:53:36.485058Z","times_seen":109707,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:01.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Thu, 09 Oct 2025 08:32:01 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Iuwo1TrppCoIcU77ed8Q8Y5neCPAydqc50woHroFEUKx%2BD0KJRpEPIUaokaSw7cIbcR7%2B3l8VRQk4u%2Fi3%2FHtO%2BFToyntVxal7S0hc2%2BdHZbGMypLe4oooM6TkI%2F87Z73MetskYKN%2FxpfMsKRoefoqVUJG3rduqy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 07:44:01 GMT\r\ncf-ray: 98bc40172ee556b4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T16:53:36.485058Z","times_seen":109707,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/modules/contrib/google_tag/js/gtag.js?t3eiuv","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /modules/contrib/google_tag/js/gtag.js?t3eiuv HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: text/javascript;charset=UTF-8\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 02 Dec 2024 22\r\netag: \"4d7-62850cd2c6f40-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 12\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3734363439336361666161653636663264343535666434363830383465616438o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Ahh8cxl5pUIpYiJtjCynio7SUM89nKMYTDedfNhZhNAX31C6Eq2U-A==\r\ncontent-length: 589\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=buhsPS8LaCprs7ZC4nnfGQiq5XYYbtSPJmt%2BBuvRbpK7UMUo5C%2F68j1h2REBt0nftW6qujSqIUcqpPGJ%2F%2BevsuP2v%2F7AgThoCnGeobjzHK%2BY4N5kzFkOE%2Bp0dB9M0l0WFEyTcQtQx5B%2B\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40056dbe56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1272,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"998dc98ae8d62bb8a0cb6e1722bd4a3b","sha1":"474699e812da7d169dd223eeaa3b26906c5e3e1e","sha256":"65c59cb6e5636b07ac0fa204b0a040fbf0d1ef0ace30af2b1e5c751a78974229","sha512":"5afed0a51a4a1220d3d9c5736c442add514dd9ce31f31c3b5390a8d3c2d9f3ecad5262193cd32edfac0807872a408d7f369474a59691747983c0a3f50e425d64","ssdeep":"","tlshash":"2821c04f1dbd4c33409b2c86437fa614bb3016813446edd0359cde889f16f66d952d9c","first_seen":"2025-10-02T10:05:42.44807Z","last_seen":"2025-10-09T07:44:53.044369Z","times_seen":2,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/eu_cookie_compliance/eu_cookie_compliance.script.js?t3eiuv","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /sites/default/files/eu_cookie_compliance/eu_cookie_compliance.script.js?t3eiuv HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: text/javascript;charset=UTF-8\r\nx-content-type-options: nosniff\r\nlast-modified: Fri, 19 Sep 2025 05\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 07 Oct 2026 12\r\netag: \"334-63f20f724e2c8-gzip\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3134353633323666336234343334323966663663643364646266656664366461o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: DKlbFmEySMOW4V5l56EDRC5npY7q5KTbluytY48JmoiLKokWUqO7sw==\r\ncontent-length: 429\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9VlApf3yf%2FUnKhpYeqgDSiBjrunXH5B0YvGvojKpkUSb4F0%2Fhn7Ns%2Fxo7xjUL3niwMx3yUsUSGlPWhv6fW54mConLxmm3Hb8t15fcCXlBsiR4%2B3KSxm%2BDgaFnOFsbfdnkjxByJybIA2N\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40057dc156b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":843,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text","md5":"36ab159b61a36403c4391e19c68deeaa","sha1":"00d335af472eaa8f3b6fc15f66682a3572423b98","sha256":"97293e10d2232afdfe8867066f571c8fd695bb3d271c092bc2d98ca4081522eb","sha512":"a2cdab43b8ff9bbe47c1c03c5871759878b2d0391765b3e3a3fbfaee28980b3de843981a7a9599d836f2e49a27af55622a1df528dfbf202bf0feb47fa58aba77","ssdeep":"","tlshash":"c801bd3a6ef980342216101f92e7c318375050071052ccd67e8cca8cafd5afaada9bd9","first_seen":"2025-10-02T10:05:42.315051Z","last_seen":"2025-10-09T07:44:53.046902Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/rum?","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1077\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eS6PxxRf5N8rrmgwoc2NaaBDVdtsPUQwA97Wblx7JIeCuL9G3IqO9oZX8aaZl24y3YgIJK4Ft430QQEGOlr5fNlNDO8FTwz8xH%2BM8mfBXrixytdh8Sm6aFCf0JTEsg0scIf8ZmcpCGK4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 98bc400d4e3556b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:08.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: content-type,x-goog-api-key,x-user-agent\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3dSXvNX3UmxsfeQC6Cz3Nvw6%2FreV5TfNuQS%2FCIyD1tHTOGvXYIm4MpMog%2BCefCXxuNj9pPo0jGoq3zd8FLcv1SDJuOQjyR7M0VqIleqCcT56PTE%2FUIdf8hfTWe3brGAsMOpiTBNtpwKcI9WGeQpKuek0\"}]}\r\ndate: Thu, 09 Oct 2025 07:44:08 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc404699a656b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:12.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: content-type,x-goog-api-key,x-user-agent\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LOXb1T2coSQhu4Q06x8RoDQYFmcoenUX18gFdS08S4LZg%2Bl67ZrefNAt55Zm0FnwRdmORh0tjq8Ak3Oi1CykqVQwjE0wIe8byG7WzMPt3TLOF51CCm3QDh5HpJCtJopH%2F3lFBNJeNVUp2WYC%2FjDTpIKO\"}]}\r\ndate: Thu, 09 Oct 2025 07:44:12 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc405f1afe56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com/analytics.js","fqdn":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /analytics.js HTTP/1.1\r\nHost: i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g0$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsgac\r\nreport-to: {\"group\"\r\nexpires: Thu, 09 Oct 2025 07\r\ncache-control: public, max-age=14400\r\ncontent-length: 20865\r\nlast-modified: Tue, 15 Jul 2025 00\r\ncontent-type: text/javascript;charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncf-ray: 98bc400ebe4556b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52529,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1597)","md5":"16424db84d63487835d442bba643d560","sha1":"91e95f4efbedc8773a85fb45cc27f3128d1bf94c","sha256":"02b1829b75c84f1fd8725d0cef3c89c24099b99d4501faef57f89baf5e31270e","sha512":"d51c4e43a44bb80270846cf1804ae78e3a6dbbba9cce13b8e1bcc03a8d0495cfcee863e314149b9f14a39d910564bf55a97c972f573f4ea06c7910dfdfd8336d","ssdeep":"768:wwbeaWc7/IZDws2wt+Hfe65TVLzt+qghDXWz5o5cJDeVVgCqaDuY6N5jEi5BZso:FbeaWcjI6THfPBX5SLY5o5cJrBoi5J","tlshash":"c433f8f977463466c3a2b1e4402f100790baadd5f449d8a4b58ae6d07d38e6b01fbf78","first_seen":"2025-10-02T10:05:42.422586Z","last_seen":"2025-10-09T07:44:53.048501Z","times_seen":2,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/assets/fonts/preloaded/esm.woff","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/assets/fonts/preloaded/esm.woff HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/css/css_pmEoZYJoqAqjEHUOEhlJ89R2_IsF5X5U3dS8iCt6t8w.css?delta=1\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyNlAuO4yAMhi-UJquVqjkOcsBNmRrMYuhjT79O0s50sulDQkown4yx_RucKwzx0sH1p91ljqXpwR5MYV2pu_s3Bc-lsQd0vnDemkR18NGkkfDRYSymJ7aH7n7TWILM3UDcA22kXMjHobFMnHs-dw53UEm9csbO5ZqAWviE8w-D80A8zKbIOQD5v9g4MEcfrb_5tiINSjCnMdI9BuymANpySdhaTpfsh31ZILZK4WDuSOi5FvXskJf-_od7EG9fUj4eUW3ZZCQonuNrxwQ9ktFcHd5gMTpNqpaI6eBfv7D4Qrig8DhWzEJ2aweikcjq8dwwP20P60Fw0dxeM1c9OcxG0I4ZeULuuGbLlUI0BXox21-6nvAcUdurhmc-y4nfZ8zvrfnYvkW-iu2b_Niq2yXp-wzZo7SffyrmSyvkVUFLaL0SAWOdLtk86vUvQlPKBfOL41Yl_xDZI4zVGw0PmQA6HZ4SoirrIZudz_I4WmGrA2BVDJEdzlCCQQOvRAvi6PG0CThAySoT2RBMYlmhWpXIYK7n00amPC_vnNiIJ8msupoEMF6-RkmAXMwOrCpIa-nGnFdjmQ8e9RMSeYhWRbZiNLfRqEN3fPptGF63zdxW5qqjbu6sLzldT50Xy0dtpW5WRRN0eEPHGHp0WmedpWXshAQZhgxpL7drvi1tjan22nZ7dI14jQ9N4lTTPFOkW7E14_NlSoK0gV0l_AdXM4eY\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: font/woff\r\nexpires: Mon, 05 Oct 2026 11\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\netag: \"78b8-63fc947b0a800\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i6639613562643539656562656561343135313866313731666666386262396236o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: SylyySWTUgR_ZkvmZCvRCWR8IWqZNhIo-5FByNJYQiqVAZgaapuPeg==\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L2ieAn%2B3kPZaHYB5pKIUAMLosHmlO5zQ%2FZ7sY12ljYNGZi48sf6lMRlejfuByR6sVn9RKp5TeAlqx9bQ9OoIhF9Cr6j2s5fNloErvYIQlER95FpF2mky50OM0xFRYsBH7uRrzm5ftHHF\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40059dc556b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":30874,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 30904, version 1.0","md5":"3181cab1405a362acdfabc03f3a0690b","sha1":"45615ec0020c6743a7be2f0f35a63b2e331d5d65","sha256":"eb3c1b39bfac95fd4906951365317dc8d2ff8360e7189d37a5413f7a57aba219","sha512":"0169539412979d9056f20b503679187b7eb77b212ef3982fbaa599c4ed0cc9eb9c70920d6cdd03296f89ce85a16839e2bffd45bd294282347b6f1a273561291f","ssdeep":"768:lTqBdRdsBPlFRQFMAtBPrJWSs06NVEu6ZsLz0x4Ww4VT:vtQF9Pr4Ssyu3LIx4H4B","tlshash":"14d24b06570bdfced821adf45d0581728fe2fc22233ee647288a1d49a5159f88d7cb6e","first_seen":"2025-10-02T10:05:42.435252Z","last_seen":"2025-10-09T07:44:53.050184Z","times_seen":2,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/images/chevron-left-solid.svg","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/images/chevron-left-solid.svg HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/css/css_pmEoZYJoqAqjEHUOEhlJ89R2_IsF5X5U3dS8iCt6t8w.css?delta=1\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyNlAuO4yAMhi-UJquVqjkOcsBNmRrMYuhjT79O0s50sulDQkown4yx_RucKwzx0sH1p91ljqXpwR5MYV2pu_s3Bc-lsQd0vnDemkR18NGkkfDRYSymJ7aH7n7TWILM3UDcA22kXMjHobFMnHs-dw53UEm9csbO5ZqAWviE8w-D80A8zKbIOQD5v9g4MEcfrb_5tiINSjCnMdI9BuymANpySdhaTpfsh31ZILZK4WDuSOi5FvXskJf-_od7EG9fUj4eUW3ZZCQonuNrxwQ9ktFcHd5gMTpNqpaI6eBfv7D4Qrig8DhWzEJ2aweikcjq8dwwP20P60Fw0dxeM1c9OcxG0I4ZeULuuGbLlUI0BXox21-6nvAcUdurhmc-y4nfZ8zvrfnYvkW-iu2b_Niq2yXp-wzZo7SffyrmSyvkVUFLaL0SAWOdLtk86vUvQlPKBfOL41Yl_xDZI4zVGw0PmQA6HZ4SoirrIZudz_I4WmGrA2BVDJEdzlCCQQOvRAvi6PG0CThAySoT2RBMYlmhWpXIYK7n00amPC_vnNiIJ8msupoEMF6-RkmAXMwOrCpIa-nGnFdjmQ8e9RMSeYhWRbZiNLfRqEN3fPptGF63zdxW5qqjbu6sLzldT50Xy0dtpW5WRRN0eEPHGHp0WmedpWXshAQZhgxpL7drvi1tjan22nZ7dI14jQ9N4lTTPFOkW7E14_NlSoK0gV0l_AdXM4eY\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/svg+xml\r\nexpires: Fri, 02 Oct 2026 08\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\netag: \"136-63fc947b0a800\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3838613562316466643063623232386463616663313238353663313934323936o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: gGHLc0ODMXMqDkXVK8zyHJnVSPBH1X925hqx83neFADyOqpEptcy_w==\r\ncontent-length: 238\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ItToXZdOebRc6vlEv24RfiRm2udT7I%2Bnn9QAz4oW5GnMNI1b%2Bsi7JEdyTJf3cxDQ77aJ4%2BRCIuhP0myNiOaYN8CEFfIVRnRdGFqqf%2FaQgz7%2FOlH4nENrkzEo4h61BA%2BVLlfaW6RdJw1R\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc4009ae0d56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":310,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0fc0931380d1c47dcddffe3cef92b40","sha1":"fd369a7c3d82a2631fcc81c2dd05f4f7901121dc","sha256":"9aebd2b30b6f881c1f60e9d1ec7a36e93aaf57a8f9b39e76565b693c2154d537","sha512":"9d41d15af77809111b375d571727c0495945ec99c7cc644bad61bf78eba58aed2bbc9335916b1d19ec2ab294446617c6ec09b7a0dc663b56949b3e57f1ae2c70","ssdeep":"","tlshash":"12e07d70e2e4d50fe6170b24d6fc36e8c0397258139d088d72943b6d90741aa2b752e9","first_seen":"2025-10-02T10:05:42.443127Z","last_seen":"2025-10-09T07:44:53.051317Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:05.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nX-User-Agent: grpc-web-javascript/0.1\r\nContent-Length: 24\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 07:44:05 GMT\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-credentials: true\r\nvary: Referer\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8BLqS%2B%2FG9nDrvCSdltGq3Znr%2BAgCBDKdmtr3t8ufupw9xPdDaYLlhWAd3V7avaG07TBFtTBzs6oLsaDatXAowep1JlNwLj5nZpynelXNBoPDzd3OOH8YeV2C3M20w%2FFboLfkYSiLQsvxvCCqXpyUG2a0DTY%3D\"}]}\r\nset-cookie: jnn-pa_googleapis_com=%7B%22HttpHost%22%3A%22jnn-pa.googleapis.com%22%2C%22HttpDomain%22%3A%22jnn-pa.googleapis.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fjnn-pa.googleapis.com%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GirisIP%22%3A%22172.217.169.170%22%7D; Path=/; Domain=i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:58 GMT\r\ncf-ray: 98bc4030495ac759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":12908,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"ASCII text, with very long lines (12908), with no line terminators","md5":"d761542a41b96fdd1cb147f2ad2db0bd","sha1":"3b62e01eaa765e2bda17efb3d2bd1f9b929026f0","sha256":"e28c62a6279c1ea52f82889d2e3da032653b18dec6ee616c72ee33d439006c02","sha512":"31c4c5328ff9393f10885caf2f847fc7223661fd63192bda99be69d81e00800b91385297da1a1c54ef6c234974a50887b684cfbac1fb10c2e2758db012c478ed","ssdeep":"192:mxM11xPflhQaUXgMH16qGgWIhEuo+LGEIcfLL9xp51wwpRdSP/wChgXhPtvkwgM9:mKPflAxH16h8e5+qENl7515ly/Lubz9","tlshash":"db42b75af80eb10476890259ce48b69ee737d98050604ce85207e73996fcb87df5db8f","first_seen":"2025-10-09T07:44:53.052355Z","last_seen":"2025-10-09T07:44:53.052355Z","times_seen":1,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:06.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: content-type,x-goog-api-key,x-user-agent\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yapfu%2FZ1NlFCtk2xzlPpFUoJFWAi5A6Ic894GBwNt5Gxa%2FlrquHR7aJMNF9UH%2BquGdC%2FUWRILoquRdIJ0%2FnD8%2F2OXRzA5XYPprbrDoM0xN%2BWeKqbBlacJgdJohnisfirvjfnWnIEKTVa9C%2BbvX2GW8jQ\"}]}\r\ndate: Thu, 09 Oct 2025 07:44:06 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc4038c93356b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/e9c9e9d67513/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\ncf-ray: 98bc4005adc656b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10016,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/challenge-platform/h/g/jsd/r/0.4227070164828552:1759994622:2VgnGR7w-HQ5KNofxFqaTQzs0vYke5i_j3FnFWzdlS8/98bc3ffc49e25690","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/r/0.4227070164828552:1759994622:2VgnGR7w-HQ5KNofxFqaTQzs0vYke5i_j3FnFWzdlS8/98bc3ffc49e25690 HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12178\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\ncontent-length: 0\r\nset-cookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=oszar.com; Expires=Fri, 09 Oct 2026 07:43:59 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 98bc400d4e3456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_ias.vflset/en_US/remote.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:02.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/player/38e0f4b0/player_ias.vflset/en_US/remote.js HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995842$j57$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-type: text/javascript;charset=UTF-8\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\"\r\nexpires: Fri, 09 Oct 2026 07\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Oct 2025 04\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 42083\r\ndate: Thu, 09 Oct 2025 07:44:02 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\ncf-ray: 98bc40209f9056b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":124208,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (540)","md5":"5d12333ed9568e64057efd04329012c2","sha1":"bca2c8cae363cca0bb5341df1ca66a8ed1609580","sha256":"98dc2e664f296cac5470274e19ed5b6426623e3920a3d900540e7ab7da53b5f8","sha512":"4ec1ca4f53389fe92fc3b8966e3863bd41256b1365c5d3c06584e087d6de8c6dc55f43691d93597bd1e22e675650dd55acf564664c7219d9a12748a6da81273d","ssdeep":"3072:bfUrbVbsgsFzP6fNuXWKgDC6Tv2tIdgJb3yP2hx4mXjjYlyW7:bfUNbkFL6fNuX7g9Tv2tIdgJb3yP2hxQ","tlshash":"61c3e8acf651b42122b3f4761c3f2009963b54a4a885435c764adcd68cb8d5f923bff9","first_seen":"2025-10-09T07:44:53.020052Z","last_seen":"2025-10-09T07:44:53.020052Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i797433o6767706874o636f6dz.oszar.com/RKGxj6i0s85FxA9L-UpDP76i276s3Hmk9Mw1gLGG2QbqOa5X6CoxdJmT4YjdfQB-bjt3N5ypqA=s68-c-k-c0x00ffffff-no-rj","fqdn":"i797433o6767706874o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:02.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /RKGxj6i0s85FxA9L-UpDP76i276s3Hmk9Mw1gLGG2QbqOa5X6CoxdJmT4YjdfQB-bjt3N5ypqA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1\r\nHost: i797433o6767706874o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995842$j57$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=4,i=?0\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"channels4_i70726f66696c65o6a70z.oszar.comg\"\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Fri, 10 Oct 2025 07\r\ncache-control: public, max-age=86400, no-transform\r\netag: \"v1\"\r\ncontent-type: image/jpeg\r\nvary: Origin\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2212\r\ndate: Thu, 09 Oct 2025 07:44:03 GMT\r\nserver: cloudflare\r\nset-cookie: yt3_ggpht_com=%7B%22HttpHost%22%3A%22yt3.ggpht.com%22%2C%22HttpDomain%22%3A%22yt3.ggpht.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2FRKGxj6i0s85FxA9L-UpDP76i276s3Hmk9Mw1gLGG2QbqOa5X6CoxdJmT4YjdfQB-bjt3N5ypqA%3Ds68-c-k-c0x00ffffff-no-rj%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fyt3.ggpht.com%5C%2FRKGxj6i0s85FxA9L-UpDP76i276s3Hmk9Mw1gLGG2QbqOa5X6CoxdJmT4YjdfQB-bjt3N5ypqA%3Ds68-c-k-c0x00ffffff-no-rj%22%2C%22GirisIP%22%3A%22142.251.140.33%22%7D; Path=/; Domain=i797433o6767706874o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:56 GMT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FelxCzON5ERxnYsmCCqbpVHAOmHiZruFYbiWzwJr5j2qX8QTpjyfm4Dwl511aWxff1ba9nOnRqJuHr9y2pnS5ZKjCfLwr%2Bw5ubj1%2BzoIUXPB1cL4%2FWkTAjlT7IixSCUzHJs%3D\"}]}\r\ncf-ray: 98bc40214f9856b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2212,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3","md5":"d9f6dd362180719ee519c1d859e014c8","sha1":"35fe9292673a422a59bc1cd25432f9f54947c54e","sha256":"489174be58a18f7ef878df1452b0be14abb920f528f89cf256546f440bf517b9","sha512":"8fa61520e376bc6245d8365b76042c93d598b3ff7429ca19579c80b0cf99418f1582750c313583dc9306309ed926e46146301c84c93cacfef0d55aeea40cc52d","ssdeep":"","tlshash":"53412c1d7276a123d0b2a473d8f30f93a2209fe8465727c5e49199d2cf27642770bd6c","first_seen":"2025-10-02T10:05:42.262272Z","last_seen":"2025-10-09T07:44:53.053383Z","times_seen":2,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":495,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i797433o6767706874o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i797433o6767706874o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i797433o6767706874o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i797433o6767706874o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/cdn-cgi/rum?","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:03.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1183\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995842$j57$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r1x28IceGR%2FFb9sq5yt2mAIjJoaMesEpST87TpF%2Big%2F9ux0m%2FEdT0E5FkOyo6sJw6SPrRQS8WJPRb2hwA6czvWmgw5L%2B8R4aKUC%2F66OGHnJz4%2FQbuevxB6piuF78U4FvUV2fKKYkOdQ5n%2Bcqo84fM6FPBom46C5L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 09 Oct 2025 07:44:03 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 98bc4023bff256b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/logo.svg","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:57.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/logo.svg HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=31536000\r\nexpires: Wed, 07 Oct 2026 06\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\netag: W/\"438d-63fc947b0a800\"\r\nvary: accept-encoding,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i6537666162393131633866303038626561666263613230623139396165363234o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: DlyZH1SMrCyAKBWR4Df96djIFct2So1qN1P_NEmUR0hBMhULVEZMDA==\r\ncontent-length: 6896\r\ncontent-encoding: gzip\r\nset-cookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.115%22%7D; Path=/; Domain=i777777o65736do6575726f7061o6575z.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:51 GMT\r\ndate: Thu, 09 Oct 2025 07:43:57 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=imPM6iB5Sw42P6TWHmRtIC0Di7gDsdvkNJaFhU3PQuq9HdSSi6Xw3MbJoCgDHfzNhTkax4%2FKNQnabtulIuX5H%2BjGY%2FAMawB8IW3Oaz7nB39c8l0xlXHx2%2BcNfQd8CuDa9G1SLn1Bj%2B8y\"}]}\r\ncf-ray: 98bc40006d4956b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":17292,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3fa8462bc4a64c1d6c41efe23ab22ee8","sha1":"e1a0c997da41f25e37ac9ff511860b18c384850c","sha256":"c5a1c4ec13ba28ef90d81fa1cc82913aae36dcb1d5e43f0085798d3407b89deb","sha512":"830e0957ad5296c1db8d49c81d4b7f432eb0735866165d28c3d156f44a486bf1632632a53cf3c0fbabbbbe163c15bcaa2024a19f21f9274e508db60b294aec5e","ssdeep":"384:H2ce7s2ElC6132QkoLh9ppi/sbjAFqSJGz:TeY914orppi/sbjSJE","tlshash":"b772a5f857a659f4c9439fe9de3358992814fcbb7fc183acc3d4de8890164a58848de2","first_seen":"2025-10-02T10:05:42.317191Z","last_seen":"2025-10-09T07:44:53.055205Z","times_seen":2,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/css/css_Ogh8fC3nJ2SlfbyJy3xuxvCt8Cnxi_xlVNtHyxP6yH0.css?delta=0\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyNlAuO4yAMhi-UJquVqjkOcsBNmRrMYuhjT79O0s50sulDQkown4yx_RucKwzx0sH1p91ljqXpwR5MYV2pu_s3Bc-lsQd0vnDemkR18NGkkfDRYSymJ7aH7n7TWILM3UDcA22kXMjHobFMnHs-dw53UEm9csbO5ZqAWviE8w-D80A8zKbIOQD5v9g4MEcfrb_5tiINSjCnMdI9BuymANpySdhaTpfsh31ZILZK4WDuSOi5FvXskJf-_od7EG9fUj4eUW3ZZCQonuNrxwQ9ktFcHd5gMTpNqpaI6eBfv7D4Qrig8DhWzEJ2aweikcjq8dwwP20P60Fw0dxeM1c9OcxG0I4ZeULuuGbLlUI0BXox21-6nvAcUdurhmc-y4nfZ8zvrfnYvkW-iu2b_Niq2yXp-wzZo7SffyrmSyvkVUFLaL0SAWOdLtk86vUvQlPKBfOL41Yl_xDZI4zVGw0PmQA6HZ4SoirrIZudz_I4WmGrA2BVDJEdzlCCQQOvRAvi6PG0CThAySoT2RBMYlmhWpXIYK7n00amPC_vnNiIJ8msupoEMF6-RkmAXMwOrCpIa-nGnFdjmQ8e9RMSeYhWRbZiNLfRqEN3fPptGF63zdxW5qqjbu6sLzldT50Xy0dtpW5WRRN0eEPHGHp0WmedpWXshAQZhgxpL7drvi1tjan22nZ7dI14jQ9N4lTTPFOkW7E14_NlSoK0gV0l_AdXM4eY","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:57.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /sites/default/files/css/css_Ogh8fC3nJ2SlfbyJy3xuxvCt8Cnxi_xlVNtHyxP6yH0.css?delta=0\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyNlAuO4yAMhi-UJquVqjkOcsBNmRrMYuhjT79O0s50sulDQkown4yx_RucKwzx0sH1p91ljqXpwR5MYV2pu_s3Bc-lsQd0vnDemkR18NGkkfDRYSymJ7aH7n7TWILM3UDcA22kXMjHobFMnHs-dw53UEm9csbO5ZqAWviE8w-D80A8zKbIOQD5v9g4MEcfrb_5tiINSjCnMdI9BuymANpySdhaTpfsh31ZILZK4WDuSOi5FvXskJf-_od7EG9fUj4eUW3ZZCQonuNrxwQ9ktFcHd5gMTpNqpaI6eBfv7D4Qrig8DhWzEJ2aweikcjq8dwwP20P60Fw0dxeM1c9OcxG0I4ZeULuuGbLlUI0BXox21-6nvAcUdurhmc-y4nfZ8zvrfnYvkW-iu2b_Niq2yXp-wzZo7SffyrmSyvkVUFLaL0SAWOdLtk86vUvQlPKBfOL41Yl_xDZI4zVGw0PmQA6HZ4SoirrIZudz_I4WmGrA2BVDJEdzlCCQQOvRAvi6PG0CThAySoT2RBMYlmhWpXIYK7n00amPC_vnNiIJ8msupoEMF6-RkmAXMwOrCpIa-nGnFdjmQ8e9RMSeYhWRbZiNLfRqEN3fPptGF63zdxW5qqjbu6sLzldT50Xy0dtpW5WRRN0eEPHGHp0WmedpWXshAQZhgxpL7drvi1tjan22nZ7dI14jQ9N4lTTPFOkW7E14_NlSoK0gV0l_AdXM4eY HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=2,i=?0\r\ncontent-type: text/css;charset=UTF-8\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 30 Sep 2025 14\r\netag: \"1682-640052d204298\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 07 Oct 2026 06\r\nvary: Accept-encoding,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3362343630363133623536396538383066353561376265303833306364636661o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: HdKHk0eGc3Fjky3G_b0O9MrtDTqdsYNW-T_htiXMpREPijqIrsSlUg==\r\ncontent-length: 5805\r\ncontent-encoding: gzip\r\nset-cookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fsites%5C%2Fdefault%5C%2Ffiles%5C%2Fcss%5C%2Fcss_Ogh8fC3nJ2SlfbyJy3xuxvCt8Cnxi_xlVNtHyxP6yH0.css%22%2C%22GetVeri%22%3A%22%3Fdelta%3D0%26language%3Den%26theme%3Desm_wop_theme%26include%3DeJyNlAuO4yAMhi-UJquVqjkOcsBNmRrMYuhjT79O0s50sulDQkown4yx_RucKwzx0sH1p91ljqXpwR5MYV2pu_s3Bc-lsQd0vnDemkR18NGkkfDRYSymJ7aH7n7TWILM3UDcA22kXMjHobFMnHs-dw53UEm9csbO5ZqAWviE8w-D80A8zKbIOQD5v9g4MEcfrb_5tiINSjCnMdI9BuymANpySdhaTpfsh31ZILZK4WDuSOi5FvXskJf-_od7EG9fUj4eUW3ZZCQonuNrxwQ9ktFcHd5gMTpNqpaI6eBfv7D4Qrig8DhWzEJ2aweikcjq8dwwP20P60Fw0dxeM1c9OcxG0I4ZeULuuGbLlUI0BXox21-6nvAcUdurhmc-y4nfZ8zvrfnYvkW-iu2b_Niq2yXp-wzZo7SffyrmSyvkVUFLaL0SAWOdLtk86vUvQlPKBfOL41Yl_xDZI4zVGw0PmQA6HZ4SoirrIZudz_I4WmGrA2BVDJEdzlCCQQOvRAvi6PG0CThAySoT2RBMYlmhWpXIYK7n00amPC_vnNiIJ8msupoEMF6-RkmAXMwOrCpIa-nGnFdjmQ8e9RMSeYhWRbZiNLfRqEN3fPptGF63zdxW5qqjbu6sLzldT50Xy0dtpW5WRRN0eEPHGHp0WmedpWXshAQZhgxpL7drvi1tjan22nZ7dI14jQ9N4lTTPFOkW7E14_NlSoK0gV0l_AdXM4eY%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fsites%5C%2Fdefault%5C%2Ffiles%5C%2Fcss%5C%2Fcss_Ogh8fC3nJ2SlfbyJy3xuxvCt8Cnxi_xlVNtHyxP6yH0.css%3Fdelta%3D0%26language%3Den%26theme%3Desm_wop_theme%26include%3DeJyNlAuO4yAMhi-UJquVqjkOcsBNmRrMYuhjT79O0s50sulDQkown4yx_RucKwzx0sH1p91ljqXpwR5MYV2pu_s3Bc-lsQd0vnDemkR18NGkkfDRYSymJ7aH7n7TWILM3UDcA22kXMjHobFMnHs-dw53UEm9csbO5ZqAWviE8w-D80A8zKbIOQD5v9g4MEcfrb_5tiINSjCnMdI9BuymANpySdhaTpfsh31ZILZK4WDuSOi5FvXskJf-_od7EG9fUj4eUW3ZZCQonuNrxwQ9ktFcHd5gMTpNqpaI6eBfv7D4Qrig8DhWzEJ2aweikcjq8dwwP20P60Fw0dxeM1c9OcxG0I4ZeULuuGbLlUI0BXox21-6nvAcUdurhmc-y4nfZ8zvrfnYvkW-iu2b_Niq2yXp-wzZo7SffyrmSyvkVUFLaL0SAWOdLtk86vUvQlPKBfOL41Yl_xDZI4zVGw0PmQA6HZ4SoirrIZudz_I4WmGrA2BVDJEdzlCCQQOvRAvi6PG0CThAySoT2RBMYlmhWpXIYK7n00amPC_vnNiIJ8msupoEMF6-RkmAXMwOrCpIa-nGnFdjmQ8e9RMSeYhWRbZiNLfRqEN3fPptGF63zdxW5qqjbu6sLzldT50Xy0dtpW5WRRN0eEPHGHp0WmedpWXshAQZhgxpL7drvi1tjan22nZ7dI14jQ9N4lTTPFOkW7E14_NlSoK0gV0l_AdXM4eY%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; Path=/; Domain=i777777o65736do6575726f7061o6575z.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:51 GMT\r\ndate: Thu, 09 Oct 2025 07:43:57 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2FwC6kO3puXLBpdw4oyUpCpcRKBRxKGLibQMjae0TUKWBHyJrv%2FUzxiDo9CvBPjZ7aHaS0sl7miVkFDvJx%2B3qxpZGcFYSzh%2FURUCw5wisJ8X0V9bNT7D5rpgMRQ7PCDO%2F73067vjUrbr\"}]}\r\ncf-ray: 98bc40007d4c56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":25082,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"assembler source, ASCII text, with very long lines (5669)","md5":"0faf74076b8505359fc80c9cb63b121b","sha1":"26f2ca360e9168d87cd2a4215b9c7d9c10b9083c","sha256":"2b73609e944f95186e142db0039d22302d7380569bea77c691be9d0ec514b91a","sha512":"21594bad0d72f92ec127bd83b16f649c2fdeb790d0f3f021b527674886ab517038ff7fa6576b59bc9f0981c7896cb6364536d94e2db7f6d7262382524d82ccf1","ssdeep":"384:pijEUtMwiFbSjAfcxwCtNr9dIlC9+gDQpnAu:EjVi8AUwR+DQ9Au","tlshash":"57b2e8316646212cf5b3c62a759163ee3b10c056e2232aaef515f87ac7cb2d81c3f597","first_seen":"2025-10-02T10:05:42.396097Z","last_seen":"2025-10-09T07:44:53.05752Z","times_seen":2,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_ias.vflset/en_US/embed.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:01.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/player/38e0f4b0/player_ias.vflset/en_US/embed.js HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-type: text/javascript;charset=UTF-8\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\"\r\nexpires: Wed, 07 Oct 2026 10\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Oct 2025 04\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 10813\r\ndate: Thu, 09 Oct 2025 07:44:01 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\ncf-ray: 98bc40171ee456b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":33150,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3391)","md5":"652f1bf9d51ccc032e720af32da5b8cc","sha1":"8f7d2f8f47b9e35b84c69e7e354f3e961005c3ad","sha256":"08fb33a47e1d9fc813e540d0baa624c34d2f7225ecf8063a425194077c3c17e1","sha512":"836a4854cae1a6f59584ca0710c2e6171b94a1fffd5b07f84a07203f7e8a349c09db6497342bd1f62a7e7c1dd33abe84f796af8600f9f909ead9eebfa5e9c552","ssdeep":"768:V+1oNSYuOQEU+a6oWmMii0q/anDq9MT3DFNf:5oWmMh/aDjj","tlshash":"ece2d64eb7e1e4349265e2ee2c0b1104673b94cc58a0a35c763edde92db4d25b07afb1","first_seen":"2025-10-09T07:44:53.059014Z","last_seen":"2025-10-09T07:44:53.059014Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i797433o6767706874o636f6dz.oszar.com/RKGxj6i0s85FxA9L-UpDP76i276s3Hmk9Mw1gLGG2QbqOa5X6CoxdJmT4YjdfQB-bjt3N5ypqA=s68-c-k-c0x00ffffff-no-rj","fqdn":"i797433o6767706874o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:04.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /RKGxj6i0s85FxA9L-UpDP76i276s3Hmk9Mw1gLGG2QbqOa5X6CoxdJmT4YjdfQB-bjt3N5ypqA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1\r\nHost: i797433o6767706874o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995843$j56$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; yt3_ggpht_com=%7B%22HttpHost%22%3A%22yt3.ggpht.com%22%2C%22HttpDomain%22%3A%22yt3.ggpht.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2FRKGxj6i0s85FxA9L-UpDP76i276s3Hmk9Mw1gLGG2QbqOa5X6CoxdJmT4YjdfQB-bjt3N5ypqA%3Ds68-c-k-c0x00ffffff-no-rj%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fyt3.ggpht.com%5C%2FRKGxj6i0s85FxA9L-UpDP76i276s3Hmk9Mw1gLGG2QbqOa5X6CoxdJmT4YjdfQB-bjt3N5ypqA%3Ds68-c-k-c0x00ffffff-no-rj%22%2C%22GirisIP%22%3A%22142.251.140.33%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"channels4_i70726f66696c65o6a70z.oszar.comg\"\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Fri, 10 Oct 2025 07\r\ncache-control: public, max-age=86400, no-transform\r\nage: 1\r\netag: \"v1\"\r\ncontent-type: image/jpeg\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2212\r\ndate: Thu, 09 Oct 2025 07:44:04 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V3IeKvX9CaFqxfwywhVccgnjVpdCvg8BfSKnHNar%2FgCI18v3R9LLVdMQjlgaewAhE98SjK5tN3HbCTZ8c6BYLYwnDo46aR9TY7S2TGxi%2FDNJzndXJH1pZtUzUImsxnRVmAc%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc402a684056b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2212,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3","md5":"d9f6dd362180719ee519c1d859e014c8","sha1":"35fe9292673a422a59bc1cd25432f9f54947c54e","sha256":"489174be58a18f7ef878df1452b0be14abb920f528f89cf256546f440bf517b9","sha512":"8fa61520e376bc6245d8365b76042c93d598b3ff7429ca19579c80b0cf99418f1582750c313583dc9306309ed926e46146301c84c93cacfef0d55aeea40cc52d","ssdeep":"","tlshash":"53412c1d7276a123d0b2a473d8f30f93a2209fe8465727c5e49199d2cf27642770bd6c","first_seen":"2025-10-02T10:05:42.262272Z","last_seen":"2025-10-09T07:44:53.053383Z","times_seen":2,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i797433o6767706874o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i797433o6767706874o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i797433o6767706874o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i797433o6767706874o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:06.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nX-User-Agent: grpc-web-javascript/0.1\r\nContent-Length: 24\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Referer\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2FlDemW%2FQxcpTIiY%2BsfspxIU3sHj4bgSOFepWJJsG5VlspAtMaicXrbW5aW8us2H8vyFlcqqD9w5LujU1fGki5lmlrBifjVEb7mmqPqi6jIpwntsbkLf2vIdrtJXO%2Fwgo8Ev4hiF0SbJ5J7Ddm5VDBVg\"}]}\r\ndate: Thu, 09 Oct 2025 07:44:07 GMT\r\nserver: cloudflare\r\nset-cookie: jnn-pa_googleapis_com=%7B%22HttpHost%22%3A%22jnn-pa.googleapis.com%22%2C%22HttpDomain%22%3A%22jnn-pa.googleapis.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fjnn-pa.googleapis.com%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GirisIP%22%3A%22216.58.213.106%22%7D; Path=/; Domain=i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:42:00 GMT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc4039d94156b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":12909,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"ASCII text, with very long lines (12909), with no line terminators","md5":"2d08a4e00ffb7a60a4eb4cfd56a7c6f2","sha1":"d80bd622cc3c8caa84f6e98bd37fdd224c640bb2","sha256":"c038b34dee55a466c15b281f485185f76946beeb35dafa264d631a3e328dfae5","sha512":"b6416210d15942032c3ee60da93018ea39671d45ac39fe92e3b623a008b19da2908f0edd7b9a331d3d9fa7f5bbd166e7777eb4e6285af914334a8df2a7b19469","ssdeep":"192:mxM11xPflhQaUXgMH16qGgWIhEuo+LGEIcfLL9xp51wwpRdSP/wChgXhPtvkwgMG:mKPflAxH16h8e5+qENl7515ly/LubzG","tlshash":"2642b75af80eb10476890259ce48b69ee737d98050604ce85207e73996fcb87df5db8f","first_seen":"2025-10-09T07:44:53.011189Z","last_seen":"2025-10-09T07:44:53.011189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PNFHQ1FTKQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:00.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=G-PNFHQ1FTKQ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\nexpires: Thu, 09 Oct 2025 07:44:00 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141672\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":427170,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"3a477052125025520ae105e383119cf2","sha1":"2f3497f731a6f102d98c91d836deadf51992a8a8","sha256":"08f26ac789420c719b0a59a59885412124d8731297b3a44a98f50a99190cfb71","sha512":"45a3ed30afb383960a83cd36730f4a1211103b73c11b02f0741d6f2ecbf72e0b819fec5be205100e10a4c66b4fdfb3ba40f0ab650ae8c180d7348176ac7eca90","ssdeep":"6144:0Bm/yp2a4t90uwbWZJT+Nju5204O0nsYXdXAQ2:K3YJH0KZJu0qC","tlshash":"099419de73d674225396f078503f018ba57b28a2b44cc89af189cde42e74a9a4177f7c","first_seen":"2025-10-09T07:44:53.060498Z","last_seen":"2025-10-09T07:44:53.060498Z","times_seen":1,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/www-player.css","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:00.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/player/38e0f4b0/www-player.css HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\"\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Wed, 07 Oct 2026 11\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Oct 2025 04\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\ncontent-length: 74835\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\ncf-ray: 98bc40154ebb56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":511842,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"c047adeb9d2000f29587cc6f2f7e5e6e","sha1":"23e9389109eb87e886b539a6d14d0c3037f53c30","sha256":"13dd54e1acc89e3a21f9685ed0f71925e12e3a1959e4829a1ee0b1836ecfa205","sha512":"3b573cf2c56d289bd6ff25bda8e18db9e9f30c800868dff1d75fd8dbea5001670b1edae31898156c9f348b9d3105ec824908fc572fe35dd87a60a24df8d62070","ssdeep":"6144:8g/+vh2kqMMg7U6Bh+YoOufIniHzo7oGm:oZUMMg7U6Vo1fIniHzo7oD","tlshash":"b6b4e972f0d1233cf21b8d9997d9964d7239d983e2e22aeff11165dacbc77811326206","first_seen":"2025-10-01T14:32:51.783392Z","last_seen":"2025-10-09T23:51:49.321927Z","times_seen":3362,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_es6.vflset/en_US/embed.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:00.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/player/38e0f4b0/player_es6.vflset/en_US/embed.js HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-type: text/javascript;charset=UTF-8\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\"\r\nexpires: Fri, 09 Oct 2026 07\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Oct 2025 04\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 10539\r\ndate: Thu, 09 Oct 2025 07:44:01 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncf-ray: 98bc40161ece56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":31772,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3466)","md5":"6a0a848dd0674ec989a10862dfd83c28","sha1":"6e54eda70e06787854c1cae8aee9758a4468a648","sha256":"73df5a383b620cfb35fae1e2daec377775ff67125e230f1540f259fa43408646","sha512":"87efa6e275e9f6638f9b4d83dbfb2e8b46abf17e749108a480286e83f931cd544563077adc512794d9fd5f6980b0ab471f86280477b15cee7aadc5dfcd2e5f5f","ssdeep":"768:++1CTu5Kx9mYEUrQovGe046jbXBg7JlH43MFGF+H0Jv2fDm:JoO4eBXXf","tlshash":"17e2e74a73d1a43586a4d1ef6c071204ab1a94cc3860e36c7b3eddea6c75e16707af70","first_seen":"2025-10-09T07:44:53.063458Z","last_seen":"2025-10-09T07:44:53.063458Z","times_seen":1,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=770\u0026max_height=433\u0026hash=iTRAyQa3AeIiqUeahtXarnWb21_0TxNsH-BYMy2WmlA\u0026media_oembed_control%5Bprovider_name%5D=YouTube","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:57.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=770\u0026max_height=433\u0026hash=iTRAyQa3AeIiqUeahtXarnWb21_0TxNsH-BYMy2WmlA\u0026media_oembed_control%5Bprovider_name%5D=YouTube HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\nrefresh: 2;\r\ncontent-type: text/html; charset=UTF-8\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=3,cfOrigin;dur=173, cfExtPri\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ndate: Thu, 09 Oct 2025 07:43:57 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GXptReynT7ygxbsOP%2BHQN%2B7iepbmjMtll1mm5pucv%2BvVqNI97pLeXYeGRYPbsMdA4vfUhH41g%2BwX9cmErmoA9FQ58l%2BGKntwsA%2FIdCcv87Zn3QKnoTui6Dmlj%2FWQ05PYJolIMObNvUFe\"}]}\r\ncf-ray: 98bc40009d5456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6a532ed10ddcc9f012f8144fc8922022","sha1":"0ffefb6f16c5a5007ed6428e86ca604c72c28708","sha256":"6bd6d6803e0a9191ec775bb646dc32a1dba2c3043be403b5e042fda1238c0cda","sha512":"1221d384b5ded87cb4bacb6a0f4da4f91f0b9a9679c4ba05b8e1c75753678b9a077ff5c62f90d8dc7902d5590017513f4c8fc71737e1cb4db21f9130f5206025","ssdeep":"","tlshash":"ae60000c000000003030f30cf030f0033000c0c00c000c0f30cc000300c000c0cf000f","first_seen":"2024-07-24T08:29:06Z","last_seen":"2026-01-10T23:27:53.417708Z","times_seen":14,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/system/files/styles/thumbnail/private/image/smartfact03blpaidincapital.png.webp?itok=Rt6NchKP","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /system/files/styles/thumbnail/private/image/smartfact03blpaidincapital.png.webp?itok=Rt6NchKP HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\nlast-modified: Thu, 03 Jul 2025 07\r\ncache-control: private, max-age=2678400\r\nx-drupal-dynamic-cache: UNCACHEABLE (no cacheability)\r\ncontent-language: en\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sun, 19 Nov 1978 05\r\nx-generator: Drupal 10 (https\r\nx-drupal-cache: UNCACHEABLE (no cacheability)\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 i6537666162393131633866303038626561666263613230623139396165363234o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: wWMMpGQ_sLkKkebSxrmmU1j78hvOyHqWVwhALFrWepGtEZZts3h84Q==\r\ncontent-length: 2220\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2F4gdOPYLJn6i0FsE5uCwjnrxDe2Wx%2FQ1Wq%2B5SbYXZ2GmgO%2BpWaCbISrDqIpYoul%2FnlSmuwPxH4XUoroQUuZmO2U9VfsIWjIs7vrYB9WYWs1hMHMIxXxbdi1q%2Fme6ErowET90%2BbYoBO8\"}]}\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bc400b6e1f56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Drupal","description":"Drupal is a free and open-source web content management framework.","website":"https://www.drupal.org/","common_platform_enumeration":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","icon":"Drupal.svg","categories":["CMS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2220,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"6cb864d0246f9ba2c68c1040c73815de","sha1":"158b6575b283cecb3dcc1bcff094d40df561b538","sha256":"a9ab0430cba5ce1612483af594c12ff64526c344bf7ffceaec364ec446ab7b31","sha512":"adc7739346bb306a7af1aa1c4bd9f5cab798e90339f898d87800fd2e3444f89a352d31032720f572180f99660dd27dfce251094812dc38710b64cd46488e966d","ssdeep":"","tlshash":"30410772eb214426a2e2fbc95ab607333c595852c7c6fcce2170aa67d4003a5bbe6251","first_seen":"2025-10-02T10:05:42.397632Z","last_seen":"2025-10-09T07:44:53.064909Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","date":"2025-10-09T07:44:01.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 07:44:01 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98bc4016685e5685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-26T18:21:48.088861Z","times_seen":336413,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/cdn-cgi/rum?","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","date":"2025-10-09T07:44:02.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1157\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eJeMVm71DEC%2Fe%2BLGag9m3rnVLui0K6r13GLcfEceBjfcRKe2qhlmSYEqRl7TRZDsrcud37W%2BqCUeV3QlV%2FsQQiHZFxDhjXbpKFfMOsQtVj%2BKeXqtmqMHSSCn9wQs6ZAhSvkS3EtOCYmHHjD7P%2FxtS1gEXmx5w5cu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 09 Oct 2025 07:44:02 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 98bc401d6f5256b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=1920\u0026max_height=889\u0026hash=xWhLk7Ki-rPBwB_EPDITkxWUpG5V83Ou8MnuaDYyfjM\u0026media_oembed_control%5Bprovider_name%5D=YouTube\u0026media_oembed_control%5Bsettings%5D%5Bvideo_autoplay%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bloop%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bvideo_background%5D=0","date":"2025-10-09T07:43:59.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /embed/pIyTAxHfb7Y?feature=oembed HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=4,i=?0\r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy-report-only: script-src 'unsafe-eval' 'self' 'unsafe-inline' https\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: require-trusted-types-for 'script'\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_other\"\r\ncross-origin-resource-policy: cross-origin\r\norigin-trial: AsnbWYr3bqK88n/C2BgXPMpBC+msV4jf6vsgnAir+gFnHw3zXZEKmz271E4vhxTja+7SD2q3dr2BxZlHzvj9HA0AAACBeyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUtbm9jb29raWUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nreport-to: {\"group\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=10,cfOrigin;dur=554, cfExtPri\r\nvary: Accept-Encoding\r\nset-cookie: youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; Path=/; Domain=i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:53 GMT\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 98bc400c9e3156b4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116929,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (57414)","md5":"39c8fb201a06f7676fb2943a05d5d168","sha1":"9b09034b9a4111259d36339ee439e695aa1e294c","sha256":"07a3feaba16330d7da485e941411dae8b885156c1ef4105831b564c1b6da2833","sha512":"ac3503e03a4916dd20b61ed1416f3a31aab7a11a60393ac1cef5cd849f0f5ad47f3b0c3b13b17fac040b143c2dd80574424072a07b3edbe70c95de2343eb883c","ssdeep":"1536:bXiWk3rbEGOcyQDU/ZtIZh+ajbPMwaM+3USHUIJqvtKV1S9iLY+Int+r:vCyD++UP9A3LFqvIHSkfr","tlshash":"96b3f7540c68a8329893d447edb9ff3e9cf8127a4b84996dbdbb875c01ec6510eaf413","first_seen":"2025-10-09T07:44:53.069227Z","last_seen":"2025-10-09T07:44:53.069227Z","times_seen":1,"resource_available":false,"data":null}},"time_used":750,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":573,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DHnPzxr_IYrE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=CCoxdgK2dmAuUjR4t6ad6G1Sf3FLozO12TgxZYCeTRw\u0026media_oembed_control%5Bprovider_name%5D=YouTube","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DHnPzxr_IYrE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=CCoxdgK2dmAuUjR4t6ad6G1Sf3FLozO12TgxZYCeTRw\u0026media_oembed_control%5Bprovider_name%5D=YouTube HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g0$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: max-age=31536000, public\r\nx-drupal-dynamic-cache: UNCACHEABLE (poor cacheability)\r\ncontent-language: en\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sun, 19 Nov 1978 05\r\nx-generator: Drupal 10 (https\r\nx-drupal-cache: HIT\r\nlast-modified: Sat, 04 Oct 2025 06\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cookie,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3763646566663465653865356464326132653361343539623061353665666561o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: LVOd5ke7McLD2fUcSPPCDIR5gWaEmAbhfYGnv7BKBsp47CI0YOfCLw==\r\nage: 168258\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=3,cfOrigin;dur=209, cfExtPri\r\ncontent-encoding: br\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wV0PpKtK5yvF0LNLMVDsOJU0P9TjEYzrIx0yeZ9Jcu4R2BTXMKpAONTKb2Z6hSsnpHde%2FtMlFAEFG%2BVjirg161hnQeCwLZCMA2%2Fc4WvUeT6JLazI6LUZsb8rufDh2TycSoxEcdXHiDuY\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: 98bc400ede4656b4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Drupal","description":"Drupal is a free and open-source web content management framework.","website":"https://www.drupal.org/","common_platform_enumeration":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","icon":"Drupal.svg","categories":["CMS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5094,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (645)","md5":"c9f0e886af1a570e30afb494ea03a289","sha1":"136276336878509be960ee773229faebd5a75075","sha256":"cd2e72bc0050bf5562b3e6b19e5b44bb582d89ee6ca0194318d76f5d0faebbad","sha512":"9457422db2dfddd73dff7a63ca1fd5e430d56eaea2557beb90658dfc76356f55026f3b7fb06f0f8eede0990f9967ba1063401aabbbc8135fdcddd939213ad93b","ssdeep":"96:e5C34eNILfVS3jCJut8p9QBJfuH4xrpUmqx6mI31fGtOuvqKjyhjd9QHuL6RUhqr:e+4eNafVjutQ9QLfuYxrp8xw3wtSKjyQ","tlshash":"4cb1b8062aa70516801770e627be6344363850876106cf16fa8ff7cdaf9c57e81f9b8d","first_seen":"2025-10-09T07:44:53.070693Z","last_seen":"2025-10-09T07:44:53.070693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/www-embed-player.vflset/www-embed-player.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:00.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/player/38e0f4b0/www-embed-player.vflset/www-embed-player.js HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\"\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Wed, 07 Oct 2026 17\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Oct 2025 04\r\ncontent-type: text/javascript;charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\ncontent-length: 135576\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncf-ray: 98bc40136ea156b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":392722,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1179)","md5":"f816a71b7812263dfbd90b2f188e4e71","sha1":"a1056b37fc9d357390134cb577f9f2ddc1282b1f","sha256":"5d4c0f23d18b1530178939dc001b492e697e6927a6cea13de4335e6a983036c9","sha512":"b81696abb1aee3e93770c9ac0841ed706f550afa57081c17e312404cd531c7237fb52412df2b61993e9e91f7c3d845be1869794971c6324482256af777d0972a","ssdeep":"6144:NsOOFQm8Yt7RnwK7juuT2PG/i3JJX7vthi9:Txm8Y/KO8HX7vtW","tlshash":"2e843ccdb692706253a3a5b4403f110b713ab8aab80cc8b8f195d5d92e7495d8337f7e","first_seen":"2025-10-09T07:44:53.072108Z","last_seen":"2025-10-09T07:44:53.072108Z","times_seen":1,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:12.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nX-User-Agent: grpc-web-javascript/0.1\r\nContent-Length: 24\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Referer\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WBf75XUXaJjrA233vQYJ%2BTLNDpyj53l%2BTmXpk55B6GjqLOT6ujBzjS7w0tIb0dQlTVWpDxuxKz5Nq2v1bEav56kN%2Bpi698Stmn4giMDlhFchYIhpVTfKMZd3r4Q6T0sn1vGfdykGTSeGh5Em1qbHPwB1\"}]}\r\ndate: Thu, 09 Oct 2025 07:44:13 GMT\r\nserver: cloudflare\r\nset-cookie: jnn-pa_googleapis_com=%7B%22HttpHost%22%3A%22jnn-pa.googleapis.com%22%2C%22HttpDomain%22%3A%22jnn-pa.googleapis.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fjnn-pa.googleapis.com%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GirisIP%22%3A%22142.251.140.42%22%7D; Path=/; Domain=i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:42:06 GMT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40605b1156b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12909,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"ASCII text, with very long lines (12909), with no line terminators","md5":"2d08a4e00ffb7a60a4eb4cfd56a7c6f2","sha1":"d80bd622cc3c8caa84f6e98bd37fdd224c640bb2","sha256":"c038b34dee55a466c15b281f485185f76946beeb35dafa264d631a3e328dfae5","sha512":"b6416210d15942032c3ee60da93018ea39671d45ac39fe92e3b623a008b19da2908f0edd7b9a331d3d9fa7f5bbd166e7777eb4e6285af914334a8df2a7b19469","ssdeep":"192:mxM11xPflhQaUXgMH16qGgWIhEuo+LGEIcfLL9xp51wwpRdSP/wChgXhPtvkwgMG:mKPflAxH16h8e5+qENl7515ly/LubzG","tlshash":"2642b75af80eb10476890259ce48b69ee737d98050604ce85207e73996fcb87df5db8f","first_seen":"2025-10-09T07:44:53.011189Z","last_seen":"2025-10-09T07:44:53.011189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:14.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nX-User-Agent: grpc-web-javascript/0.1\r\nContent-Length: 24\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Referer\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=joUUJlIhOfWql7nEgzqKyJaoCDk%2FQA7bUyZl2Awf3egiNJsYfkB1BCDqEaHXGBUUTYIQBfBg%2Bg6CAwTTB7Dc2zpzmzAoHEReNkD7c2jLBjxuTp7J6sLz3zmwD6Io2kHo9TA1fPxwiCg%2FkU33q%2F8Szn9I\"}]}\r\ndate: Thu, 09 Oct 2025 07:44:14 GMT\r\nserver: cloudflare\r\nset-cookie: jnn-pa_googleapis_com=%7B%22HttpHost%22%3A%22jnn-pa.googleapis.com%22%2C%22HttpDomain%22%3A%22jnn-pa.googleapis.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fjnn-pa.googleapis.com%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GirisIP%22%3A%22172.217.20.74%22%7D; Path=/; Domain=i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:42:07 GMT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40691b8056b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":12910,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"ASCII text, with very long lines (12910), with no line terminators","md5":"973a2dd1c43cf273025df9485f6664d3","sha1":"1c87fe42cdc6b983f082a55b869afa0919f70f7a","sha256":"9bb3b89a4f10e632dad0be6871cd9a70750fc061ff3a4ca62e196f88f75506de","sha512":"4a8137513dfa466ce68a205d27b1ebd38e095b77ac488ae56d6deaa5044a09dcc40996ecadc293c451a6a83159c40bd8ba5a83fe41e35be3da66aa4486fabe7e","ssdeep":"192:mxM11xPflhQaUXgMH16qGgWIhEuo+LGEIcfLL9xp51wwpRdSP/wChgXhPtvkwgMB:mKPflAxH16h8e5+qENl7515ly/LubzB","tlshash":"8542b75af80eb10476890259ce48b69ee737d98050604ce85207e73996fcb87df5db8f","first_seen":"2025-10-09T07:44:53.075544Z","last_seen":"2025-10-09T07:44:53.075544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/modules/contrib/google_tag/js/gtm.js?t3eiuv","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /modules/contrib/google_tag/js/gtm.js?t3eiuv HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: text/javascript;charset=UTF-8\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 02 Dec 2024 22\r\netag: \"4ce-62850cd2c6f40-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 12\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3734363439336361666161653636663264343535666434363830383465616438o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: xqm1brF800c-kmV17xoNNxQrQR3GMh-D-bc2kVIpCXSlOHGZebML_g==\r\ncontent-length: 576\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dzqxuG1%2F59s2NzBIHf85Ri1f97rQUOkEt%2FPoPu9IfaH4yDzTwM6Yanr8J%2FMHQPa1625QU91hYZeiosazA%2FIXynGYwCMaNg49mi5vemdGwsHHeIzohqYq3BNd4VWCMpTp6x4sMakoBP7w\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40056dbd56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1263,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"73fc475873aff0dc156d6989e2804a89","sha1":"c402533d57c201b5367cc60f4520e56469c8afe1","sha256":"74f8cc06b3bc0da846c970846f2cb719aa8e7211b5c5a0c548982b6b279a48e5","sha512":"d60addbbf3b1204c13d2feec6781f91441f73f28b1494a1b8f037af4a2a67bbc9246ee210122e19b617cb0376abe62bc54596af1fb994e3f3518c5910bdb3612","ssdeep":"","tlshash":"9f21cd513db6487e091219dac75f83b0355022362c41f8a8b9ad8d497e71fee89c1ecc","first_seen":"2025-10-02T10:05:42.387321Z","last_seen":"2025-10-09T07:44:53.076728Z","times_seen":2,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/styles/slider_big_image/public/image/2025-10/CMS%20slider.jpg.webp?itok=uoRA9Hyu","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /sites/default/files/styles/slider_big_image/public/image/2025-10/CMS%20slider.jpg.webp?itok=uoRA9Hyu HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/webp\r\nexpires: Fri, 02 Oct 2026 08\r\nx-content-type-options: nosniff\r\nlast-modified: Wed, 01 Oct 2025 13\r\netag: \"e686-64018b8352f70\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3738636462343631366637396333643563313966643738313539343861653161o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 5cPcADof4BEPB_dGXz4CieZsKUzEV95O8d1iytrXITDCa_oqIMSTEg==\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QASGGD1keuTVW6F9SjxklF0AUjRigcK2narAUkqbyDdc%2FuOmA3czrU%2BFbDO2pvg7hQWFvxI%2BREiLrx0vZgWkhqdMcGS5SPR5H150Yczo4pg5E55jcZzIamM6Po6x1BDqZAjZLbTCyhJe\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc400b7e2556b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59011,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x889, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c83a35a2a84d2f3738cb801b014c6d7a","sha1":"2855b5fd7cd2c1f43733117fc5c06bb3eeef37ad","sha256":"a846dca2940abe9452ea50201c7bb4a87ba1fce4383f632d62eae6f04bed1f5e","sha512":"67ae48ba3e1befcbb8e49142af59282a9b8fd6aabee5e486eb419a1464b118f2e2a6d1f2a11152c0174c71e4f522c945b490e93f4dad9aac98da1bae272aa16c","ssdeep":"768:2iAPhmHL9OhvwadLxbHxTItuGeuBSaUV/PrUZgBSsz6LC9/Va3jKpe12h/fC4:2iAPhw9OdwkstuGjwHwZWL6LcmjHQf5","tlshash":"0643022ffbcf65101f1a9cddc1a14b6967a1a667519863c2a147b0c37682b3c1af330e","first_seen":"2025-10-02T10:05:42.379669Z","last_seen":"2025-10-09T07:44:53.077979Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:00.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Thu, 09 Oct 2025 08:32:00 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BjVAfz3la6IngOU1tyr7Zekkphqnj37sevVBK0d2maiIBQNH0I0pePcqvz30EH2dEdOX8NjP8jQhDhQQoXj9pyLz7XO%2BaEI1ZBTFA69%2BLEtBWjmaioQM1e1n9LitPbNU9L5qxkGPa%2F3z84F3zQc6fX5GiFcAypI5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\ncf-ray: 98bc40126e8e56b4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T16:53:36.485058Z","times_seen":109707,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=770\u0026max_height=433\u0026hash=iTRAyQa3AeIiqUeahtXarnWb21_0TxNsH-BYMy2WmlA\u0026media_oembed_control%5Bprovider_name%5D=YouTube","date":"2025-10-09T07:44:00.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98bc40128c825685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-26T18:21:48.088861Z","times_seen":336413,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o676f6f676c65o636f6dz.oszar.com/js/th/CfTnQukLks5bs8x-CaqyPUkLGsL_zVi8KCE037ufnyo.js","fqdn":"i777777o676f6f676c65o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:04.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /js/th/CfTnQukLks5bs8x-CaqyPUkLGsL_zVi8KCE037ufnyo.js HTTP/1.1\r\nHost: i777777o676f6f676c65o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995843$j56$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; google_com=%7B%22HttpHost%22%3A%22www.google.com%22%2C%22HttpDomain%22%3A%22google.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fjs%5C%2Fth%5C%2FCfTnQukLks5bs8x-CaqyPUkLGsL_zVi8KCE037ufnyo.js%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.google.com%5C%2Fjs%5C%2Fth%5C%2FCfTnQukLks5bs8x-CaqyPUkLGsL_zVi8KCE037ufnyo.js%22%2C%22GirisIP%22%3A%22142.250.187.164%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\"\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Thu, 08 Oct 2026 04\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 29 Sep 2025 09\r\ncontent-type: text/javascript;charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-length: 25466\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ndate: Thu, 09 Oct 2025 07:44:04 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\ncf-ray: 98bc4029f83856b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":58957,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (57711)","md5":"09a3450a24dc078ae03de856372c1b8e","sha1":"237f85dee5c0a7dd5726cd88ae56d90d58c213bc","sha256":"09f4e742e90b92ce5bb3cc7e09aab23d490b1ac2ffcd58bc282134dfbb9f9f2a","sha512":"75478689fd0a17ec781ea26ec98d800620f622299e1a0d3e0e78bffd91c00550c56a1b7dd9fc015230188afcc153139a4cfbac0262970f8d51312d722e3a5e0a","ssdeep":"1536:jpkBjKiF6iLiS6WBcVW01eJKx+cUnK66kh4GurV:ejKiF6iLiS9k1ec4Lnh4j","tlshash":"9b432acfb2d2673089f369e2115b410921bea8265c543c6ebd16e3f46e75a87402ff39","first_seen":"2025-10-01T14:03:15.205419Z","last_seen":"2025-10-14T06:58:33.913817Z","times_seen":1101,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/assets/fonts/preloaded/inter-latin-variable.woff2","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:57.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/assets/fonts/preloaded/inter-latin-variable.woff2 HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=3,i=?0\r\ncontent-type: font/woff2\r\nexpires: Wed, 07 Oct 2026 08\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\netag: \"185b4-63fc947b0a800\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3838613562316466643063623232386463616663313238353663313934323936o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: tKSuhSXqetVRZVTtWzC0qEkmyHXej6FoCLG8u4u0-xkBH092wQGP0w==\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hc0bweYXTZRD71h8nHl%2BBDb246TVpg3wpcPadeiu06y2rOud2AVN76b1QM8IVtWI4qUUjImJvMynRvV50DlNem%2BKtaTl99huB2Sx8ADrH8dKmlsVUC22pE8Ytd%2Bq9gBdWurQsiAfrZwn\"}]}\r\nset-cookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Fassets%5C%2Ffonts%5C%2Fpreloaded%5C%2Finter-latin-variable.woff2%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Fassets%5C%2Ffonts%5C%2Fpreloaded%5C%2Finter-latin-variable.woff2%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; Path=/; Domain=i777777o65736do6575726f7061o6575z.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:51 GMT\r\ndate: Thu, 09 Oct 2025 07:43:57 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bc40005d4656b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":99763,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 99764, version 4.66","md5":"34d19e6051362444e78af16076429333","sha1":"1ff05aae5a99d78ee832510d1519c84dea6e0c93","sha256":"a3cd608be23e2b2e2480a9afa4e4949d87de787d633de8dab0656d7dc15e3d49","sha512":"1301363fbaf35c12550d6e816114c045ab288a2d7c631c3fd411e8d7b252b344a7153ff6db45f5d8ac8cc3a0b5c7e42fc53b0d369c80e2f1d92a637f6b63d5dd","ssdeep":"1536:h3cVOIj3tb9o8GM1AHN/CgGiG1S4V9QRxr1sjg9x8CzzoAG34CYlv2yCfsbdA:CVn5q3IAHNPG1S4V9QRF1aK8CYANaadA","tlshash":"54a3123b3c092128c509fdb96f40dcee425107e8ece5b9f4fa184a55bb7a9ed12a01c2","first_seen":"2025-10-02T10:05:42.346821Z","last_seen":"2025-10-09T07:44:53.079854Z","times_seen":2,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=1920\u0026max_height=889\u0026hash=xWhLk7Ki-rPBwB_EPDITkxWUpG5V83Ou8MnuaDYyfjM\u0026media_oembed_control%5Bprovider_name%5D=YouTube\u0026media_oembed_control%5Bsettings%5D%5Bvideo_autoplay%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bloop%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bvideo_background%5D=0","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=1920\u0026max_height=889\u0026hash=xWhLk7Ki-rPBwB_EPDITkxWUpG5V83Ou8MnuaDYyfjM\u0026media_oembed_control%5Bprovider_name%5D=YouTube\u0026media_oembed_control%5Bsettings%5D%5Bvideo_autoplay%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bloop%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bvideo_background%5D=0 HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PNFHQ1FTKQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:01.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=G-PNFHQ1FTKQ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 09 Oct 2025 07:44:01 GMT\r\nexpires: Thu, 09 Oct 2025 07:44:01 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141538\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":426867,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"48a7cc69bb1bde48329fea16b77b302a","sha1":"185982a8aa4b456c2a35d225f1e49c86c0a8ba0c","sha256":"00fc462ef7f9ceba8e8d4d10836a28823acdb238b3996c7568c3c171008f0904","sha512":"8dd76ae8c4fa51581032d5c22d02e0ee681d479140eea6df9b4bc4b56da2e8383c870cc8cf78f26ae21f4e410b6e161cc299ae7a943da8306dae8a7b412f3635","ssdeep":"6144:0B6wep2itv0njCnzGwXV4rvoB6b6GBQ5w0yNWXy:KyY8snjYGdoT5y","tlshash":"149419ce73d674225396f478503f018ba57b28a2b44cc89af189cde52e74a9a4137f7c","first_seen":"2025-10-09T07:44:52.993353Z","last_seen":"2025-10-09T07:44:52.993353Z","times_seen":1,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/rum?","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DHnPzxr_IYrE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=CCoxdgK2dmAuUjR4t6ad6G1Sf3FLozO12TgxZYCeTRw\u0026media_oembed_control%5Bprovider_name%5D=YouTube","date":"2025-10-09T07:44:02.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1302\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DHnPzxr_IYrE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=CCoxdgK2dmAuUjR4t6ad6G1Sf3FLozO12TgxZYCeTRw\u0026media_oembed_control%5Bprovider_name%5D=YouTube\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995842$j57$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WGSu40x0dblCV6qJ2zXOrWHvmE255qKXM3olAwbduDi29ibAqfbBjZOE5ciGpzeG5TVpkkDJbf8puNxjXhOUb1q34YEFeOfzco%2BmMMJH%2BExt53Po%2FnAepsNXx3KpfSN5GAWfGeL3nYk9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 09 Oct 2025 07:44:02 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 98bc40222fa556b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i666f6e7473o676f6f676c6561706973o636f6dz.oszar.com/css2?family=Architects+Daughter\u0026family=Raleway+Dots\u0026family=Raleway:wght@100;400\u0026display=swap","fqdn":"i666f6e7473o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:57.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /css2?family=Architects+Daughter\u0026family=Raleway+Dots\u0026family=Raleway:wght@100;400\u0026display=swap HTTP/1.1\r\nHost: i666f6e7473o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 09 Oct 2025 07\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 741\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\nset-cookie: fonts_googleapis_com=%7B%22HttpHost%22%3A%22fonts.googleapis.com%22%2C%22HttpDomain%22%3A%22fonts.googleapis.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fcss2%22%2C%22GetVeri%22%3A%22%3Ffamily%3DArchitects%2BDaughter%26family%3DRaleway%2BDots%26family%3DRaleway%3Awght%40100%3B400%26display%3Dswap%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Ffonts.googleapis.com%5C%2Fcss2%3Ffamily%3DArchitects%2BDaughter%26family%3DRaleway%2BDots%26family%3DRaleway%3Awght%40100%3B400%26display%3Dswap%22%2C%22GirisIP%22%3A%22172.217.169.106%22%7D; Path=/; Domain=i666f6e7473o676f6f676c6561706973o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:51 GMT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TO19wPLWK8%2FuTZsUX%2FllWIxeB2hGorabYj17PsWPc%2BTXH4byCww3OvC%2BMrg0Hm8ervoCaMMmVLH4iKyG8AafpCNovA165okdcKIJdX9AO4AQqrVZjIby68Spl6VcBJ4UGrR7eY%2FBopqt1X5qet1L8Q%3D%3D\"}]}\r\ncf-ray: 98bc40015d5f56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5836,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e86b6f50dc28c2121d2f7946ef5b4600","sha1":"22f95e856c735f6b19d0aa41f329f83c6e283e60","sha256":"2f7ef1afdf4d65c144b65cd98698e5f269d8a73e6623ac2ef12a00b52f77435f","sha512":"8314798134dcd667179a6b43a2f861400fb94226f778b23ff9a6e730ec89b231c339da37b6972a6952b92fe50df350fcf9bf4a2c488464f86bf9ace32e3bc1cc","ssdeep":"96:hOEaCJc+u1OEayNaOS0aGfOS0aCFZOGOS0arxOS0aTJc+uKOS0aqNaOEaGfOEaC7:uK1LpGdpHqprnpH3pqGoHRr+HOZzaN","tlshash":"6dc100e108579000db8b9dc927cd7f36ae1e7251704299699fff18a8bc7bc66236070d","first_seen":"2025-10-02T10:05:42.400561Z","last_seen":"2025-10-09T07:44:53.083639Z","times_seen":2,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":429,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-J0YDDLDEYK\u0026cx=c\u0026gtm=4e5a71","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=G-J0YDDLDEYK\u0026cx=c\u0026gtm=4e5a71 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nexpires: Thu, 09 Oct 2025 07:43:59 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 145117\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":470440,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37121)","md5":"22d0a3419bf1842a84a3611e75cfad06","sha1":"7181309f2a75806e829b6b3bf18a195a6d1fa6e8","sha256":"447e32da9f02341353cd171dcdef5399ad78bddc251415dc40b80d20350b172a","sha512":"91741dd5ffb8dd324dcd2f83fe3efcba99c78985e6baf22fdcddbea57df5e13f86dc082cb9ef6238ed8b97cb2c9fadbb7fdc480e54cc48ef0e0e10fc58f99d0c","ssdeep":"6144:1Brwep2itv0njCnzGwXV4rvoB6bEGBQ5w0yNJWy:LjY8snjYGdo3Fy","tlshash":"92a4099e73da742252daf478506f018ba47b24e2f44cc8a6f1d9cde02d34a9a0167f7d","first_seen":"2025-10-09T07:44:53.086959Z","last_seen":"2025-10-09T07:44:53.086959Z","times_seen":1,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-KDHGVQDDS2\u0026cid=1609304894.1759995840\u0026gtm=45je5a71v894693559z8830280439za200zb830280439zd830280439\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709~115616986~115834636~115834638\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709~115616986~115834636~115834638\u0026z=2092212110","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:44:00.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:43:45 GMT","end":"Mon, 15 Dec 2025 08:43:44 GMT"},"fingerprint":{"sha1":"AF:04:70:AD:A3:31:10:AE:43:4C:21:61:D5:1E:03:15:9B:9D:82:EB","sha256":"B5:AF:C0:98:F7:62:50:F1:E8:09:72:78:55:CA:3D:4C:A4:82:7A:F5:B7:2F:AC:6D:F0:5D:44:50:49:3B:55:27"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-KDHGVQDDS2\u0026cid=1609304894.1759995840\u0026gtm=45je5a71v894693559z8830280439za200zb830280439zd830280439\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709~115616986~115834636~115834638\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709~115616986~115834636~115834638\u0026z=2092212110 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-26T18:19:02.568025Z","times_seen":914455,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o676f6f676c65o636f6dz.oszar.com/js/th/CfTnQukLks5bs8x-CaqyPUkLGsL_zVi8KCE037ufnyo.js","fqdn":"i777777o676f6f676c65o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","date":"2025-10-09T07:44:01.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /js/th/CfTnQukLks5bs8x-CaqyPUkLGsL_zVi8KCE037ufnyo.js HTTP/1.1\r\nHost: i777777o676f6f676c65o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\"\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Thu, 08 Oct 2026 04\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 29 Sep 2025 09\r\ncontent-type: text/javascript;charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-length: 25466\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nset-cookie: google_com=%7B%22HttpHost%22%3A%22www.google.com%22%2C%22HttpDomain%22%3A%22google.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fjs%5C%2Fth%5C%2FCfTnQukLks5bs8x-CaqyPUkLGsL_zVi8KCE037ufnyo.js%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.google.com%5C%2Fjs%5C%2Fth%5C%2FCfTnQukLks5bs8x-CaqyPUkLGsL_zVi8KCE037ufnyo.js%22%2C%22GirisIP%22%3A%22142.250.187.164%22%7D; Path=/; Domain=i777777o676f6f676c65o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:55 GMT\r\ndate: Thu, 09 Oct 2025 07:44:01 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\ncf-ray: 98bc401a4f0a56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58957,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (57711)","md5":"09a3450a24dc078ae03de856372c1b8e","sha1":"237f85dee5c0a7dd5726cd88ae56d90d58c213bc","sha256":"09f4e742e90b92ce5bb3cc7e09aab23d490b1ac2ffcd58bc282134dfbb9f9f2a","sha512":"75478689fd0a17ec781ea26ec98d800620f622299e1a0d3e0e78bffd91c00550c56a1b7dd9fc015230188afcc153139a4cfbac0262970f8d51312d722e3a5e0a","ssdeep":"1536:jpkBjKiF6iLiS6WBcVW01eJKx+cUnK66kh4GurV:ejKiF6iLiS9k1ec4Lnh4j","tlshash":"9b432acfb2d2673089f369e2115b410921bea8265c543c6ebd16e3f46e75a87402ff39","first_seen":"2025-10-01T14:03:15.205419Z","last_seen":"2025-10-14T06:58:33.913817Z","times_seen":1101,"resource_available":true,"data":null}},"time_used":459,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":349,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o676f6f676c65o636f6dz.oszar.com/js/th/CfTnQukLks5bs8x-CaqyPUkLGsL_zVi8KCE037ufnyo.js","fqdn":"i777777o676f6f676c65o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:02.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /js/th/CfTnQukLks5bs8x-CaqyPUkLGsL_zVi8KCE037ufnyo.js HTTP/1.1\r\nHost: i777777o676f6f676c65o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995842$j57$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; google_com=%7B%22HttpHost%22%3A%22www.google.com%22%2C%22HttpDomain%22%3A%22google.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fjs%5C%2Fth%5C%2FCfTnQukLks5bs8x-CaqyPUkLGsL_zVi8KCE037ufnyo.js%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.google.com%5C%2Fjs%5C%2Fth%5C%2FCfTnQukLks5bs8x-CaqyPUkLGsL_zVi8KCE037ufnyo.js%22%2C%22GirisIP%22%3A%22142.250.187.164%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\"\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Thu, 08 Oct 2026 04\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 29 Sep 2025 09\r\ncontent-type: text/javascript;charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-length: 25466\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ndate: Thu, 09 Oct 2025 07:44:03 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncf-ray: 98bc40209f9156b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":58957,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (57711)","md5":"09a3450a24dc078ae03de856372c1b8e","sha1":"237f85dee5c0a7dd5726cd88ae56d90d58c213bc","sha256":"09f4e742e90b92ce5bb3cc7e09aab23d490b1ac2ffcd58bc282134dfbb9f9f2a","sha512":"75478689fd0a17ec781ea26ec98d800620f622299e1a0d3e0e78bffd91c00550c56a1b7dd9fc015230188afcc153139a4cfbac0262970f8d51312d722e3a5e0a","ssdeep":"1536:jpkBjKiF6iLiS6WBcVW01eJKx+cUnK66kh4GurV:ejKiF6iLiS9k1ec4Lnh4j","tlshash":"9b432acfb2d2673089f369e2115b410921bea8265c543c6ebd16e3f46e75a87402ff39","first_seen":"2025-10-01T14:03:15.205419Z","last_seen":"2025-10-14T06:58:33.913817Z","times_seen":1101,"resource_available":true,"data":null}},"time_used":518,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":424,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/assets/fonts/preloaded/esm.woff2","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:57.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/assets/fonts/preloaded/esm.woff2 HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=3,i=?0\r\ncontent-type: font/woff2\r\nexpires: Wed, 07 Oct 2026 08\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\netag: \"3af0-63fc947b0a800\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i6366623063626432626138633265376530633133613932386233636165646634o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 9ugF4Ju5p7GQWbgOJ6eEEaCnq5INTwIAIu36XSyL6O0c6y46P70KEg==\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NdYiAO0BnP5bS93x85tLVo40RXjgdcOF%2Bv%2BIZm%2BOsaaHzxdvidJy%2BCsNz89PKDQW%2BhjncKbUXmL8PUKoYM%2BrCjE4WGqiKrz1efP9eN4suyTCPvUz92dxU2IKTXuPr7EnK2l955KamfzN\"}]}\r\nset-cookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Fassets%5C%2Ffonts%5C%2Fpreloaded%5C%2Fesm.woff2%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Fassets%5C%2Ffonts%5C%2Fpreloaded%5C%2Fesm.woff2%22%2C%22GirisIP%22%3A%22108.157.52.115%22%7D; Path=/; Domain=i777777o65736do6575726f7061o6575z.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:51 GMT\r\ndate: Thu, 09 Oct 2025 07:43:57 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bc40004d4456b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":15087,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15088, version 1.0","md5":"e298d865fbff48167e84802e936d4d01","sha1":"c0baf2b34392c982bddb5de7623caeca81d83cba","sha256":"5cf5aa3a1e7f571a1580ac14495611d632d0522e9d9635cfd34c5db90a2d3823","sha512":"622ac9d0f37394334d16e2f2a40c8481b95f257df082d586bc1b41b2ce3f00b02d62b691cfc7fc13e59cb159dd91cb5d8075a1d4748adb75dc907eec14e55307","ssdeep":"192:7ousLr9+KBOYfWuF4pC/KxRcf8SioNmdymb8s4xt8Ar8kaMtD6A3ckA7ju81oUmX:7Pqr9+Cfrk8Kx/SioId1bUTfjJ87qfqa","tlshash":"5e62d1785da34053ebd038bdd50ea78c5f295e8419608725090e42b5c9fb1ea5ae07ff","first_seen":"2025-10-02T10:05:42.416155Z","last_seen":"2025-10-09T07:44:53.089104Z","times_seen":2,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i737461746963o616464746f616e79o636f6dz.oszar.com/cdn-cgi/rum?","fqdn":"i737461746963o616464746f616e79o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i737461746963o616464746f616e79o636f6dz.oszar.com/menu/sm.25.html#type=core\u0026event=load","date":"2025-10-09T07:43:59.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: i737461746963o616464746f616e79o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://i737461746963o616464746f616e79o636f6dz.oszar.com/menu/sm.25.html\r\ncontent-type: application/json\r\nContent-Length: 1139\r\nOrigin: https://i737461746963o616464746f616e79o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; static_addtoany_com=%7B%22HttpHost%22%3A%22static.addtoany.com%22%2C%22HttpDomain%22%3A%22static.addtoany.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fmenu%5C%2Fsm.25.html%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fstatic.addtoany.com%5C%2Fmenu%5C%2Fsm.25.html%22%2C%22GirisIP%22%3A%22172.66.171.172%22%7D; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g0$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://i737461746963o616464746f616e79o636f6dz.oszar.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SQTqenfvYJoijUu6%2BVgOZ3mP8cUrFOigsLjQFfAOvU05s34rB5MbzVAushDc5OB0jiK1IxBpc8IyClZM2CHYx%2BWoF1JAx5nSpDxVclOEJt%2FoiUA8D2LcmbMZgZAQMjkAKyUgfRPZM8PmpnDl9oE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 98bc400dae3956b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i65736d2d63686174626f742d7769646765742d70726fo65642d696e746567726174696f6e73o636f6dz.oszar.com/index.js","fqdn":"i65736d2d63686174626f742d7769646765742d70726fo65642d696e746567726174696f6e73o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.749Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /index.js HTTP/1.1\r\nHost: i65736d2d63686174626f742d7769646765742d70726fo65642d696e746567726174696f6e73o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/images/mouse-icon.svg","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/images/mouse-icon.svg HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/css/css_pmEoZYJoqAqjEHUOEhlJ89R2_IsF5X5U3dS8iCt6t8w.css?delta=1\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyNlAuO4yAMhi-UJquVqjkOcsBNmRrMYuhjT79O0s50sulDQkown4yx_RucKwzx0sH1p91ljqXpwR5MYV2pu_s3Bc-lsQd0vnDemkR18NGkkfDRYSymJ7aH7n7TWILM3UDcA22kXMjHobFMnHs-dw53UEm9csbO5ZqAWviE8w-D80A8zKbIOQD5v9g4MEcfrb_5tiINSjCnMdI9BuymANpySdhaTpfsh31ZILZK4WDuSOi5FvXskJf-_od7EG9fUj4eUW3ZZCQonuNrxwQ9ktFcHd5gMTpNqpaI6eBfv7D4Qrig8DhWzEJ2aweikcjq8dwwP20P60Fw0dxeM1c9OcxG0I4ZeULuuGbLlUI0BXox21-6nvAcUdurhmc-y4nfZ8zvrfnYvkW-iu2b_Niq2yXp-wzZo7SffyrmSyvkVUFLaL0SAWOdLtk86vUvQlPKBfOL41Yl_xDZI4zVGw0PmQA6HZ4SoirrIZudz_I4WmGrA2BVDJEdzlCCQQOvRAvi6PG0CThAySoT2RBMYlmhWpXIYK7n00amPC_vnNiIJ8msupoEMF6-RkmAXMwOrCpIa-nGnFdjmQ8e9RMSeYhWRbZiNLfRqEN3fPptGF63zdxW5qqjbu6sLzldT50Xy0dtpW5WRRN0eEPHGHp0WmedpWXshAQZhgxpL7drvi1tjan22nZ7dI14jQ9N4lTTPFOkW7E14_NlSoK0gV0l_AdXM4eY\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/svg+xml\r\nexpires: Fri, 02 Oct 2026 08\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\netag: \"34e-63fc947b0a800\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i6233326666653366663965666137303136383264363565653830336366643363o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: AyiaMTlEMT8hKPxE850_9lOwUEAM9-_62i5k3pWspAbiJX74uZrWCQ==\r\ncontent-length: 418\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PRFuKNcXMAPsCex%2BCKC6jcbt0DXTVZq7gu7OOA67Jg5Z2neuz9yaIMflx4uex528f8FoHJ2AP8AxwCRXVAEMD2MH%2FNq7z5Z8NsleAfscyia6UnRwfSYgqCpDs7Bl3ildbI1CCr%2BaL2TW\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40044da056b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":846,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7904c9bcd09ea91662aeb4f904b5fcb6","sha1":"d3b665677bf5b933275cc98a07aabca00c8cb300","sha256":"8ab3951652da2d8017f06fc4fc0f184f5b591ec73ab4e6c4b0433bf0d3844f32","sha512":"ed27deecc67c6aad166de6118fc2fdf0fd2f4a7603b7f0b39efe00c8e8a9b4f828192bd0e4eb19a7b9dbb1303fa57d91ad48da1ab0fbbd4d17f38cb5314651a4","ssdeep":"","tlshash":"9001ebfa0a18014e78838902dea95461b34db0febdbac3c50a6fc13f3587d80c949438","first_seen":"2025-10-02T10:05:42.425482Z","last_seen":"2025-10-09T07:44:53.090658Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/images/circle-pause-solid.svg","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/images/circle-pause-solid.svg HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/css/css_pmEoZYJoqAqjEHUOEhlJ89R2_IsF5X5U3dS8iCt6t8w.css?delta=1\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyNlAuO4yAMhi-UJquVqjkOcsBNmRrMYuhjT79O0s50sulDQkown4yx_RucKwzx0sH1p91ljqXpwR5MYV2pu_s3Bc-lsQd0vnDemkR18NGkkfDRYSymJ7aH7n7TWILM3UDcA22kXMjHobFMnHs-dw53UEm9csbO5ZqAWviE8w-D80A8zKbIOQD5v9g4MEcfrb_5tiINSjCnMdI9BuymANpySdhaTpfsh31ZILZK4WDuSOi5FvXskJf-_od7EG9fUj4eUW3ZZCQonuNrxwQ9ktFcHd5gMTpNqpaI6eBfv7D4Qrig8DhWzEJ2aweikcjq8dwwP20P60Fw0dxeM1c9OcxG0I4ZeULuuGbLlUI0BXox21-6nvAcUdurhmc-y4nfZ8zvrfnYvkW-iu2b_Niq2yXp-wzZo7SffyrmSyvkVUFLaL0SAWOdLtk86vUvQlPKBfOL41Yl_xDZI4zVGw0PmQA6HZ4SoirrIZudz_I4WmGrA2BVDJEdzlCCQQOvRAvi6PG0CThAySoT2RBMYlmhWpXIYK7n00amPC_vnNiIJ8msupoEMF6-RkmAXMwOrCpIa-nGnFdjmQ8e9RMSeYhWRbZiNLfRqEN3fPptGF63zdxW5qqjbu6sLzldT50Xy0dtpW5WRRN0eEPHGHp0WmedpWXshAQZhgxpL7drvi1tjan22nZ7dI14jQ9N4lTTPFOkW7E14_NlSoK0gV0l_AdXM4eY\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/svg+xml\r\nexpires: Fri, 02 Oct 2026 08\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\netag: \"249-63fc947b0a800\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i6535326263663133343864383435626639636261323661333262666136333636o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: AXpCJ0p12fbwu8rIsBhmxYWkLBEX0sidpV6g23-vt1VfIJNT9h-R2A==\r\ncontent-length: 320\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xy%2BtdNaIt6lvYGvZsx99pJhVnltXFEg5v3wTemeUCSetfOMTUVoJp4OWZoF9gITeiDQFRa%2Fnl9KDpWFOjVsQoXA6r86qnbOHvyTACCWddsX7awu0%2Fk9YHyVgrXA21atSJ59UycnLdbxo\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40045da356b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":585,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1b0a677cb6efe8d946905d2ab0fe6c5","sha1":"657556279c245f23fa23baa1878a857eee2af133","sha256":"bbd35c359f4e78b4297081d66ae9f3df57e43cb9afe8d4206dbc1e6a592c35e2","sha512":"6d910299b544a8e021b393d23ece99707efdb64e617954266aed41e1b6c67ac48d0205482132406cb7adab05bc38e47950093477dc8d9ec73013e0612634736a","ssdeep":"","tlshash":"07f0a67e0b040074830593e0eda87b3e60ee28ce3aac7157f162103030b23cb9cbd686","first_seen":"2025-10-02T10:05:42.334389Z","last_seen":"2025-10-09T07:44:53.094194Z","times_seen":2,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/www-player.css","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:00.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/player/38e0f4b0/www-player.css HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\"\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Wed, 07 Oct 2026 11\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Oct 2025 04\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\ncontent-length: 74835\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncf-ray: 98bc40125e8656b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":511842,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"c047adeb9d2000f29587cc6f2f7e5e6e","sha1":"23e9389109eb87e886b539a6d14d0c3037f53c30","sha256":"13dd54e1acc89e3a21f9685ed0f71925e12e3a1959e4829a1ee0b1836ecfa205","sha512":"3b573cf2c56d289bd6ff25bda8e18db9e9f30c800868dff1d75fd8dbea5001670b1edae31898156c9f348b9d3105ec824908fc572fe35dd87a60a24df8d62070","ssdeep":"6144:8g/+vh2kqMMg7U6Bh+YoOufIniHzo7oGm:oZUMMg7U6Vo1fIniHzo7oD","tlshash":"b6b4e972f0d1233cf21b8d9997d9964d7239d983e2e22aeff11165dacbc77811326206","first_seen":"2025-10-01T14:32:51.783392Z","last_seen":"2025-10-09T23:51:49.321927Z","times_seen":3362,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DDPX5wLp4UaE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=sN5BsVdm4yLBWFtCrHsNwOmhCGUNFXch6adEQ9dzN9c\u0026media_oembed_control%5Bprovider_name%5D=YouTube","date":"2025-10-09T07:44:00.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DDPX5wLp4UaE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=sN5BsVdm4yLBWFtCrHsNwOmhCGUNFXch6adEQ9dzN9c\u0026media_oembed_control%5Bprovider_name%5D=YouTube\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Thu, 09 Oct 2025 08:32:00 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7BlgzjdUoBSc0sZY8QbGekm6UtCUVSwfW1xAn3uekx8DVn6ZdVx4P5xMJJVd4DKtYB3dkmVBZhfzVbEwfJOCcO4wBlPi9gKCtMedmPXzIBXMzXG5wICgmt02uCTNTJFBd016lkaIvkMU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\ncf-ray: 98bc40129e9256b4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T16:53:36.485058Z","times_seen":109707,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/www-embed-player.vflset/www-embed-player.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:01.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/player/38e0f4b0/www-embed-player.vflset/www-embed-player.js HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\"\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Wed, 07 Oct 2026 17\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Oct 2025 04\r\ncontent-type: text/javascript;charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\ncontent-length: 135576\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ndate: Thu, 09 Oct 2025 07:44:01 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\ncf-ray: 98bc40194efa56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":392722,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1179)","md5":"f816a71b7812263dfbd90b2f188e4e71","sha1":"a1056b37fc9d357390134cb577f9f2ddc1282b1f","sha256":"5d4c0f23d18b1530178939dc001b492e697e6927a6cea13de4335e6a983036c9","sha512":"b81696abb1aee3e93770c9ac0841ed706f550afa57081c17e312404cd531c7237fb52412df2b61993e9e91f7c3d845be1869794971c6324482256af777d0972a","ssdeep":"6144:NsOOFQm8Yt7RnwK7juuT2PG/i3JJX7vthi9:Txm8Y/KO8HX7vtW","tlshash":"2e843ccdb692706253a3a5b4403f110b713ab8aab80cc8b8f195d5d92e7495d8337f7e","first_seen":"2025-10-09T07:44:53.072108Z","last_seen":"2025-10-09T07:44:53.072108Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DHnPzxr_IYrE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=CCoxdgK2dmAuUjR4t6ad6G1Sf3FLozO12TgxZYCeTRw\u0026media_oembed_control%5Bprovider_name%5D=YouTube","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:57.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DHnPzxr_IYrE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=CCoxdgK2dmAuUjR4t6ad6G1Sf3FLozO12TgxZYCeTRw\u0026media_oembed_control%5Bprovider_name%5D=YouTube HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\nrefresh: 2;\r\ncontent-type: text/html; charset=UTF-8\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=4,cfOrigin;dur=197, cfExtPri\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ndate: Thu, 09 Oct 2025 07:43:57 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7X%2BzAOyS7gRje0m7EW5vPkATor2p1JNsMSVgswiuqwRkcT7LTISOqr2C3Iq0oRdHW%2FL3LWp1S6HUWzJ5WSvEBT%2BuU5bPBObk9qrXEaJvT%2FcF5%2FHcf4dtJgQGyt5omC4HEzl0EVO7XpBL\"}]}\r\ncf-ray: 98bc40009d5156b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":15,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6a532ed10ddcc9f012f8144fc8922022","sha1":"0ffefb6f16c5a5007ed6428e86ca604c72c28708","sha256":"6bd6d6803e0a9191ec775bb646dc32a1dba2c3043be403b5e042fda1238c0cda","sha512":"1221d384b5ded87cb4bacb6a0f4da4f91f0b9a9679c4ba05b8e1c75753678b9a077ff5c62f90d8dc7902d5590017513f4c8fc71737e1cb4db21f9130f5206025","ssdeep":"","tlshash":"ae60000c000000003030f30cf030f0033000c0c00c000c0f30cc000300c000c0cf000f","first_seen":"2024-07-24T08:29:06Z","last_seen":"2026-01-10T23:27:53.417708Z","times_seen":14,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/system/files/styles/width_1920/private/background-image/luxembourg-kirchberg-01-1920-600.jpg.webp?itok=tDFGY6J-","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /system/files/styles/width_1920/private/background-image/luxembourg-kirchberg-01-1920-600.jpg.webp?itok=tDFGY6J- HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/css/css_pmEoZYJoqAqjEHUOEhlJ89R2_IsF5X5U3dS8iCt6t8w.css?delta=1\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyNlAuO4yAMhi-UJquVqjkOcsBNmRrMYuhjT79O0s50sulDQkown4yx_RucKwzx0sH1p91ljqXpwR5MYV2pu_s3Bc-lsQd0vnDemkR18NGkkfDRYSymJ7aH7n7TWILM3UDcA22kXMjHobFMnHs-dw53UEm9csbO5ZqAWviE8w-D80A8zKbIOQD5v9g4MEcfrb_5tiINSjCnMdI9BuymANpySdhaTpfsh31ZILZK4WDuSOi5FvXskJf-_od7EG9fUj4eUW3ZZCQonuNrxwQ9ktFcHd5gMTpNqpaI6eBfv7D4Qrig8DhWzEJ2aweikcjq8dwwP20P60Fw0dxeM1c9OcxG0I4ZeULuuGbLlUI0BXox21-6nvAcUdurhmc-y4nfZ8zvrfnYvkW-iu2b_Niq2yXp-wzZo7SffyrmSyvkVUFLaL0SAWOdLtk86vUvQlPKBfOL41Yl_xDZI4zVGw0PmQA6HZ4SoirrIZudz_I4WmGrA2BVDJEdzlCCQQOvRAvi6PG0CThAySoT2RBMYlmhWpXIYK7n00amPC_vnNiIJ8msupoEMF6-RkmAXMwOrCpIa-nGnFdjmQ8e9RMSeYhWRbZiNLfRqEN3fPptGF63zdxW5qqjbu6sLzldT50Xy0dtpW5WRRN0eEPHGHp0WmedpWXshAQZhgxpL7drvi1tjan22nZ7dI14jQ9N4lTTPFOkW7E14_NlSoK0gV0l_AdXM4eY\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\nvary: accept-encoding\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\nlast-modified: Thu, 19 Jun 2025 08\r\ncache-control: private, max-age=2678400\r\nx-drupal-dynamic-cache: UNCACHEABLE (no cacheability)\r\ncontent-language: en\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sun, 19 Nov 1978 05\r\nx-generator: Drupal 10 (https\r\nx-drupal-cache: UNCACHEABLE (no cacheability)\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3763646566663465653865356464326132653361343539623061353665666561o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 8IKXUqJoMfRd8EJyAvfFJsE-Svp4J7HZofyaR5O0UbgVUsZPXt2kNw==\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xKC5WhcwOJFwsepf9sD31HvlhXW9bTHzU3uMToVC4kNx9usLHWRN8INoRhyAoRfdslvG03kjakJsijy2xujPxDZ7ighGgwGeMfZuJc0HU%2FcyyifkQy6CzR4fVBNzlYyHEkNExgQISJjH\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40046da656b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Drupal","description":"Drupal is a free and open-source web content management framework.","website":"https://www.drupal.org/","common_platform_enumeration":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","icon":"Drupal.svg","categories":["CMS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92410,"size_decoded":0,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6bee19d65bbaf3d5e30ffcc9408a46dc","sha1":"cb65878997a5d01bd7fcf0504da2d05cc2ebe685","sha256":"b77f1964e11f4542ac5e07eed55ca3e95d49ef27dc0fa7dba7475e8a2c76234e","sha512":"429fa695b071ce84829d4228fb8be93044a11ebbb9e83516ed4e6367af8034653006756d0bc659bbd995237c16bb27080325602d686fa8077af373b936e3e82f","ssdeep":"1536:+77uYsSDlpE0vhaCIjf+KnMAbUPpGXFlDq20jcWlTrezPWtdq/wrfxjpGc/6Lo7y:+fuYrDDE2TIrpMAspy0w03uuAwrfxdGN","tlshash":"579312e906cd073f10f0e4e3ad4f68676c2877d041847d936da3a4ea3a556caf8a0697","first_seen":"2025-10-02T10:05:42.282448Z","last_seen":"2025-10-09T07:44:53.095876Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PNFHQ1FTKQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=G-PNFHQ1FTKQ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nexpires: Thu, 09 Oct 2025 07:43:58 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141538\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":426867,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"48a7cc69bb1bde48329fea16b77b302a","sha1":"185982a8aa4b456c2a35d225f1e49c86c0a8ba0c","sha256":"00fc462ef7f9ceba8e8d4d10836a28823acdb238b3996c7568c3c171008f0904","sha512":"8dd76ae8c4fa51581032d5c22d02e0ee681d479140eea6df9b4bc4b56da2e8383c870cc8cf78f26ae21f4e410b6e161cc299ae7a943da8306dae8a7b412f3635","ssdeep":"6144:0B6wep2itv0njCnzGwXV4rvoB6b6GBQ5w0yNWXy:KyY8snjYGdoT5y","tlshash":"149419ce73d674225396f478503f018ba57b28a2b44cc89af189cde52e74a9a4137f7c","first_seen":"2025-10-09T07:44:52.993353Z","last_seen":"2025-10-09T07:44:52.993353Z","times_seen":1,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":70,"dns":1,"connect":8,"send":0,"wait":48,"receive":25,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o636c6172697479o6d73z.oszar.com/tag/q4i31mzsxs","fqdn":"i777777o636c6172697479o6d73z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /tag/q4i31mzsxs HTTP/1.1\r\nHost: i777777o636c6172697479o6d73z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=3,i=?0\r\ncontent-type: application/x-javascript\r\ncache-control: no-cache, no-store\r\nexpires: -1\r\nrequest-context: appId=cid-v1\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 477\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nserver: cloudflare\r\nset-cookie: clarity_ms=%7B%22HttpHost%22%3A%22www.clarity.ms%22%2C%22HttpDomain%22%3A%22clarity.ms%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Ftag%5C%2Fq4i31mzsxs%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.clarity.ms%5C%2Ftag%5C%2Fq4i31mzsxs%22%2C%22GirisIP%22%3A%2220.250.198.32%22%7D; Path=/; Domain=i777777o636c6172697479o6d73z.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:52 GMT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t6WVumdElNzvsUSa0RyyEejU1nny%2Fkfi2TFo1vSMJx7NXjkKCvtvZaVHI5EPSMpI1szX5261DbfIVdc86YnqIfLKvtGF8I3xiIb9hjGpGrRV%2Bnt71YJFylUe1GBKMlRB97MErw%3D%3D\"}]}\r\ncf-ray: 98bc4007edf056b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":727,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (727), with no line terminators","md5":"dc93485fbcf8b60dfedeff958c38a80e","sha1":"6b6b65715d1430cc743f450bdf5d6309f9515a4c","sha256":"718bf91b16ac2481a39bee428902cfbf98c37a0307cc1eff45b23ccee2fe643b","sha512":"92deb6e015336bd5d70091cd516f7e48351289c489fe2738229b3b56162e6b44163697ae13dae6402aa22d60585df4cdc2621622a7f38af8124776a294290cf4","ssdeep":"","tlshash":"94014435204ea47567bab09433ebdb047877121e11181103e59fc976662cfcb61e388e","first_seen":"2025-10-09T07:44:53.002047Z","last_seen":"2025-10-09T07:44:53.002047Z","times_seen":1,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/youtubei/v1/log_event?alt=json","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","date":"2025-10-09T07:44:04.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1759995844234\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgtEQXp6cTZHNmUtcyjAz53HBjIKCgJUUhIEGgAgXGLfAgrcAjEyLllUPVVnSWtFWFVJWWRUT3U1dGswdlhiZ24yQ19ITmdBVlQxdC1rN0FralZuaVFrd0EwRktsd3B2OUxlSnNFbnRrYnhvUHZfcTJQUVVNZFNiMjBHX3pkQU9OcklFdUtqSE1KcDlrcXdJVC1YOEFNbXRCUUdoX2tIOUJWaWw5TjZFdzBZZnc1UHZCNHduengzb0RWUkFUV3BGUmVvZ0w3ZFpVSjFTbjBLc25BM0ZQUGdEb2pXc0pzeDJyYnl5Q1MxbjFBbW9xZHN4V2pUNktVQlZqcVZlSWZtVDJlOEhyZGJqMlpnNl9YeGJxcXFUNFFGUnEtNC00Z0d3OFFjeEMtZDY3T21ZdHV2ZHFhcU4tN19mM3VzV2NvUG1uMkVVSmwwNjJXR1NIQVUxU2RhaEVhbFRKOTUzRkFvdVRWRU8zaW1FcEpVT2E0Rml2dGRJM2NtbVJMUzFsR1M4UQ%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 1.20251006.00.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 814261735\r\nX-YouTube-Page-Label: youtube.player.web_20251006_00_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1759995841166\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C0%2C0\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 5999\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995843$j56$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Referer,Accept-Encoding\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 47\r\ndate: Thu, 09 Oct 2025 07:44:06 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V6u%2BcQ4L48AfheDOA1TI4UpjTyhxlROCMHKOX2FmAYIIQtXt0mZtxVy3B9U2F3WIS5LoU%2FQuQQiIwCCX544%2BYbCsqH5nnFdtveMKuRFmEbVclcd%2B86boP851GEMNU73vFCW3DGxL3HUfPIs5ugzLvB9RpTUZHsOz\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc402a884256b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"de76b37ee1f94b42a83da569801e2801","sha1":"989e5098c6a30bb708a80cba05172a84450e7aed","sha256":"c02b3933ef8efd8252092f534c78188f5501bf32ea38fb90d9c8a2d213803e9a","sha512":"d4c41823fb070e86440748a91cc39f57d3ff1de83246f0a7241ef35c2bf1a1ea0df2381482842b8c8c2bb545667e580dff9b422d229deeb167c9f0f604feed83","ssdeep":"","tlshash":"c6800038a8200322232000ea202888322a88c8203200ca28830200280cc0a0000a2282","first_seen":"2025-06-21T10:27:34.631531Z","last_seen":"2025-10-09T07:44:53.097588Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2293,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:04.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 07:44:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: content-type,x-goog-api-key,x-user-agent\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XyHiYMtOJOaRd89mmXp7oTOV3x5YJ47ozOBecr03%2B4Pz9YJJwjvyMzm7phdGIcaovs2BbeJY8YsgRNMne%2BV1I0COplsUimVZpxDEdiqL6fvAf%2FmKpHHf3yYbCXvmhKVt%2BlgXPTS0jkCPf8aVfL58OciXWSA%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98bc402efde2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/images/Rectangle.svg","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/images/Rectangle.svg HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/css/css_pmEoZYJoqAqjEHUOEhlJ89R2_IsF5X5U3dS8iCt6t8w.css?delta=1\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyNlAuO4yAMhi-UJquVqjkOcsBNmRrMYuhjT79O0s50sulDQkown4yx_RucKwzx0sH1p91ljqXpwR5MYV2pu_s3Bc-lsQd0vnDemkR18NGkkfDRYSymJ7aH7n7TWILM3UDcA22kXMjHobFMnHs-dw53UEm9csbO5ZqAWviE8w-D80A8zKbIOQD5v9g4MEcfrb_5tiINSjCnMdI9BuymANpySdhaTpfsh31ZILZK4WDuSOi5FvXskJf-_od7EG9fUj4eUW3ZZCQonuNrxwQ9ktFcHd5gMTpNqpaI6eBfv7D4Qrig8DhWzEJ2aweikcjq8dwwP20P60Fw0dxeM1c9OcxG0I4ZeULuuGbLlUI0BXox21-6nvAcUdurhmc-y4nfZ8zvrfnYvkW-iu2b_Niq2yXp-wzZo7SffyrmSyvkVUFLaL0SAWOdLtk86vUvQlPKBfOL41Yl_xDZI4zVGw0PmQA6HZ4SoirrIZudz_I4WmGrA2BVDJEdzlCCQQOvRAvi6PG0CThAySoT2RBMYlmhWpXIYK7n00amPC_vnNiIJ8msupoEMF6-RkmAXMwOrCpIa-nGnFdjmQ8e9RMSeYhWRbZiNLfRqEN3fPptGF63zdxW5qqjbu6sLzldT50Xy0dtpW5WRRN0eEPHGHp0WmedpWXshAQZhgxpL7drvi1tjan22nZ7dI14jQ9N4lTTPFOkW7E14_NlSoK0gV0l_AdXM4eY\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/svg+xml\r\nexpires: Fri, 02 Oct 2026 08\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\netag: \"119-63fc947b0a800\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3933336336613561613133636334383431613737633334613064623361383236o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: VwfQxYcMHDV7rrqyhRqLWYzTAFAF1UowQeQDtT5lggRYBBkAwxFDZw==\r\ncontent-length: 210\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7w0De1MOC%2BJfWZrrBh1jciBKmfdlElZvsWZbW79GAqveZ%2FmgwlDNNFflY42o3YBWTnWcagla418TSC%2BpPyLKpinkOUcAraXNWhvMH4jkV5cn0KM%2FQTbbleVwmOjnTXCY%2BbHS3nnGyOqM\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40045da556b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":281,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67bb3ed99afa1c68d060c7a90b3ff096","sha1":"522c8458cdd6fa6224685a3b3811e0b17d3c2bd7","sha256":"0334ac3c163b4d9cbd4e47bf1930df76ea08b6de2606f9ebb69b23805b168d22","sha512":"647edce89a5c0a1bad55c09787728f2de09911b95e1238120afb6e770db0e882e679f67564242188293523bed74407eb0c4dde1635b912a5dc6aa534d49611f7","ssdeep":"","tlshash":"f5d02b907f089e8c84188434967c81c64b1fa1f9750e04cdedcc7a9dd000593d513245","first_seen":"2025-10-02T10:05:42.39213Z","last_seen":"2025-10-09T07:44:53.098311Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi_webp/HnPzxr_IYrE/hqdefault.webp","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:02.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"FC:96:96:16:3E:98:C2:EA:35:B8:AF:BC:B2:BE:C4:30:7E:6A:02:93","sha256":"B7:FA:E5:8D:39:32:EB:35:29:5A:6A:2A:1B:53:00:A2:A4:0B:FD:94:F0:1E:EF:06:F7:4F:ED:14:44:D9:1B:58"}}},"request":{"raw":"GET /vi_webp/HnPzxr_IYrE/hqdefault.webp HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 16796\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 07:20:48 GMT\r\nexpires: Thu, 09 Oct 2025 09:20:48 GMT\r\ncache-control: public, max-age=7200\r\nage: 1395\r\netag: \"1540820910\"\r\ncontent-type: image/webp\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16796,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 480x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"aef8f135f703ba66544e2e28e87ccca7","sha1":"d62496e41856deb72907e641d6b277b17740d1ad","sha256":"465990d376650b67dd680f499130a36077189cc1fdf2232527b076e78ab0a1ed","sha512":"b04fcb3dfbab692bccc01f23648c547f97c071f9985899995d65a9210629b26b6476f2be5ee2674373ea2f996ae7d4dd843c3a02696a357f2580086b99b83599","ssdeep":"384:up9Q/dmizX7m4JdM+1l9v4Io1+ZHA41LHhPjjijssy:up9Q/0izX7mKMOnv491WHA41jlX","tlshash":"8972d03a2d180a28e5638ec5b12e074a0680fe4b225baeddc167ca6e4f96714cf0c5d5","first_seen":"2025-10-02T10:05:42.370995Z","last_seen":"2025-10-09T07:44:53.099904Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DDPX5wLp4UaE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=sN5BsVdm4yLBWFtCrHsNwOmhCGUNFXch6adEQ9dzN9c\u0026media_oembed_control%5Bprovider_name%5D=YouTube","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:57.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DDPX5wLp4UaE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=sN5BsVdm4yLBWFtCrHsNwOmhCGUNFXch6adEQ9dzN9c\u0026media_oembed_control%5Bprovider_name%5D=YouTube HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\nrefresh: 2;\r\ncontent-type: text/html; charset=UTF-8\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=3,cfOrigin;dur=215, cfExtPri\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ndate: Thu, 09 Oct 2025 07:43:57 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cJiVP1wxHgPihPUo%2FRnhYeoKN7X7hn9THTtJZ9fOwh%2BL3KcWazGB%2BytZZd79h4qcpnyFgnmTJdRDorFQuDhHgK3IT73GoEU51uMwZlv%2BPbPKssVXdhbUFeb98ND%2BJpfnXR%2FNpfRF2BkW\"}]}\r\ncf-ray: 98bc40009d5256b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":15,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6a532ed10ddcc9f012f8144fc8922022","sha1":"0ffefb6f16c5a5007ed6428e86ca604c72c28708","sha256":"6bd6d6803e0a9191ec775bb646dc32a1dba2c3043be403b5e042fda1238c0cda","sha512":"1221d384b5ded87cb4bacb6a0f4da4f91f0b9a9679c4ba05b8e1c75753678b9a077ff5c62f90d8dc7902d5590017513f4c8fc71737e1cb4db21f9130f5206025","ssdeep":"","tlshash":"ae60000c000000003030f30cf030f0033000c0c00c000c0f30cc000300c000c0cf000f","first_seen":"2024-07-24T08:29:06Z","last_seen":"2026-01-10T23:27:53.417708Z","times_seen":14,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/images/icon-pause.svg","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/images/icon-pause.svg HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/css/css_pmEoZYJoqAqjEHUOEhlJ89R2_IsF5X5U3dS8iCt6t8w.css?delta=1\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyNlAuO4yAMhi-UJquVqjkOcsBNmRrMYuhjT79O0s50sulDQkown4yx_RucKwzx0sH1p91ljqXpwR5MYV2pu_s3Bc-lsQd0vnDemkR18NGkkfDRYSymJ7aH7n7TWILM3UDcA22kXMjHobFMnHs-dw53UEm9csbO5ZqAWviE8w-D80A8zKbIOQD5v9g4MEcfrb_5tiINSjCnMdI9BuymANpySdhaTpfsh31ZILZK4WDuSOi5FvXskJf-_od7EG9fUj4eUW3ZZCQonuNrxwQ9ktFcHd5gMTpNqpaI6eBfv7D4Qrig8DhWzEJ2aweikcjq8dwwP20P60Fw0dxeM1c9OcxG0I4ZeULuuGbLlUI0BXox21-6nvAcUdurhmc-y4nfZ8zvrfnYvkW-iu2b_Niq2yXp-wzZo7SffyrmSyvkVUFLaL0SAWOdLtk86vUvQlPKBfOL41Yl_xDZI4zVGw0PmQA6HZ4SoirrIZudz_I4WmGrA2BVDJEdzlCCQQOvRAvi6PG0CThAySoT2RBMYlmhWpXIYK7n00amPC_vnNiIJ8msupoEMF6-RkmAXMwOrCpIa-nGnFdjmQ8e9RMSeYhWRbZiNLfRqEN3fPptGF63zdxW5qqjbu6sLzldT50Xy0dtpW5WRRN0eEPHGHp0WmedpWXshAQZhgxpL7drvi1tjan22nZ7dI14jQ9N4lTTPFOkW7E14_NlSoK0gV0l_AdXM4eY\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/svg+xml\r\nexpires: Fri, 02 Oct 2026 08\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\netag: \"f2-63fc947b0a800\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3738636462343631366637396333643563313966643738313539343861653161o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: i1RRV4e29cZ89JqG_EsDc5MxeNqvOB-MNrCBaLi7VcbswdTXmq6tSQ==\r\ncontent-length: 190\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=toYl4zxbej0HB%2B%2B7ZK%2FoEszWESg8z78p%2B3or5Qh39ASY%2BKL9elKguibg2S0DJORh%2FMeDQEvGlifmO7jg5WoaMi%2Bvd3pFmhjnfOsJ1VfnVnX14KqySWHxJtEwjTq%2BP10qBkDEq%2BNIS1iV\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40045da256b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":242,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"35708230cee1807ca23ee4bd8f92679b","sha1":"e2bc1a559990479337a4a19725b8fa419ac97778","sha256":"c8fbf040c69d46be8ba8a757dd35dce98227cb5d53ac3955aa90b042ef0cea03","sha512":"dbb36a57e3207b91e7632d9eb0d6db8b1e7daa30d573adacd85bbe0d1a8eb7049f23d09615782edafa0c4218e0ba15a6525a8bf8a828584df8db721d0d7c0bdd","ssdeep":"","tlshash":"10d05eb49f28040dda078301c67c654912ee20bcb55f08dd678d0ab4d21bf669d5b908","first_seen":"2025-10-02T10:05:42.402118Z","last_seen":"2025-10-09T07:44:53.102285Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/js/js_4-VNed07D_HVhxOzUXR7cgCOLUBq4wBg48vAbbnu3tI.js?scope=footer\u0026delta=2\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyFU9GyozAI_SE1-7Lfk8EELS0GJyG2_ftLtb29td29MxmFcwjhQAIxqkC6Orgb3ZAladNDOHkVW7P7YftjaYKw5F4uLuIAlfUb8JSYErqd_-RZILoXz7iMLuY6A3cqNRxwwaSlVSzaYJl8DwXdw3hHusHSKKXRT5jqyocDaC_qftieacE3siDkcHhySZQGCpZOUrHsKWF2_yLWHWfriB5wMs0MmfS6R2tRsUJZwqnT64wd9FLVLxRRyq_BlBZrg2SfkbfDf93CmOKtGyrCJ9Jd_NpcHyDHHbEN_RUbWXrg9rg_9BtvDwj7RAxXE7jV0lfiiNn6HG7F_ydykJqDVJ6SV-iL__vH1j6eysfSb3PfskxA6XkNPkUU63sP2Q-Uy15ukojdQnju1un4oTKXkBH3hWccTU13E_92Ddb9ZYKsfoCgxRemNar6IHIitN80M0EKNo0PYIMXtUdzeryJu9uMIiOjdWd0o332fgdHuLyCU1PIsqKfZa7zdkeK-4A1t6KLPdaBEil6Ey3Mq5TSPtB2Q5sz9oPkyd3_XSRgGb8ACYWv7g","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /sites/default/files/js/js_4-VNed07D_HVhxOzUXR7cgCOLUBq4wBg48vAbbnu3tI.js?scope=footer\u0026delta=2\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyFU9GyozAI_SE1-7Lfk8EELS0GJyG2_ftLtb29td29MxmFcwjhQAIxqkC6Orgb3ZAladNDOHkVW7P7YftjaYKw5F4uLuIAlfUb8JSYErqd_-RZILoXz7iMLuY6A3cqNRxwwaSlVSzaYJl8DwXdw3hHusHSKKXRT5jqyocDaC_qftieacE3siDkcHhySZQGCpZOUrHsKWF2_yLWHWfriB5wMs0MmfS6R2tRsUJZwqnT64wd9FLVLxRRyq_BlBZrg2SfkbfDf93CmOKtGyrCJ9Jd_NpcHyDHHbEN_RUbWXrg9rg_9BtvDwj7RAxXE7jV0lfiiNn6HG7F_ydykJqDVJ6SV-iL__vH1j6eysfSb3PfskxA6XkNPkUU63sP2Q-Uy15ukojdQnju1un4oTKXkBH3hWccTU13E_92Ddb9ZYKsfoCgxRemNar6IHIitN80M0EKNo0PYIMXtUdzeryJu9uMIiOjdWd0o332fgdHuLyCU1PIsqKfZa7zdkeK-4A1t6KLPdaBEil6Ey3Mq5TSPtB2Q5sz9oPkyd3_XSRgGb8ACYWv7g HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: text/javascript;charset=UTF-8\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 30 Sep 2025 13\r\netag: \"93cf-6400483a3f070\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 07 Oct 2026 06\r\nvary: Accept-encoding,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i6137626366396637623962663063366234663365643931363232393237343234o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: _Fjv5nkxYSqFBPUU_FggmzHPojcewSTNZAUY3s4eio7_AoQVGBK03g==\r\ncontent-length: 38097\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rvj9MH1bNzUQeBbqWPqJDa%2BA%2B0z%2Bhd57VOjjPZ4WRvAS3tKZ4ShPL%2F0VhVL9daCj%2FereeVqAGCvwSkemwDQfwIhAKVTOqY%2BD7SlyMtAvrgVkg%2Bq%2B3IUplGei4DNVZB8or8sldrc%2Frmvl\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40056dba56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":145602,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20144)","md5":"78031617af0b15da54ccd6ecf28d42ae","sha1":"ee961f6cde01b4c8a4a94e4e2c36538c96d5dd78","sha256":"23546b9c806a705e5e2e92e1d766e0dbe8abb2472d8d49853ce2a168ee82235e","sha512":"91a0e8681c16ba08dc87271a1db2f9b28f286cd7335f64035fb5f2105141d5529ec99d657ca46f40e18bf87d02cbfd1a4874da38cc6907ef2e61e24df1ea949d","ssdeep":"1536:axgjYybWiSz/GLN4qRKd1cjHMGxJfarPQ5RSqxn1MYfx+QlBFRNyLLFm6cjIIV7n:axQYyiz/G2qR2LtuNyE66IGbX","tlshash":"2ce31a49b120262641ef21ef74179609b3b36d345502d090f09ac1f96efda069ae7fee","first_seen":"2025-10-02T10:05:42.41788Z","last_seen":"2025-10-09T07:44:53.105093Z","times_seen":2,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/system/files/styles/512x288sc/private/image/2022-01/euroslider-1920-889.jpg.webp?itok=BySDSNdR","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /system/files/styles/512x288sc/private/image/2022-01/euroslider-1920-889.jpg.webp?itok=BySDSNdR HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\nlast-modified: Thu, 19 Jun 2025 08\r\ncache-control: private, max-age=2678400\r\nx-drupal-dynamic-cache: UNCACHEABLE (no cacheability)\r\ncontent-language: en\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sun, 19 Nov 1978 05\r\nx-generator: Drupal 10 (https\r\nx-drupal-cache: UNCACHEABLE (no cacheability)\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 i6535326263663133343864383435626639636261323661333262666136333636o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: RAkLLerSs5JRv8lu-_LOUgATIaxS51yakm-WZ8ymfi8IClXol2CbJA==\r\nvary: accept-encoding\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kVMpn8aqUPtOMq%2BHh%2BjDz4CMxUgGsb1RGKfI0IWXGbBUYd2HLj1xJUF1DtkdFuqA1%2F5ZDINp3r1CMdqjNRJMyg8jWgelzo3ofbczGY%2FrdxkNyKFTHUyO%2Fz6zWNnqUPa8rfqfYRp5OGUm\"}]}\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc400b6e2256b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Drupal","description":"Drupal is a free and open-source web content management framework.","website":"https://www.drupal.org/","common_platform_enumeration":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","icon":"Drupal.svg","categories":["CMS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":16530,"size_decoded":0,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x288, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"860eb96e629ec3fb5ba0e3f088132dbb","sha1":"b2c65e771c85c012824660c09d338a23c6f7ce32","sha256":"0eda6158b43d10c15a3c6cad6948a56b7471d219cb5f9580daa72ff7b622927e","sha512":"7d44cee2b31a85354fdb7f3540f107928d2e5ac1f24b417c37c649197d001121848c3ef87e479d90e714d27365252ba4d487425c1390671d4f2f573096d3989f","ssdeep":"384:WwPXy+OODy8Wi/VU4wMr5Jckib85S0tkcLd3y:W+VOLzc7wUJbRZ3y","tlshash":"8a72e03153d375ebc6664b2828738ad4d7de76b0734f240d6bc4685cab7e822e1a200e","first_seen":"2025-10-02T10:05:42.438293Z","last_seen":"2025-10-09T07:44:53.111461Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PNFHQ1FTKQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i737461746963o616464746f616e79o636f6dz.oszar.com/menu/sm.25.html#type=core\u0026event=load","date":"2025-10-09T07:43:59.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=G-PNFHQ1FTKQ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://i737461746963o616464746f616e79o636f6dz.oszar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nexpires: Thu, 09 Oct 2025 07:43:59 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141538\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":426867,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"48a7cc69bb1bde48329fea16b77b302a","sha1":"185982a8aa4b456c2a35d225f1e49c86c0a8ba0c","sha256":"00fc462ef7f9ceba8e8d4d10836a28823acdb238b3996c7568c3c171008f0904","sha512":"8dd76ae8c4fa51581032d5c22d02e0ee681d479140eea6df9b4bc4b56da2e8383c870cc8cf78f26ae21f4e410b6e161cc299ae7a943da8306dae8a7b412f3635","ssdeep":"6144:0B6wep2itv0njCnzGwXV4rvoB6b6GBQ5w0yNWXy:KyY8snjYGdoT5y","tlshash":"149419ce73d674225396f478503f018ba57b28a2b44cc89af189cde52e74a9a4137f7c","first_seen":"2025-10-09T07:44:52.993353Z","last_seen":"2025-10-09T07:44:52.993353Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:00.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Thu, 09 Oct 2025 08:32:00 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dyqu2IYAx7JL5B82pdZmL%2FifHcVmZPtcfvYcJ1ecEGg96gNBVC9Yh0%2B5kRaNaak9iuEg%2Bfxc5ihcY5cjl7gXtO1m%2FIxWVek8Qh0dDbcR0EwRNf%2FR7Z82Rr6zhmkSLJVKtzCrLW4gF1K5AjjiqDBCPf9ncrzsWTqw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\ncf-ray: 98bc40161ecf56b4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T16:53:36.485058Z","times_seen":109707,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/www-embed-player-es6.vflset/www-embed-player-es6.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:01.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/player/38e0f4b0/www-embed-player-es6.vflset/www-embed-player-es6.js HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-type: text/javascript;charset=UTF-8\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\"\r\nexpires: Fri, 09 Oct 2026 07\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Oct 2025 04\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 121588\r\ndate: Thu, 09 Oct 2025 07:44:01 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncf-ray: 98bc4016aede56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":340010,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1186)","md5":"ed3cff0ba88089f084ccce68c2873a5e","sha1":"c731f324bd9cdecc9bf2d7325173ed1f3e682e4b","sha256":"794649875d122feb54d45e8460bf88320807bceec7439d35cbe0c8411d74222c","sha512":"597e74c8621a805eb71a5295f76517f872c9161017edee8347e9d27570f7296851707b40663f457dd6178c921378799058cbadbd5a7a7c4fff63244bc888d2b5","ssdeep":"6144:X95Q/swSqrETw0xWYGna9gZhGXTXArZFrSh3m9aKmHlzKhbLY5H6LNjav8Pj/NVE:X95Q/swSqrETwmHGna9gnGXTArZFrSh/","tlshash":"3b745bc9776270a702e285f4502f1502b539a8a6f80cc8bcb5dcddda2d2595a43bbf3d","first_seen":"2025-10-09T07:44:53.115252Z","last_seen":"2025-10-09T07:44:53.115252Z","times_seen":1,"resource_available":true,"data":null}},"time_used":641,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i666f6e7473o67737461746963o636f6dz.oszar.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2","fqdn":"i666f6e7473o67737461746963o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:01.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1\r\nHost: i666f6e7473o67737461746963o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=4,i=?0\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Thu, 08 Oct 2026 05\r\ncache-control: public, max-age=31536000\r\nvary: accept-encoding\r\nlast-modified: Mon, 16 Oct 2017 17\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: fonts_gstatic_com=%7B%22HttpHost%22%3A%22fonts.gstatic.com%22%2C%22HttpDomain%22%3A%22fonts.gstatic.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fs%5C%2Froboto%5C%2Fv18%5C%2FKFOlCnqEu92Fr1MmEU9fBBc4.woff2%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Ffonts.gstatic.com%5C%2Fs%5C%2Froboto%5C%2Fv18%5C%2FKFOlCnqEu92Fr1MmEU9fBBc4.woff2%22%2C%22GirisIP%22%3A%22216.58.212.3%22%7D; Path=/; Domain=i666f6e7473o67737461746963o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:55 GMT\r\ndate: Thu, 09 Oct 2025 07:44:01 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\ncf-ray: 98bc401a7f0b56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":15548,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15552, version 1.0","md5":"6ede2c7e1a2c2fec942f23dd1b831d05","sha1":"e19c69d68178386557f5d6c4d1868ceba3352a32","sha256":"f801d8d34f7352443ab57f101d2bcc4f0eb29f042137313c1964c5263d4b2109","sha512":"b3094c936524d464fd244961428411058773addcaaf010b5797799575833d990ed5f176ff999bd9d4d1176d20572430f5dc85ca051fd8ccc9848ae161fd950ba","ssdeep":"384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhz1:jslQ+LhUoTB0Qr6Qjkg/DmcJufz1","tlshash":"3062e103f2bc4c01e786193ebb5870237205272619efa67780ce7ea4c65ec81a39b457","first_seen":"2025-06-21T10:27:34.629895Z","last_seen":"2025-10-09T07:44:52.978989Z","times_seen":3,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":272,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:57.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Thu, 09 Oct 2025 08:31:57 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9S3rMV1LXGxBXBGrkM1k%2FtqYM%2BiA%2BIbYBdwvUoqHsSHFChP9MEJmitphjZcZhCfNbyztslk5H5QSr9hiIhHKHnZvYKRhBlRa4%2FxprsvF99iDvV2Y6PUE028ax%2FZa8ksGD5eQ%2B0q%2FpgRS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 07:43:57 GMT\r\ncf-ray: 98bc40007d4f56b4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T16:53:36.485058Z","times_seen":109707,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o676f6f676c657461676d616e61676572o636f6dz.oszar.com/gtm.js?id=GTM-KXWC6JH","fqdn":"i777777o676f6f676c657461676d616e61676572o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /gtm.js?id=GTM-KXWC6JH HTTP/1.1\r\nHost: i777777o676f6f676c657461676d616e61676572o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\nvary: Accept-Encoding\r\nexpires: Thu, 09 Oct 2025 07\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 09 Oct 2025 06\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 125264\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nserver: cloudflare\r\nset-cookie: googletagmanager_com=%7B%22HttpHost%22%3A%22www.googletagmanager.com%22%2C%22HttpDomain%22%3A%22googletagmanager.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fgtm.js%22%2C%22GetVeri%22%3A%22%3Fid%3DGTM-KXWC6JH%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.googletagmanager.com%5C%2Fgtm.js%3Fid%3DGTM-KXWC6JH%22%2C%22GirisIP%22%3A%22172.217.169.200%22%7D; Path=/; Domain=i777777o676f6f676c657461676d616e61676572o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:52 GMT\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=25TUFRreMlgHnb%2BA%2BKZCX8i2Y9Oo6Nl9pHF1oEdJh1MG44s1lHhIkZrJ2KxagscAnpp5%2BrHaOLNMDFI9e6wwabmRzxY1ZrABl8f7g9MPL3f5IXBQhVH8KG1Ks82M6pFOJePABUboYZA%2Fo05qCb7F990OlyX7Asf9\"}]}\r\ncf-ray: 98bc4007cdec56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":374910,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10427)","md5":"b253055425a357148dc70d6301ae3e52","sha1":"f79f47454334611c5e6b15cba2f41c3858dd01f0","sha256":"e9060810dceb9bdc55d04668d35f0866a9d81e0af0852412a991fe809fbb72e2","sha512":"9b7ca0367cb6bb8c837d7effb3e0f503fd5dc8be8cf771ed73e4ab41b656f9d65f4b2eb2200e3aa70ec6790d3f9408bdec25b570b82f68070e6b20508f539424","ssdeep":"3072:GDEXCaQ+UT4epod0Lfnev0Bvp9ScCcjD1EnJfa/aqbXV4rvoB6XTAN/6UcNDYUhh:jSwepoco05jCnCXV4rvoB6cNiU6YHW","tlshash":"438419cdb3d674224396a474503f018bb53b28e2b84cd895f18acdd42e74aaa5237f7d","first_seen":"2025-10-09T07:44:53.117412Z","last_seen":"2025-10-09T07:44:53.117412Z","times_seen":1,"resource_available":true,"data":null}},"time_used":930,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":601,"receive":327,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c657461676d616e61676572o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c657461676d616e61676572o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c657461676d616e61676572o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c657461676d616e61676572o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi_webp/pIyTAxHfb7Y/sddefault.webp","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:04.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"FC:96:96:16:3E:98:C2:EA:35:B8:AF:BC:B2:BE:C4:30:7E:6A:02:93","sha256":"B7:FA:E5:8D:39:32:EB:35:29:5A:6A:2A:1B:53:00:A2:A4:0B:FD:94:F0:1E:EF:06:F7:4F:ED:14:44:D9:1B:58"}}},"request":{"raw":"GET /vi_webp/pIyTAxHfb7Y/sddefault.webp HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/webp\r\nvary: Origin\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 23196\r\ndate: Thu, 09 Oct 2025 07:44:04 GMT\r\nexpires: Thu, 09 Oct 2025 09:44:04 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1697709704\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23196,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fb0c993aa04d5e5b636f42b55ed9ff9e","sha1":"86be9ac4e7c11eaf1c08d52081193146830842da","sha256":"720c47c14c10463a2d73890283a8d29296c146144abc0ccd2c63c779025af10a","sha512":"74210e890b5d28ff4901d272189f8a49bc554460ce85e67c5e331c0d5ed4d279738a994bdc40b7e71f0add24ff84c7b04aef141e6a840fe290b56fb93d026dc4","ssdeep":"384:eaP/oGZhLfJSno8rhG/WQzaTpGU+mqMW89t/mSB3IUebhAToyg6H6+2JCqhKLZV:ecAGZdBy5dQdZmqy9tOSB47+7f2JeZV","tlshash":"1ba2e1579c5d5d87c2bb92b2f27ab073b35d3fa8ab238000747d267d08751e2642c4ca","first_seen":"2025-10-02T10:05:42.455715Z","last_seen":"2025-10-09T07:44:53.119486Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/assets/fonts/preloaded/roboto-latin-variable.woff2","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:57.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/assets/fonts/preloaded/roboto-latin-variable.woff2 HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=3,i=?0\r\ncontent-type: font/woff2\r\nexpires: Wed, 07 Oct 2026 08\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\netag: \"14814-63fc947b0a800\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3230643032666636303461356537636465363963343730623163633934623330o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 6PD96nq_K1eilLMTCNr7ufKDkOz4xXzgThf5vbsofC_n6c5q7q7Xqg==\r\ncontent-length: 83985\r\nset-cookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Fassets%5C%2Ffonts%5C%2Fpreloaded%5C%2Froboto-latin-variable.woff2%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Fassets%5C%2Ffonts%5C%2Fpreloaded%5C%2Froboto-latin-variable.woff2%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; Path=/; Domain=i777777o65736do6575726f7061o6575z.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:51 GMT\r\ndate: Thu, 09 Oct 2025 07:43:57 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WKE8Zefs%2FtyoXdSMvUJBbL3cmVkNV%2FfUoCKlCi3F3Ngj1YPMYtIYnBhfffh%2BiyFn%2Bv1KUm%2FnhlvlV9qS6ZGkOK2UztGOFR7wR9L9xiqD%2B5ZN%2F8bp%2Beparz%2FbUPyEHR5KGnRe409Q9s4F\"}]}\r\ncf-ray: 98bc40005d4856b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":83985,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 83988, version 3.590","md5":"6f0967b4deb19da1a4f1698f441657ba","sha1":"0bfb101bcc645a44446d95be3ae2508ff23e0cc3","sha256":"bc1497273be95f8649e0c3a2c855e92c90ba73592fb641f087d1c44d9b6c2c16","sha512":"970e0f91a6a4fb9128a1603010e64b995ca149fba676e8303f83702c1355182f56169a2382552f6a3798133cbc78c6809d652b9de12587aeb0b802e325c479bf","ssdeep":"1536:k/24hbs2PKVRkv28yZtEAeFBUTaJOWZRH3K/on4Pyceo6yKuubtGC1cSqXczi:6xsBR82luAevzJOARHa/iOGyWOqzi","tlshash":"5e830298156fa8fe36d7c8f6281bdd6a1844d21a6b3e280e484df1f3e7edf08d051612","first_seen":"2025-10-02T10:05:42.285123Z","last_seen":"2025-10-09T07:44:53.121762Z","times_seen":2,"resource_available":false,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i737461746963o616464746f616e79o636f6dz.oszar.com/menu/page.js","fqdn":"i737461746963o616464746f616e79o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /menu/page.js HTTP/1.1\r\nHost: i737461746963o616464746f616e79o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, stale-while-revalidate=30\r\netag: W/\"060b0026b51016bf08c9d4b4a73b7960\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\"\r\nnel: {\"success_fraction\"\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=3,i=?0\r\ncontent-length: 1627\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\ncf-ray: 98bc40056dc056b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3237,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3237), with no line terminators","md5":"bf27ec4dfb9cf4ab2df3d553a5e075f6","sha1":"b0ad5b77f6f2881268c267d273c6e516f66e18fc","sha256":"602364402df92550d472b6fffb34d56b9ab0d8a47e980d2ef80b0532e0a5ff09","sha512":"fafd5dd46d62e029e60473eddb05f1ad6f9fb1177330a681b714e94623e7bd5e60a9968998b78cbb91e526eb355c2a2386522e2cdfbe5817c21eab5a1e5f9890","ssdeep":"","tlshash":"cd61a68f774fa8334a4b37b9819fba0e2223722f98608d048915d4c449bcec6601f97d","first_seen":"2025-10-02T10:05:42.381848Z","last_seen":"2025-10-09T07:44:53.126322Z","times_seen":2,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_ias.vflset/en_US/embed.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","date":"2025-10-09T07:44:01.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/player/38e0f4b0/player_ias.vflset/en_US/embed.js HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-type: text/javascript;charset=UTF-8\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\"\r\nexpires: Wed, 07 Oct 2026 10\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Oct 2025 04\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 10813\r\ndate: Thu, 09 Oct 2025 07:44:01 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\ncf-ray: 98bc40166ed356b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33150,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3391)","md5":"652f1bf9d51ccc032e720af32da5b8cc","sha1":"8f7d2f8f47b9e35b84c69e7e354f3e961005c3ad","sha256":"08fb33a47e1d9fc813e540d0baa624c34d2f7225ecf8063a425194077c3c17e1","sha512":"836a4854cae1a6f59584ca0710c2e6171b94a1fffd5b07f84a07203f7e8a349c09db6497342bd1f62a7e7c1dd33abe84f796af8600f9f909ead9eebfa5e9c552","ssdeep":"768:V+1oNSYuOQEU+a6oWmMii0q/anDq9MT3DFNf:5oWmMh/aDjj","tlshash":"ece2d64eb7e1e4349265e2ee2c0b1104673b94cc58a0a35c763edde92db4d25b07afb1","first_seen":"2025-10-09T07:44:53.059014Z","last_seen":"2025-10-09T07:44:53.059014Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/rum?","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=1920\u0026max_height=889\u0026hash=xWhLk7Ki-rPBwB_EPDITkxWUpG5V83Ou8MnuaDYyfjM\u0026media_oembed_control%5Bprovider_name%5D=YouTube\u0026media_oembed_control%5Bsettings%5D%5Bvideo_autoplay%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bloop%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bvideo_background%5D=0","date":"2025-10-09T07:44:02.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1504\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=1920\u0026max_height=889\u0026hash=xWhLk7Ki-rPBwB_EPDITkxWUpG5V83Ou8MnuaDYyfjM\u0026media_oembed_control%5Bprovider_name%5D=YouTube\u0026media_oembed_control%5Bsettings%5D%5Bvideo_autoplay%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bloop%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bvideo_background%5D=0\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995842$j57$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TxCj2UpWRYakhKCML35nLM5cDSapH%2B7Y9psRL3KsvvjT90Ioitv2kUnqnt%2FN491LBX635RY4q6QSg37Or1qby3HkTUCMzoIYukGoA5G3DpVcBvSG12AI6%2FmTEckDUux9CEsbdubEskrT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 09 Oct 2025 07:44:02 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 98bc401dbf5556b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/youtubei/v1/log_event?alt=json","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:02.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1759995842790\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgtHT3FmQXNRNHVZbyjAz53HBjIKCgJUUhIEGgAgP2LfAgrcAjEyLllUPVBLM003N3JrMEVqM3ZEbkZ5cC1iay1ieWloOXBqN21FNXBGRFM5SHZrTmlma0dhR0tyNVNkVTZwMVZyZUNmenFHcW9ESlFJcGtzVVpwSXZETFZpRU9PUlJoYmt6T0dRZmNBb2lXanZoM1J3dzlFbkpKRXJyNUw5YnV0V0prYk5hTFN6QnBiOTIxdEFKWFVyaVlkeHdsSlJ0VTUzNnN4YmZiRmF3NS0xZDAwMjZlSVIwc3BIVVBfVnJ6Tm1jTTdPT3RGak9heHBJRlp3TXU0NDhWQnhEck9iZTQ2Q2JKUmRNQVQydFRjQXZ0ZE56Ny16ZkhVd1RrWDdsQndMUTEtUFIteHVTUXYtcVFiRlJyRkdsTVNGdnNSM0Y4YVBzVVdCOHR0NU9KU05MbmsxMm4wRV9EaEhfaGFicFVjM21SYVVXZDROWER6S0NhS3hGMzd3NTRDRnFmQQ%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 1.20251006.00.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 814261735\r\nX-YouTube-Page-Label: youtube.player.web_20251006_00_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1759995842771\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C577%2C325\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 3878\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995842$j57$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Referer,Accept-Encoding\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 47\r\ndate: Thu, 09 Oct 2025 07:44:05 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z9%2B3Zrbpw2c%2BSnV6jBT%2BHw1yDxuVueeRt7o1Gs4CGOcuhU0rpH2viAwRv2mpQ51d%2BdkmNv7S8Iq0Oy21LNfljZCda081TyWPcMLqrZwhvPG8CyjoLogKgsZVmv1XC2XZ1lAjMkaq9huU%2BYCE9Pc%2BhsWl9%2Bu7bxLQ\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40218f9956b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"de76b37ee1f94b42a83da569801e2801","sha1":"989e5098c6a30bb708a80cba05172a84450e7aed","sha256":"c02b3933ef8efd8252092f534c78188f5501bf32ea38fb90d9c8a2d213803e9a","sha512":"d4c41823fb070e86440748a91cc39f57d3ff1de83246f0a7241ef35c2bf1a1ea0df2381482842b8c8c2bb545667e580dff9b422d229deeb167c9f0f604feed83","ssdeep":"","tlshash":"c6800038a8200322232000ea202888322a88c8203200ca28830200280cc0a0000a2282","first_seen":"2025-06-21T10:27:34.631531Z","last_seen":"2025-10-09T07:44:53.097588Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_es6.vflset/en_US/remote.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:04.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/player/38e0f4b0/player_es6.vflset/en_US/remote.js HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995843$j56$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-type: text/javascript;charset=UTF-8\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\"\r\nexpires: Fri, 09 Oct 2026 07\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Oct 2025 04\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 40525\r\ndate: Thu, 09 Oct 2025 07:44:04 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncf-ray: 98bc4029e83756b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":118193,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (542)","md5":"6056040752c429b32fa6ec4a35df3f5c","sha1":"01e05e4814d8e2cafa2f789ee14e2233e4916384","sha256":"31a71228636387296aff09f1b76bfbf6a98053c8d551856bbe5042cf4da2ef1b","sha512":"d39fca0508140582e38d561934863cd8a0fe45323a7c8a541a50fdb7ebaf010b762982ad685a79cc2c416c7a19b4dbf648b5d6cd70374aeedb2b79a98176d76e","ssdeep":"3072:S8xVelprSq5fUyJIPK9q4nGn56D/pFF3LHYKzuLQqTp9mTjnBxpZ5:S8xVO5fUyJIPK9RG56D/pFF3LHYKzuL8","tlshash":"3dc3e5a8b652b43143b3e4bb0c3b100a973754a5b94581ad764c9ce78cb8d4e917bff8","first_seen":"2025-10-09T07:44:53.130913Z","last_seen":"2025-10-09T07:44:53.130913Z","times_seen":1,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/system/files/styles/width_1920/private/background-image/luxembourg-kirchberg-01-1920-600.jpg.webp?itok=tDFGY6J-","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:57.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /system/files/styles/width_1920/private/background-image/luxembourg-kirchberg-01-1920-600.jpg.webp?itok=tDFGY6J- HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\nvary: accept-encoding\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\nlast-modified: Thu, 19 Jun 2025 08\r\ncache-control: private, max-age=2678400\r\nx-drupal-dynamic-cache: UNCACHEABLE (no cacheability)\r\ncontent-language: en\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sun, 19 Nov 1978 05\r\nx-generator: Drupal 10 (https\r\nx-drupal-cache: UNCACHEABLE (no cacheability)\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3763646566663465653865356464326132653361343539623061353665666561o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 8IKXUqJoMfRd8EJyAvfFJsE-Svp4J7HZofyaR5O0UbgVUsZPXt2kNw==\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AbIzsjH9ZA9bYHIsOtnQmnoxQ0Q7ikEDscBonCWlHPMAcH2smxijp%2B%2FMLgLAVXqYf5kvtNL8ugQoPm9dk2sxN27eVYWkZDW0AHPsLB58BMHO1vYEG9qdXnp%2FIDHIA%2F3IuDxRRfb8w%2B2j\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:57 GMT\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40006d4a56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Drupal:10","description":"Drupal is a free and open-source web content management framework.","website":"https://www.drupal.org/","common_platform_enumeration":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","icon":"Drupal.svg","categories":["CMS"]}],"data":{"size":92410,"size_decoded":0,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6bee19d65bbaf3d5e30ffcc9408a46dc","sha1":"cb65878997a5d01bd7fcf0504da2d05cc2ebe685","sha256":"b77f1964e11f4542ac5e07eed55ca3e95d49ef27dc0fa7dba7475e8a2c76234e","sha512":"429fa695b071ce84829d4228fb8be93044a11ebbb9e83516ed4e6367af8034653006756d0bc659bbd995237c16bb27080325602d686fa8077af373b936e3e82f","ssdeep":"1536:+77uYsSDlpE0vhaCIjf+KnMAbUPpGXFlDq20jcWlTrezPWtdq/wrfxjpGc/6Lo7y:+fuYrDDE2TIrpMAspy0w03uuAwrfxdGN","tlshash":"579312e906cd073f10f0e4e3ad4f68676c2877d041847d936da3a4ea3a556caf8a0697","first_seen":"2025-10-02T10:05:42.282448Z","last_seen":"2025-10-09T07:44:53.095876Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i737461746963o616464746f616e79o636f6dz.oszar.com/menu/modules/core.pt5ow5lr.js","fqdn":"i737461746963o616464746f616e79o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /menu/modules/core.pt5ow5lr.js HTTP/1.1\r\nHost: i737461746963o616464746f616e79o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000, immutable\r\nnel: {\"report_to\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding,Accept-Encoding\r\nreport-to: {\"group\"\r\netag: W/\"6e938442141e4680b5bd4187b8d6c216\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncontent-length: 25792\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\ncf-ray: 98bc40085dff56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72883,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4e01dd86c6258fd4d6b51eb52d1b7501","sha1":"5c8dbe9385ea894b80bd158f7a68cb80a94742c7","sha256":"948ee9d440769df409a5472736ae6ffa7a9d890f0f18e1edf57e8ecef662c95e","sha512":"d30a321c31592f2f5e53cdfe72dc6b13eccf48f6dcd2826df62489604168dc7d851e8818e0b1bc858aeec74c6f5ed018895b9ff3f82bc3dfc0c343f215436afb","ssdeep":"1536:UfuqAdDGstShi9iVGp1c1g6H2gvUH4JfU8xAaX1rxv6G6DjfPMUEqZb:UfjAuhvU61xlX1rxvV6Dgqb","tlshash":"4f636cdf37466937aa1f30d868efa608a036276e9f080940f5a5d4a411fdecd3067f58","first_seen":"2025-10-02T10:05:42.411319Z","last_seen":"2025-10-09T07:44:53.133196Z","times_seen":2,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/www-embed-player.vflset/www-embed-player.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","date":"2025-10-09T07:44:01.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/player/38e0f4b0/www-embed-player.vflset/www-embed-player.js HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\"\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Wed, 07 Oct 2026 17\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Oct 2025 04\r\ncontent-type: text/javascript;charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\ncontent-length: 135576\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ndate: Thu, 09 Oct 2025 07:44:01 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\ncf-ray: 98bc4016cee256b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":392722,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1179)","md5":"f816a71b7812263dfbd90b2f188e4e71","sha1":"a1056b37fc9d357390134cb577f9f2ddc1282b1f","sha256":"5d4c0f23d18b1530178939dc001b492e697e6927a6cea13de4335e6a983036c9","sha512":"b81696abb1aee3e93770c9ac0841ed706f550afa57081c17e312404cd531c7237fb52412df2b61993e9e91f7c3d845be1869794971c6324482256af777d0972a","ssdeep":"6144:NsOOFQm8Yt7RnwK7juuT2PG/i3JJX7vthi9:Txm8Y/KO8HX7vtW","tlshash":"2e843ccdb692706253a3a5b4403f110b713ab8aab80cc8b8f195d5d92e7495d8337f7e","first_seen":"2025-10-09T07:44:53.072108Z","last_seen":"2025-10-09T07:44:53.072108Z","times_seen":1,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/youtubei/v1/log_event?alt=json","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:02.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1759995842565\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgtyQ08zRC04OEt5USjAz53HBjIKCgJUUhIEGgAgEw%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 1.20251006.00.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 814261735\r\nX-YouTube-Page-Label: youtube.player.web_20251006_00_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1759995842274\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C422%2C237\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 6662\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995842$j57$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Referer,Accept-Encoding\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 47\r\ndate: Thu, 09 Oct 2025 07:44:04 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hja5bMI2ZRJY7GiJifzOD5I%2FWLwju%2FD2YWVaGEUbIqxRUn8nJtV0kXhU8TrsmDKcw1UwA6BXJHoW%2BMw%2BGvtJSjLqMI2PWHvh%2FcDOEBU0oIqX5sxd9klt%2ByGZlGoEQsUl87y4GC2cdW48A1iIsGQq4Gcb%2ByZqdf9Q\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40202f8756b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"de76b37ee1f94b42a83da569801e2801","sha1":"989e5098c6a30bb708a80cba05172a84450e7aed","sha256":"c02b3933ef8efd8252092f534c78188f5501bf32ea38fb90d9c8a2d213803e9a","sha512":"d4c41823fb070e86440748a91cc39f57d3ff1de83246f0a7241ef35c2bf1a1ea0df2381482842b8c8c2bb545667e580dff9b422d229deeb167c9f0f604feed83","ssdeep":"","tlshash":"c6800038a8200322232000ea202888322a88c8203200ca28830200280cc0a0000a2282","first_seen":"2025-06-21T10:27:34.631531Z","last_seen":"2025-10-09T07:44:53.097588Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2298,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2297,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:08.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nX-User-Agent: grpc-web-javascript/0.1\r\nContent-Length: 24\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Referer\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 101137\r\ndate: Thu, 09 Oct 2025 07:44:09 GMT\r\nserver: cloudflare\r\nset-cookie: jnn-pa_googleapis_com=%7B%22HttpHost%22%3A%22jnn-pa.googleapis.com%22%2C%22HttpDomain%22%3A%22jnn-pa.googleapis.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fjnn-pa.googleapis.com%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GirisIP%22%3A%22142.251.140.74%22%7D; Path=/; Domain=i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:42:02 GMT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iB%2F%2FO7sHz1TSuKotLQk7KzhyJ7G2YaajarSVGC8Iq37oMO%2BS0A2DLjdbZS063LYxVAa5VcQq93pqDn%2BVd6DJsmt9JY4%2BDK4%2FDe9SsFygwRzMHTeHWsQ4ODFnWTPTWQGQFg6LVcyhn4HGXm31KxjVzwY9\"}]}\r\ncf-ray: 98bc4047c9ab56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11521,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"ASCII text, with very long lines (11521), with no line terminators","md5":"fad7df4948d485683bb1fd3a09c40099","sha1":"305aded977dceb0012e8fac944b15625af22da1e","sha256":"8e5849198788ca126057b1a8075983d5bd83e5c1d4004cc358942e0a9c7cc095","sha512":"62474cf11d31d11a0772aad4d88cae84d6d5b800bfa01a5786f45f1a2fb154fc83f54906060fe481c463955d52cff7dfcae3c15eef39fa0744a0deaae2fca450","ssdeep":"192:mxM11xPflhQaUXgMH16qGgWIhEuo+LGEIcfLL9xp51wwpRdSP/wChgXhPt:mKPflAxH16h8e5+qENl7515ly/LuP","tlshash":"7f32a899f80eb104768d0259ca49b68ee737d58010b04ce85207e77996fcb87cf5db9e","first_seen":"2025-10-09T07:44:53.13571Z","last_seen":"2025-10-09T07:44:53.13571Z","times_seen":1,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i737461746963o616464746f616e79o636f6dz.oszar.com/menu/sm.25.html#type=core\u0026event=load","date":"2025-10-09T07:43:59.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://i737461746963o616464746f616e79o636f6dz.oszar.com/\r\nOrigin: https://i737461746963o616464746f616e79o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98bc400c4e8a5685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-26T18:21:48.088861Z","times_seen":336413,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=770\u0026max_height=433\u0026hash=iTRAyQa3AeIiqUeahtXarnWb21_0TxNsH-BYMy2WmlA\u0026media_oembed_control%5Bprovider_name%5D=YouTube","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=770\u0026max_height=433\u0026hash=iTRAyQa3AeIiqUeahtXarnWb21_0TxNsH-BYMy2WmlA\u0026media_oembed_control%5Bprovider_name%5D=YouTube HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g0$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: max-age=31536000, public\r\nx-drupal-dynamic-cache: UNCACHEABLE (poor cacheability)\r\ncontent-language: en\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sun, 19 Nov 1978 05\r\nx-generator: Drupal 10 (https\r\nx-drupal-cache: HIT\r\nlast-modified: Sat, 04 Oct 2025 06\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cookie,Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 i6339613430623061373665363965643835356437623939323066666161353265o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Q7R_hmyq_x0838AkZGTz6uyP5_KQ2xoC6mrI3sGh2zOwbBFknvbkbQ==\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=4,cfOrigin;dur=264, cfExtPri\r\ncontent-encoding: br\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TXZOPKPQv0344qkeG5N%2FpuZJQfPIqOFlJbUg%2BblUL%2B4oIvf13xQY%2FgudRNX%2FrEh4DxrU6lbe0kgRgs%2FOcoDVJTdXT%2BVCl%2B4tmMZe5BucZGs1azDtCQhltDmbWhYhHjZPgjOQUBTzBJ4C\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: 98bc400e7e4256b4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Drupal","description":"Drupal is a free and open-source web content management framework.","website":"https://www.drupal.org/","common_platform_enumeration":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","icon":"Drupal.svg","categories":["CMS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":5056,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (645)","md5":"b51a9832ee7cb6544d9e61022ae5aff9","sha1":"e3927435e81c0fc018ab98305f4424e46c446fa9","sha256":"a232406edef6b13f3f351e5f55425ea4b4d772def01ce9f7cd3f5d06cfac6052","sha512":"446664dce253081ca11411e3b2000ab63d844372f142aa579512b1e259b5aa48ca9b307774639733ea53c5bc99f5d16ba64d15ee9e1bf82db6dba029d6edcf5b","ssdeep":"96:e5C34eNILfVS3jCJuW8of9QBJfuH4xrpUmqx6mI31fGtOuvqKjyhjd9QHHAL6RU6:e+4eNafVjuW59QLfuYxrp8xw3wtSKjyS","tlshash":"53a1ca052aa70516801771e627be6244363850836106cf1afa9ef7cdaf9c57f81fa78d","first_seen":"2025-10-09T07:44:53.137896Z","last_seen":"2025-10-09T07:44:53.137896Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-4D2Y9B123H\u0026cx=c\u0026gtm=4e5a71","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=G-4D2Y9B123H\u0026cx=c\u0026gtm=4e5a71 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nexpires: Thu, 09 Oct 2025 07:43:59 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 142176\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":429978,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"ec6e30693aad7785e80b339c1a9decff","sha1":"cc22900c3db77306b825c025dbe2886d75843469","sha256":"f98dc8cec58f8457aec0eeda8b2f2d66a36f791ef66d5092a0c3f4f920cfdefc","sha512":"aac080d80eb723a2cfce4d480dc132673dd3f45a13d76f02032dac6a6ce635f85a85345ff9c0a3186511fb8c2c88e4cf804cddccfbba7e45a08bd47b59082dbe","ssdeep":"6144:VBZpwep2itv0njCnzGwXV4rvoB6QEGBQ5w0yNuWy:rfY8snjYGdoOUy","tlshash":"479409de73d674225396f478502f018ba57b28a2b44cc89af1c9cde42e74a9a4137f7c","first_seen":"2025-10-09T07:44:53.139966Z","last_seen":"2025-10-09T07:44:53.139966Z","times_seen":1,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/youtubei/v1/log_event?alt=json","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:07.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1759995847518\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgtQNnk0OUs2eWtIcyi_z53HBjIKCgJUUhIEGgAgNQ%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 1.20251006.00.00-canary_control_1.20251007.21.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 814261735\r\nX-YouTube-Page-Label: youtube.player.web_20251006_00_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1759995842007\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C717\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 23812\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995844$j55$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Referer,Accept-Encoding\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 47\r\ndate: Thu, 09 Oct 2025 07:44:09 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JOzAAzyIICAea2swM9LBCJ0gkRuV0dJjixC1UJcypOy8w5FmQqEv9apVPAZYYvf7xnTy0VoOLUnb5Rs4foqqrHjIO4cDiylQIxj26iPBi1RbgzuRPRhkh1lvXofXokxOljpUhViCJOpTuYtGj0AZS52dB0YeWAAn\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc403f096d56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"de76b37ee1f94b42a83da569801e2801","sha1":"989e5098c6a30bb708a80cba05172a84450e7aed","sha256":"c02b3933ef8efd8252092f534c78188f5501bf32ea38fb90d9c8a2d213803e9a","sha512":"d4c41823fb070e86440748a91cc39f57d3ff1de83246f0a7241ef35c2bf1a1ea0df2381482842b8c8c2bb545667e580dff9b422d229deeb167c9f0f604feed83","ssdeep":"","tlshash":"c6800038a8200322232000ea202888322a88c8203200ca28830200280cc0a0000a2282","first_seen":"2025-06-21T10:27:34.631531Z","last_seen":"2025-10-09T07:44:53.097588Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2324,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-09T07:43:56.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 07:43:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.2.21\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: private, max-age=14400, must-revalidate\r\nx-drupal-dynamic-cache: UNCACHEABLE (poor cacheability)\r\ncontent-language: en\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sun, 19 Nov 1978 05\r\nx-generator: Drupal 10 (https\r\nx-drupal-cache: UNCACHEABLE (response policy)\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3439353963303933633837303037646163383136633162636563656131646632o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: LRpYD7LVSufNnoOVkitPTDtOrWc2aEsRwVZpgP1fs8kJmbI8Y7CySg==\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eoc2o2iSx9Yl8iL2fcd50SzMHpqdZuEHtY5lFune5GMhVlX7OFX%2BL4ZZWgGCjhXxnK5UxW8bXjZjfG0dH9IJPgfVFVzFSmiWfeWPLpjhPR1C0i3GDVR9jo90NVKM8XcNJdwcrsSTY6l%2F\"}]}\r\nlast-modified: Thu, 09 Oct 2025 07:43:57 GMT\r\ncf-cache-status: EXPIRED\r\nserver-timing: cfCacheStatus;desc=\"EXPIRED\", cfEdge;dur=69,cfOrigin;dur=350\r\ncontent-encoding: br\r\ncf-ray: 98bc3ffc49e25690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Drupal:10","description":"Drupal is a free and open-source web content management framework.","website":"https://www.drupal.org/","common_platform_enumeration":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","icon":"Drupal.svg","categories":["CMS"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":341044,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (13900), with CRLF, LF line terminators","md5":"7e934ff9b1619764e08502f4359dbba1","sha1":"6cd645493f7df0083f376bf89f6c3cc34fd6d4a2","sha256":"e3675dee9c592f6a147d83929884740f412d2440a74443ad82102df5d1b9e9ba","sha512":"b8490d8b3c5471b589f16d746426c46c79902c29016cbbdf9143dbfe018114752b5b672c9409ec5c2426694ef95434ab15b43debca93fd937abd5436d253711b","ssdeep":"6144:M+k5dy2MDBufyVKW07iqj3mrrvGge/3XNMc+1ds:U5dy2MDBufyVKW07iqj3mrrBe/3XNMcF","tlshash":"bd74a7b191e025a3044389d19d39eb1eab9ae867df4b0240f3ac4bca9f87f91cd0755d","first_seen":"2025-10-09T07:44:53.141923Z","last_seen":"2025-10-09T07:44:53.141923Z","times_seen":1,"resource_available":false,"data":null}},"time_used":771,"timings":{"blocked":169,"dns":7,"connect":1,"send":0,"wait":427,"receive":0,"ssl":165},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/youtubei/v1/log_event?alt=json","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:07.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1759995847571\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgtyQ08zRC04OEt5USjAz53HBjIKCgJUUhIEGgAgEw%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 1.20251006.00.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 814261735\r\nX-YouTube-Page-Label: youtube.player.web_20251006_00_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1759995842476\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C422%2C237\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 23766\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995844$j55$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Referer,Accept-Encoding\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 47\r\ndate: Thu, 09 Oct 2025 07:44:09 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dh9OzW7WSSvsMvjVqhhRkCrhOv%2F%2Fs1tueQxS5paJER7rNSZRWhz3JW%2B7cFxOLPnpf8n3Oqw2Pt%2FRWeNpoZWTIYTy%2F2qV5Z%2FoGjZcwKPtw54WMNuFmiB34tTdmeTK0JcOi8TWbMe%2FdE0N8gDHPuW%2Fl31qQhYfYCYD\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc403f697156b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"de76b37ee1f94b42a83da569801e2801","sha1":"989e5098c6a30bb708a80cba05172a84450e7aed","sha256":"c02b3933ef8efd8252092f534c78188f5501bf32ea38fb90d9c8a2d213803e9a","sha512":"d4c41823fb070e86440748a91cc39f57d3ff1de83246f0a7241ef35c2bf1a1ea0df2381482842b8c8c2bb545667e580dff9b422d229deeb167c9f0f604feed83","ssdeep":"","tlshash":"c6800038a8200322232000ea202888322a88c8203200ca28830200280cc0a0000a2282","first_seen":"2025-06-21T10:27:34.631531Z","last_seen":"2025-10-09T07:44:53.097588Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2331,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:09.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: content-type,x-goog-api-key,x-user-agent\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9wj6%2Bqpdtc54hOWvCvdsbjbNCqtvgSMCdS9ZynOF8Fjd1fyn1wLdXQbCUZqkRKubC4OU%2BUR17PToH0fY%2Blxh%2FklB7zX3cC2ayNrwQ6rJUaNj85j0MgWJ9ntjBhcOKPkT%2B9b5rxHUzgMmWL6EZ4Upiwr7\"}]}\r\ndate: Thu, 09 Oct 2025 07:44:09 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc404989b556b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-4D2Y9B123H\u0026gtm=45je5a71v9223923711z8830280439za200zb830280439zd830280439\u0026_p=1759995838665\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1609304894.1759995840\u0026ecid=1102618926\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480710~115834636~115834638~115868792~115868794\u0026sid=1759995840\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fi777777o65736do6575726f7061o6575z.oszar.com%2F\u0026dt=Home%20%7C%20European%20Stability%20Mechanism\u0026en=page_view\u0026_fv=1\u0026_ss=1\u0026tfd=3366","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:44:00.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-4D2Y9B123H\u0026gtm=45je5a71v9223923711z8830280439za200zb830280439zd830280439\u0026_p=1759995838665\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1609304894.1759995840\u0026ecid=1102618926\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480710~115834636~115834638~115868792~115868794\u0026sid=1759995840\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fi777777o65736do6575726f7061o6575z.oszar.com%2F\u0026dt=Home%20%7C%20European%20Stability%20Mechanism\u0026en=page_view\u0026_fv=1\u0026_ss=1\u0026tfd=3366 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":35,"dns":0,"connect":8,"send":0,"wait":18,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DHnPzxr_IYrE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=CCoxdgK2dmAuUjR4t6ad6G1Sf3FLozO12TgxZYCeTRw\u0026media_oembed_control%5Bprovider_name%5D=YouTube","date":"2025-10-09T07:44:00.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98bc40128c845685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-26T18:21:48.088861Z","times_seen":336413,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:01.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 07:44:01 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98bc401729355685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-26T18:21:48.088861Z","times_seen":336413,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:06.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: content-type,x-goog-api-key,x-user-agent\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UrFAyBIYCh%2FWXBypsSlaQN9Zc1XgzF395DSA4EYLfDsUJUEwGYHb99WGr3c9%2BvMWtlHr6X%2FFnlAQslMnkmDWZIIZ0PRrs8n5qO3WjU2F%2B4JE4xbAyqSYMTyiaCdb2c8wdiiq9NcmVsqsCDbFuhTNOEpy\"}]}\r\ndate: Thu, 09 Oct 2025 07:44:06 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc4039193456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:57.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 07:43:57 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98bc4000dbc45685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-26T18:21:48.088861Z","times_seen":336413,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":38,"dns":1,"connect":1,"send":0,"wait":18,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/www-player.css","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","date":"2025-10-09T07:44:00.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/player/38e0f4b0/www-player.css HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\"\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Wed, 07 Oct 2026 11\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Oct 2025 04\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\ncontent-length: 74835\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\ncf-ray: 98bc4015cec656b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":511842,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"c047adeb9d2000f29587cc6f2f7e5e6e","sha1":"23e9389109eb87e886b539a6d14d0c3037f53c30","sha256":"13dd54e1acc89e3a21f9685ed0f71925e12e3a1959e4829a1ee0b1836ecfa205","sha512":"3b573cf2c56d289bd6ff25bda8e18db9e9f30c800868dff1d75fd8dbea5001670b1edae31898156c9f348b9d3105ec824908fc572fe35dd87a60a24df8d62070","ssdeep":"6144:8g/+vh2kqMMg7U6Bh+YoOufIniHzo7oGm:oZUMMg7U6Vo1fIniHzo7oD","tlshash":"b6b4e972f0d1233cf21b8d9997d9964d7239d983e2e22aeff11165dacbc77811326206","first_seen":"2025-10-01T14:32:51.783392Z","last_seen":"2025-10-09T23:51:49.321927Z","times_seen":3362,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/logo.svg","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:57.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/logo.svg HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=31536000\r\nexpires: Wed, 07 Oct 2026 06\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\netag: W/\"438d-63fc947b0a800\"\r\nvary: accept-encoding,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i6531663765363861373465316363623330666630383662653866613734633265o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: iblATBRwXdur2RQNb2DMR-_aaTfcfICB7JWZ0UCHox3O4fv-ROCBjQ==\r\nage: 175706\r\ncontent-encoding: gzip\r\ncontent-length: 6896\r\ndate: Thu, 09 Oct 2025 07:43:57 GMT\r\nserver: cloudflare\r\nset-cookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; Path=/; Domain=i777777o65736do6575726f7061o6575z.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:51 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FIDDL4v%2FOIGRO0cJAzJj7Hb2%2B7SPeZMNO3iTofel7eMTSphd3lYkQw0f1XEocgVsbYTGIq8n3AVaNYAVz4%2FKPFAxsTKSrX89jR8oW%2FbTaJ2szLZ%2F3xBimNxCpHPFEMhIqw18dzrhD2eh\"}]}\r\ncf-ray: 98bc40009d5356b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":17292,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3fa8462bc4a64c1d6c41efe23ab22ee8","sha1":"e1a0c997da41f25e37ac9ff511860b18c384850c","sha256":"c5a1c4ec13ba28ef90d81fa1cc82913aae36dcb1d5e43f0085798d3407b89deb","sha512":"830e0957ad5296c1db8d49c81d4b7f432eb0735866165d28c3d156f44a486bf1632632a53cf3c0fbabbbbe163c15bcaa2024a19f21f9274e508db60b294aec5e","ssdeep":"384:H2ce7s2ElC6132QkoLh9ppi/sbjAFqSJGz:TeY914orppi/sbjSJE","tlshash":"b772a5f857a659f4c9439fe9de3358992814fcbb7fc183acc3d4de8890164a58848de2","first_seen":"2025-10-02T10:05:42.317191Z","last_seen":"2025-10-09T07:44:53.055205Z","times_seen":2,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docs.io.certeu.eu/images/otp534aoitvqnddj49rps6045/image.gif?l=https://i777777o65736do6575726f7061o6575z.oszar.com/\u0026r=","fqdn":"docs.io.certeu.eu","domain":"certeu.eu","tld":"eu"},"ip":{"addr":"52.31.164.168","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"docs.io.certeu.eu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Oct 2025 06:01:37 GMT","end":"Wed, 07 Jan 2026 06:01:36 GMT"},"fingerprint":{"sha1":"AE:49:81:C8:C5:54:26:DE:F7:50:82:43:23:1C:21:61:EE:6B:5E:E7","sha256":"8D:17:D7:10:8A:3A:98:BB:E6:B2:C3:3E:4B:43:96:2A:06:33:0C:67:F3:0D:95:C8:E3:60:FE:EB:D6:04:CC:79"}}},"request":{"raw":"GET /images/otp534aoitvqnddj49rps6045/image.gif?l=https://i777777o65736do6575726f7061o6575z.oszar.com/\u0026r= HTTP/1.1\r\nHost: docs.io.certeu.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 09 Oct 2025 07:43:59 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"6d22e4f2d2057c6e8d6fab098e76e80f","sha1":"b80b11203d97fe01c5597ca3be70406ea48f5709","sha256":"afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277","sha512":"95dd0e4944b1541a9be48a60a1a105fcfa0d69dd215abaa9c1771adecc5ee0c0fe91d0eb367b6d46a4f8b2e06e6fb962d56dfc1c53f1f62cc8b314710628cb1e","ssdeep":"","tlshash":"ed900003eb800003e2bae0320b0e0b80238cac200ebc030b80aeb0acecba2a00c03020","first_seen":"2023-04-05T05:18:26Z","last_seen":"2026-05-26T15:42:41.889456Z","times_seen":18899,"resource_available":true,"data":null}},"time_used":1451,"timings":{"blocked":166,"dns":61,"connect":35,"send":0,"wait":1115,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DDPX5wLp4UaE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=sN5BsVdm4yLBWFtCrHsNwOmhCGUNFXch6adEQ9dzN9c\u0026media_oembed_control%5Bprovider_name%5D=YouTube","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DDPX5wLp4UaE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=sN5BsVdm4yLBWFtCrHsNwOmhCGUNFXch6adEQ9dzN9c\u0026media_oembed_control%5Bprovider_name%5D=YouTube HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g0$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: max-age=31536000, public\r\nx-drupal-dynamic-cache: UNCACHEABLE (poor cacheability)\r\ncontent-language: en\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sun, 19 Nov 1978 05\r\nx-generator: Drupal 10 (https\r\nx-drupal-cache: HIT\r\nlast-modified: Sat, 04 Oct 2025 06\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cookie,Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 i3037646339623137623330646363343439633366306232656530663233373263o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: PiaMbnoH3lrmnkLoft0CWXLio5-FhL9iHfejv9EBHVS15WezX8O9_A==\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=2,cfOrigin;dur=382, cfExtPri\r\ncontent-encoding: br\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t8IdKUiXf7ONCOPf5dbCm8ntYMRQ2XmI5G0dAhO%2F6nbGL1yxdB7ZGPVt9eMUm4w8PYmuBIHm%2FIAK0G6Y6FvDbPVat3lu3Kw9q71gPYW3OHmLftFFrlGFVwgMfug6kfm%2FJk71FKjOnWeZ\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: 98bc400f0e4856b4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Drupal","description":"Drupal is a free and open-source web content management framework.","website":"https://www.drupal.org/","common_platform_enumeration":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","icon":"Drupal.svg","categories":["CMS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5090,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (645)","md5":"1984bdfacd777ef249f652f8cee500bb","sha1":"ac6b8dd53d3118d79d9f58bb2fd6508d56d6ab20","sha256":"2d44e0f857df8ee662ce47ac54cd23b7e5f30b65eee340ef0f7b5f1d172b6ad4","sha512":"17335e403770591c355d6fdb2f1f1a3c4624abf09f866e2ec26a5ea83f842f67154c84dd5e8165287665d74b3d7947b88c3dbdbeacad1cde9a80ef61fef170a1","ssdeep":"96:e5C34eNILfVS3jCJum8v539QBJfuH4xrpUmqx6mI31fGtOuvqKjyhjd9QHyL6RU6:e+4eNafVjumI99QLfuYxrp8xw3wtSKj3","tlshash":"1bb1c8052aab0516801770e627be6340363850832106cf16fe9ef6cd6f9d97f81f5b8d","first_seen":"2025-10-09T07:44:53.144703Z","last_seen":"2025-10-09T07:44:53.144703Z","times_seen":1,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DDPX5wLp4UaE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=sN5BsVdm4yLBWFtCrHsNwOmhCGUNFXch6adEQ9dzN9c\u0026media_oembed_control%5Bprovider_name%5D=YouTube","date":"2025-10-09T07:44:00.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98bc40129c975685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-26T18:21:48.088861Z","times_seen":336413,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/youtubei/v1/log_event?alt=json","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:07.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1759995847619\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: 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%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 1.20251006.00.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 814261735\r\nX-YouTube-Page-Label: youtube.player.web_20251006_00_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1759995843754\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C577%2C325\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 23519\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995844$j55$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Referer,Accept-Encoding\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 47\r\ndate: Thu, 09 Oct 2025 07:44:09 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HWseRQh%2FQUBhAja6CLKHWV8h3CcxpSJ9axkGdI3GCTMHb06OiCDllXOkanTjILddS8XVrBEHp1BYRPSK5v4KXVhNJojZ3wXGBJEwS17HgJ3EebyeAZHwo%2FK%2FqeUWz56un4ulhIkZ%2BpU3RuCheTA4etA4ryMbjThg\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc403fb97556b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"de76b37ee1f94b42a83da569801e2801","sha1":"989e5098c6a30bb708a80cba05172a84450e7aed","sha256":"c02b3933ef8efd8252092f534c78188f5501bf32ea38fb90d9c8a2d213803e9a","sha512":"d4c41823fb070e86440748a91cc39f57d3ff1de83246f0a7241ef35c2bf1a1ea0df2381482842b8c8c2bb545667e580dff9b422d229deeb167c9f0f604feed83","ssdeep":"","tlshash":"c6800038a8200322232000ea202888322a88c8203200ca28830200280cc0a0000a2282","first_seen":"2025-06-21T10:27:34.631531Z","last_seen":"2025-10-09T07:44:53.097588Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2305,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:14.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nX-User-Agent: grpc-web-javascript/0.1\r\nContent-Length: 24\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Referer\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OjhfwPZMztqtERxn9rvW3gSwB7hbdroh7J3NO6ns7gpikMONDjIt2iWPvHiPWutje4z52yf%2Bcm9b2OrUh4EkEz0gNe960DEGNyQYUPVzTLsVxD1SnQwDlLpDd0ckqWE3HNH5OXA7kYUB58WPzUqjRV8Z\"}]}\r\ndate: Thu, 09 Oct 2025 07:44:14 GMT\r\nserver: cloudflare\r\nset-cookie: jnn-pa_googleapis_com=%7B%22HttpHost%22%3A%22jnn-pa.googleapis.com%22%2C%22HttpDomain%22%3A%22jnn-pa.googleapis.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fjnn-pa.googleapis.com%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GirisIP%22%3A%22142.251.141.42%22%7D; Path=/; Domain=i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:42:07 GMT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc4067bb7256b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12909,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"ASCII text, with very long lines (12909), with no line terminators","md5":"2d08a4e00ffb7a60a4eb4cfd56a7c6f2","sha1":"d80bd622cc3c8caa84f6e98bd37fdd224c640bb2","sha256":"c038b34dee55a466c15b281f485185f76946beeb35dafa264d631a3e328dfae5","sha512":"b6416210d15942032c3ee60da93018ea39671d45ac39fe92e3b623a008b19da2908f0edd7b9a331d3d9fa7f5bbd166e7777eb4e6285af914334a8df2a7b19469","ssdeep":"192:mxM11xPflhQaUXgMH16qGgWIhEuo+LGEIcfLL9xp51wwpRdSP/wChgXhPtvkwgMG:mKPflAxH16h8e5+qENl7515ly/LubzG","tlshash":"2642b75af80eb10476890259ce48b69ee737d98050604ce85207e73996fcb87df5db8f","first_seen":"2025-10-09T07:44:53.011189Z","last_seen":"2025-10-09T07:44:53.011189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/images/volume-mute.svg","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/images/volume-mute.svg HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/css/css_pmEoZYJoqAqjEHUOEhlJ89R2_IsF5X5U3dS8iCt6t8w.css?delta=1\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyNlAuO4yAMhi-UJquVqjkOcsBNmRrMYuhjT79O0s50sulDQkown4yx_RucKwzx0sH1p91ljqXpwR5MYV2pu_s3Bc-lsQd0vnDemkR18NGkkfDRYSymJ7aH7n7TWILM3UDcA22kXMjHobFMnHs-dw53UEm9csbO5ZqAWviE8w-D80A8zKbIOQD5v9g4MEcfrb_5tiINSjCnMdI9BuymANpySdhaTpfsh31ZILZK4WDuSOi5FvXskJf-_od7EG9fUj4eUW3ZZCQonuNrxwQ9ktFcHd5gMTpNqpaI6eBfv7D4Qrig8DhWzEJ2aweikcjq8dwwP20P60Fw0dxeM1c9OcxG0I4ZeULuuGbLlUI0BXox21-6nvAcUdurhmc-y4nfZ8zvrfnYvkW-iu2b_Niq2yXp-wzZo7SffyrmSyvkVUFLaL0SAWOdLtk86vUvQlPKBfOL41Yl_xDZI4zVGw0PmQA6HZ4SoirrIZudz_I4WmGrA2BVDJEdzlCCQQOvRAvi6PG0CThAySoT2RBMYlmhWpXIYK7n00amPC_vnNiIJ8msupoEMF6-RkmAXMwOrCpIa-nGnFdjmQ8e9RMSeYhWRbZiNLfRqEN3fPptGF63zdxW5qqjbu6sLzldT50Xy0dtpW5WRRN0eEPHGHp0WmedpWXshAQZhgxpL7drvi1tjan22nZ7dI14jQ9N4lTTPFOkW7E14_NlSoK0gV0l_AdXM4eY\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/svg+xml\r\nexpires: Fri, 02 Oct 2026 08\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\netag: \"3ab-63fc947b0a800\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i6339613430623061373665363965643835356437623939323066666161353265o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: MRQk0bFc1jgOUd5EPJym66I_hIw8q9hzYkhqlfQD_DZov9MsLFh7Fw==\r\ncontent-length: 518\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bpyGfKi3%2ByXp6chweTYTEMNNfU%2BXwA6jPWGmNvUnLKKcrysfBa7d6HOrGNn4VqN1ePv9m02r42V3kq9AD%2BWhwqWsH3u54Z76IUnhsCk8iJXHY9J%2BwvWd1wwvA%2BflijcLH%2Ffr26OiNEw5\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40045da456b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":939,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9525db529ea12969c7b0fedaa1b73a58","sha1":"01236244d83ac43a87d842abb0cb3bbb25c08fa3","sha256":"43dcb95dd7e44333b2fde9f646621eb6ef2ea030037ae3dfcb87577d376c8449","sha512":"f811d3a2f68a98488e01a75039b91c71049af0fafbf6c1da81a071ddf7e5da01c9f33e1a3d0c33078aa4b59265af321adadf6f82584f68f5f53fa5d9dbe93cc3","ssdeep":"","tlshash":"4811e169d5a887a433c887e1bf24519f3d191ddc3af49574f60b80a83153e9c18668e4","first_seen":"2025-10-02T10:05:42.408127Z","last_seen":"2025-10-09T07:44:53.146224Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:09.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nX-User-Agent: grpc-web-javascript/0.1\r\nContent-Length: 24\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Referer\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oRnFP2SQni%2BQBYJXR0JrAk%2BRmtWt%2FDrWv927IjW%2FXVkrw8ro3Ds8CqvMUN4C4rDBjC9auGcTBDo80gRvpuG72CjIVkTklbG8ckSclKO4a%2BNqYA8ol7wwg0S0jMtxfsZO4WQpvZjNex%2FBPOsEfSWgnN8r\"}]}\r\ndate: Thu, 09 Oct 2025 07:44:10 GMT\r\nserver: cloudflare\r\nset-cookie: jnn-pa_googleapis_com=%7B%22HttpHost%22%3A%22jnn-pa.googleapis.com%22%2C%22HttpDomain%22%3A%22jnn-pa.googleapis.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fjnn-pa.googleapis.com%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GirisIP%22%3A%22142.250.184.138%22%7D; Path=/; Domain=i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:42:03 GMT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc404d59e556b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":12908,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"ASCII text, with very long lines (12908), with no line terminators","md5":"d761542a41b96fdd1cb147f2ad2db0bd","sha1":"3b62e01eaa765e2bda17efb3d2bd1f9b929026f0","sha256":"e28c62a6279c1ea52f82889d2e3da032653b18dec6ee616c72ee33d439006c02","sha512":"31c4c5328ff9393f10885caf2f847fc7223661fd63192bda99be69d81e00800b91385297da1a1c54ef6c234974a50887b684cfbac1fb10c2e2758db012c478ed","ssdeep":"192:mxM11xPflhQaUXgMH16qGgWIhEuo+LGEIcfLL9xp51wwpRdSP/wChgXhPtvkwgM9:mKPflAxH16h8e5+qENl7515ly/Lubz9","tlshash":"db42b75af80eb10476890259ce48b69ee737d98050604ce85207e73996fcb87df5db8f","first_seen":"2025-10-09T07:44:53.052355Z","last_seen":"2025-10-09T07:44:53.052355Z","times_seen":1,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/css/css_pmEoZYJoqAqjEHUOEhlJ89R2_IsF5X5U3dS8iCt6t8w.css?delta=1\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyNlAuO4yAMhi-UJquVqjkOcsBNmRrMYuhjT79O0s50sulDQkown4yx_RucKwzx0sH1p91ljqXpwR5MYV2pu_s3Bc-lsQd0vnDemkR18NGkkfDRYSymJ7aH7n7TWILM3UDcA22kXMjHobFMnHs-dw53UEm9csbO5ZqAWviE8w-D80A8zKbIOQD5v9g4MEcfrb_5tiINSjCnMdI9BuymANpySdhaTpfsh31ZILZK4WDuSOi5FvXskJf-_od7EG9fUj4eUW3ZZCQonuNrxwQ9ktFcHd5gMTpNqpaI6eBfv7D4Qrig8DhWzEJ2aweikcjq8dwwP20P60Fw0dxeM1c9OcxG0I4ZeULuuGbLlUI0BXox21-6nvAcUdurhmc-y4nfZ8zvrfnYvkW-iu2b_Niq2yXp-wzZo7SffyrmSyvkVUFLaL0SAWOdLtk86vUvQlPKBfOL41Yl_xDZI4zVGw0PmQA6HZ4SoirrIZudz_I4WmGrA2BVDJEdzlCCQQOvRAvi6PG0CThAySoT2RBMYlmhWpXIYK7n00amPC_vnNiIJ8msupoEMF6-RkmAXMwOrCpIa-nGnFdjmQ8e9RMSeYhWRbZiNLfRqEN3fPptGF63zdxW5qqjbu6sLzldT50Xy0dtpW5WRRN0eEPHGHp0WmedpWXshAQZhgxpL7drvi1tjan22nZ7dI14jQ9N4lTTPFOkW7E14_NlSoK0gV0l_AdXM4eY","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:57.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /sites/default/files/css/css_pmEoZYJoqAqjEHUOEhlJ89R2_IsF5X5U3dS8iCt6t8w.css?delta=1\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyNlAuO4yAMhi-UJquVqjkOcsBNmRrMYuhjT79O0s50sulDQkown4yx_RucKwzx0sH1p91ljqXpwR5MYV2pu_s3Bc-lsQd0vnDemkR18NGkkfDRYSymJ7aH7n7TWILM3UDcA22kXMjHobFMnHs-dw53UEm9csbO5ZqAWviE8w-D80A8zKbIOQD5v9g4MEcfrb_5tiINSjCnMdI9BuymANpySdhaTpfsh31ZILZK4WDuSOi5FvXskJf-_od7EG9fUj4eUW3ZZCQonuNrxwQ9ktFcHd5gMTpNqpaI6eBfv7D4Qrig8DhWzEJ2aweikcjq8dwwP20P60Fw0dxeM1c9OcxG0I4ZeULuuGbLlUI0BXox21-6nvAcUdurhmc-y4nfZ8zvrfnYvkW-iu2b_Niq2yXp-wzZo7SffyrmSyvkVUFLaL0SAWOdLtk86vUvQlPKBfOL41Yl_xDZI4zVGw0PmQA6HZ4SoirrIZudz_I4WmGrA2BVDJEdzlCCQQOvRAvi6PG0CThAySoT2RBMYlmhWpXIYK7n00amPC_vnNiIJ8msupoEMF6-RkmAXMwOrCpIa-nGnFdjmQ8e9RMSeYhWRbZiNLfRqEN3fPptGF63zdxW5qqjbu6sLzldT50Xy0dtpW5WRRN0eEPHGHp0WmedpWXshAQZhgxpL7drvi1tjan22nZ7dI14jQ9N4lTTPFOkW7E14_NlSoK0gV0l_AdXM4eY HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: text/css;charset=UTF-8\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 30 Sep 2025 14\r\netag: \"1e823-640052d21a610\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 07 Oct 2026 06\r\nvary: Accept-encoding,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3262643332613237613337396537356439613036306338633836343839623265o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 4n8o9wg-gMEsqTB5lwWqdyj4V98asGRYR7DsfaK1JeOVWhjvX6en_A==\r\ncontent-length: 125692\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6JOGo7JT6I9WZoGyZn8FOGL64yPQ7YnlN2%2FgEzBjmPdfH%2B9CcA15AKITgy4QPbT0juRSqZGPgHb4%2B7vT7%2Fp8%2B9Uo9C1Ar1sY1O2Uh2lTwqEOYRSVUO0k9LX%2Fn8V63PjSg3xBhrqyIA6O\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:57 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40007d4d56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":876959,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (19772)","md5":"5480d7ea476048b32a237d688de12601","sha1":"edc4106c2066581c265cba85ce7d51a3fc99a17f","sha256":"3df56a85791cdc0171ae43f42b3a6ae4b4dc510975ab2df4ffd4a6709549a457","sha512":"89edffc338c6bdfabd80ece019620dbd890db3838eb3dfe0151ab37ec7ca7125124bfe3237e247a16adce3699ca30ba351b87dc1440e42e163cd845f5ede68dc","ssdeep":"24576:x4NeCijS+IlKAHze1QBshEpm4z32UkEI97ZxkpEB7p0inxnLUKgArzBuZE74/CCI:iNeCqrzBuZE74/CC//+ORsx","tlshash":"2a1593b8d61511d9b733c45fef91b399a238f630ca430e99f507694e8fc639149a2b2c","first_seen":"2025-10-02T10:05:42.323653Z","last_seen":"2025-10-09T07:44:53.14818Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i63646eo75736572776179o6f7267z.oszar.com/widgetapp/2025-09-30-10-58-22/widget_app_base_1759229902418.js","fqdn":"i63646eo75736572776179o6f7267z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /widgetapp/2025-09-30-10-58-22/widget_app_base_1759229902418.js HTTP/1.1\r\nHost: i63646eo75736572776179o6f7267z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-credentials: true\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, PUT, POST, DELETE\r\naccess-control-expose-headers: Content-Range, Content-Length, ETag, Content-Type\r\naccess-control-max-age: 3000\r\nlast-modified: Tue, 30 Sep 2025 11\r\netag: W/\"70deec3c0ab94dcb6f84bf74c2746243\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=25920000\r\nvary: Accept-Encoding\r\nvia: 1.1 i3666613338346635316364653531643763383665653138643137616333656161o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: FRA56-P10\r\nx-amz-cf-id: epA9Q2lqq5mhtRlIcj_PJ-6EU40MnHzLDw2UqTM89tNK3Ba4VJR26A==\r\ncontent-length: 45218\r\nx-77-nzt: EgwBnJI0GQH3kxwJAAwBT3/Y+AG35gAAAA\r\nx-77-nzt-ray: 14c00c283ffbaa008dd7e4689f56e82e\r\nx-77-cache: HIT\r\nx-77-age: 597139\r\nx-77-pop: istanbulTR\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TgYXI2XTkcNEv0LmcnShezYTJz72V7fH4K%2F53N3FVozJBTGW8jTLPyqTlEekwZiRAbOmxakdCAlD9DoVyZYI6Yb%2FDHzS5j6O3o8KkxSma%2FmiSAXkQF2RbxQEQcvD2%2Bzktz%2BwgSh1\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40086e0156b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":153458,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"1387422632937197ea023da97f997c6d","sha1":"a715954bb7c5f9db1cd582894f92bc2514215fd9","sha256":"3f4199d4df38bfa1d1396ca4ad05bce6b95765704c8712639105dd48c71c2bbe","sha512":"4e00117355acb0dedd5ccc7030c55bb561654b7c8108cae3f25ddfdb685de311c52e12ba2a3c144cb39201f95bee09a9c4b13faef9b70a1b696ef36125293cfd","ssdeep":"1536:wO9VE1x8AaenYLXu7mtGV2lexDbFXJLPQJMJX1N8eoJ2Nha4TdvQiTwRHBGBCgGS:wmVY4uZHFYkBvYkx","tlshash":"0ce31bdd7186b43613b7a4b9d03f610a72353a0da44d8510a926edd938b89cf5633fbc","first_seen":"2025-10-02T10:05:42.34892Z","last_seen":"2025-10-09T07:44:53.150496Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i63646eo75736572776179o6f7267z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i63646eo75736572776179o6f7267z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i63646eo75736572776179o6f7267z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i63646eo75736572776179o6f7267z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i63646eo75736572776179o6f7267z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DDPX5wLp4UaE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=sN5BsVdm4yLBWFtCrHsNwOmhCGUNFXch6adEQ9dzN9c\u0026media_oembed_control%5Bprovider_name%5D=YouTube","date":"2025-10-09T07:44:00.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /embed/DPX5wLp4UaE?feature=oembed HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy-report-only: script-src 'unsafe-eval' 'self' 'unsafe-inline' https\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: require-trusted-types-for 'script'\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_other\"\r\nreport-to: {\"group\"\r\norigin-trial: AsnbWYr3bqK88n/C2BgXPMpBC+msV4jf6vsgnAir+gFnHw3zXZEKmz271E4vhxTja+7SD2q3dr2BxZlHzvj9HA0AAACBeyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUtbm9jb29raWUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\nserver: cloudflare\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=6,cfOrigin;dur=429, cfExtPri\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 98bc4012ee9856b4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":118827,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (57414)","md5":"b79ef95a561957a280befdf074d10644","sha1":"964682581467358d26096d8432efacf432b75e3f","sha256":"9bf802fe27ff365579e8d918b27732d98dc275cd6f63575c0dd26ac481c6275c","sha512":"e457070618dd0dddd08055a4f3ad2f40ed69fd786c38d56ceb305a7baddcc971d09d64e133666633c5b81a3f0f786a0309551854d1066c85e9ffac8861cbfe7d","ssdeep":"1536:Psk0eiPm3eVEg5qlXMCP/ZtIQhSFQ8sjjm9ChK6ThjuACctTO5Ax:fFlZ3SFQ8sjSyTBudcVjx","tlshash":"49c3f9240c68a8329893d547edb9ff3e9cf812754ac59a6dbcbb875c01ec6510eaf413","first_seen":"2025-10-09T07:44:53.15228Z","last_seen":"2025-10-09T07:44:53.15228Z","times_seen":1,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-J0YDDLDEYK\u0026cid=1609304894.1759995840\u0026gtm=45je5a71v894693559z8830280439za200zb830280439zd830280439\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709~115616986~115834636~115834638\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709~115616986~115834636~115834638\u0026z=445375778","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:44:00.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:43:45 GMT","end":"Mon, 15 Dec 2025 08:43:44 GMT"},"fingerprint":{"sha1":"AF:04:70:AD:A3:31:10:AE:43:4C:21:61:D5:1E:03:15:9B:9D:82:EB","sha256":"B5:AF:C0:98:F7:62:50:F1:E8:09:72:78:55:CA:3D:4C:A4:82:7A:F5:B7:2F:AC:6D:F0:5D:44:50:49:3B:55:27"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-J0YDDLDEYK\u0026cid=1609304894.1759995840\u0026gtm=45je5a71v894693559z8830280439za200zb830280439zd830280439\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709~115616986~115834636~115834638\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709~115616986~115834636~115834638\u0026z=445375778 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-26T18:19:02.568025Z","times_seen":914455,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":95,"dns":1,"connect":41,"send":0,"wait":46,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:00.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98bc40126c6a5685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-26T18:21:48.088861Z","times_seen":336413,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/styles/slider_big_image/public/image/2025-10/CMS2025-1920X889.png.webp?itok=cKC_76jW","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /sites/default/files/styles/slider_big_image/public/image/2025-10/CMS2025-1920X889.png.webp?itok=cKC_76jW HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/webp\r\nexpires: Fri, 09 Oct 2026 07\r\nx-content-type-options: nosniff\r\nlast-modified: Wed, 08 Oct 2025 14\r\netag: \"8f04-640a653881158\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3863663135363734393037623637316236303361616236616536643066373065o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Td_j37EzvmGEMsUFBeVeb5AToRyf3w9CazmH9G3Ip6WQwyLYDoOIIA==\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6YTcFM%2FSOu3fPSCblcxRE%2FPkx838BegPCov5WDpULz3b%2FivssdpONlh1vmEesVLfQV2r28NrCQ6wZDioIKOjwkhzgi%2F4lyqMCCYd86AKN0zBUOEiMULfg%2FvMIfwFsNoUs28D3EnYA2AO\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40054db556b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36594,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x889, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5009d0bf294a245da808484f504d540c","sha1":"d5e5958f2eb942c2a4f2ebaa5946984f358afd47","sha256":"3cfd76923fdedb5771204063128164488201c00ffccd4175702d32c6958cf63e","sha512":"afe96611aa2e505cbcffb387a9c1472803d4148aaf01176e2d5d8b35b76f33b34d109c353a9fcf38dd879c2fcc844fbf0679e5aee9dfffa5924558422e267b03","ssdeep":"768:vkK1Hjy2xq/7fWDCusITJl59sYyjwHp7CB3lTEP5Ali0Yu/:PHTqTf6CusITJl5GqNC7chvS","tlshash":"1ef2d13ebe5d1a33d80f2bf6340d1a4ca55575a695e63e8f3049a677054e6c00ef0af8","first_seen":"2025-10-09T07:44:53.15388Z","last_seen":"2025-10-09T07:44:53.15388Z","times_seen":1,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:13.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: content-type,x-goog-api-key,x-user-agent\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nomhQyutpeIZHko8Cz7mv7wKf9%2BySGOQRULbOzS0AFLD5dEYNNmFqOVqiKaEG39Z7Aoi%2Bf3aJIeCtBd3n5Wo79nuMS5i1UHahBC7ACCpM%2Fceexul9U07Z7m4%2BbGb0c%2B5CX3Uou7Y0aDLW5oObp5G8Gv5\"}]}\r\ndate: Thu, 09 Oct 2025 07:44:14 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc4066ab6a56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/assets/fonts/preloaded/roboto-italic-latin-variable.woff2","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:57.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/assets/fonts/preloaded/roboto-italic-latin-variable.woff2 HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=3,i=?0\r\ncontent-type: font/woff2\r\nexpires: Fri, 02 Oct 2026 10\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\netag: \"17e34-63fc947b0a800\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3439353963303933633837303037646163383136633162636563656131646632o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: ip3Rj6qGFU-DKN9DkxQhpxFsBE7OyeSB0iHMmpbxxXtaeTE2CLdCSQ==\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v1t3kTGa6RGcTqV4Dd3jUwx3nU3qYjobxJZrZ4rlV1j83N1viHRADk%2F56NK3Uqom7DQx%2FDlc4yKNm9CZ8PGovJ9dVP6oPIt8GmQdil%2BJavskqHiYl%2BG27%2BMvaZG%2FRPcgfV6cSYQR5gzr\"}]}\r\nset-cookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Fassets%5C%2Ffonts%5C%2Fpreloaded%5C%2Froboto-italic-latin-variable.woff2%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Fassets%5C%2Ffonts%5C%2Fpreloaded%5C%2Froboto-italic-latin-variable.woff2%22%2C%22GirisIP%22%3A%22108.157.52.115%22%7D; Path=/; Domain=i777777o65736do6575726f7061o6575z.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:51 GMT\r\ndate: Thu, 09 Oct 2025 07:43:57 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bc40005d4756b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":97843,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 97844, version 3.590","md5":"8b52c6217ca0003bf2c0250a80169010","sha1":"40b53c3a57c9e3af51686c86222c787d506df1d1","sha256":"704addd5d5132735af98911f2759390e1655bc809f8fd2205bfd7537f5aa7957","sha512":"31c769d0b54eb7d51e2fa7ee0718f988efe146e4827550446229dece7ec1815df56fa9e064e5e69a88aa965cd0049371ddc30635d1c225acf5740a5334a21d07","ssdeep":"1536:8Ret8ESheTretX8tVAxx6xfWhSBD2tiwTYyXMFHc5yRDAsBbSUcRoNICfoFFWJ:ww8EKe2UIYl253AHcYRL+VO+RO","tlshash":"69a312eadeeca2f87d473efb97da808d16bee11667888c9407c18907d545e68684c3c1","first_seen":"2025-10-02T10:05:42.406483Z","last_seen":"2025-10-09T07:44:53.155436Z","times_seen":2,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i666f6e7473o67737461746963o636f6dz.oszar.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"i666f6e7473o67737461746963o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:01.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: i666f6e7473o67737461746963o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=4,i=?0\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Thu, 08 Oct 2026 03\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 16 Oct 2017 17\r\ncontent-type: font/woff2\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: fonts_gstatic_com=%7B%22HttpHost%22%3A%22fonts.gstatic.com%22%2C%22HttpDomain%22%3A%22fonts.gstatic.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fs%5C%2Froboto%5C%2Fv18%5C%2FKFOmCnqEu92Fr1Mu4mxK.woff2%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Ffonts.gstatic.com%5C%2Fs%5C%2Froboto%5C%2Fv18%5C%2FKFOmCnqEu92Fr1Mu4mxK.woff2%22%2C%22GirisIP%22%3A%22216.58.213.99%22%7D; Path=/; Domain=i666f6e7473o67737461746963o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:54 GMT\r\ndate: Thu, 09 Oct 2025 07:44:01 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\ncf-ray: 98bc40175ee856b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":15343,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"4bb85bd5f1bd1ed55457ccfabdfa10b7","sha1":"2ee726760bcab1645487325950b8e914f2fafb07","sha256":"65b539a25082aa481e31ef0aa09c2950de59504a203eff4601966d7791a17a88","sha512":"b3b6fe5abb521ac7bdc20fe0b3dae042ff20c2e241a05e87e892fff02259d83b226e8dc33c8eda16e290309045415cffb279f80480043a7b13e4c36d78fc3cf4","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/e:cqrVO++tw/9CICFbQLlxe","tlshash":"2462e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"2025-06-21T10:27:34.662214Z","last_seen":"2025-10-09T07:44:53.016198Z","times_seen":3,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/rum?","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=770\u0026max_height=433\u0026hash=iTRAyQa3AeIiqUeahtXarnWb21_0TxNsH-BYMy2WmlA\u0026media_oembed_control%5Bprovider_name%5D=YouTube","date":"2025-10-09T07:44:02.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1292\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=770\u0026max_height=433\u0026hash=iTRAyQa3AeIiqUeahtXarnWb21_0TxNsH-BYMy2WmlA\u0026media_oembed_control%5Bprovider_name%5D=YouTube\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995842$j57$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M0AUX7QFAWWMGre15%2FqTR23wATVXMZn70%2F%2FhyKZ1T%2FM7r8noqzDLX3GzmrctDIkWUvhkWTya3ceZSLNMxHVWBaMy5XtagEP90VFv4M6gmLFBNv75fFxsqXTgSSnt55%2FFNVFUkXLJ61ho\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 09 Oct 2025 07:44:02 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 98bc40222fa656b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_ias.vflset/en_US/remote.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:02.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/player/38e0f4b0/player_ias.vflset/en_US/remote.js HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995842$j57$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-type: text/javascript;charset=UTF-8\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\"\r\nexpires: Fri, 09 Oct 2026 07\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Oct 2025 04\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 42083\r\ndate: Thu, 09 Oct 2025 07:44:02 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\ncf-ray: 98bc4022afd156b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":124208,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (540)","md5":"5d12333ed9568e64057efd04329012c2","sha1":"bca2c8cae363cca0bb5341df1ca66a8ed1609580","sha256":"98dc2e664f296cac5470274e19ed5b6426623e3920a3d900540e7ab7da53b5f8","sha512":"4ec1ca4f53389fe92fc3b8966e3863bd41256b1365c5d3c06584e087d6de8c6dc55f43691d93597bd1e22e675650dd55acf564664c7219d9a12748a6da81273d","ssdeep":"3072:bfUrbVbsgsFzP6fNuXWKgDC6Tv2tIdgJb3yP2hx4mXjjYlyW7:bfUNbkFL6fNuX7g9Tv2tIdgJb3yP2hxQ","tlshash":"61c3e8acf651b42122b3f4761c3f2009963b54a4a885435c764adcd68cb8d5f923bff9","first_seen":"2025-10-09T07:44:53.020052Z","last_seen":"2025-10-09T07:44:53.020052Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i797433o6767706874o636f6dz.oszar.com/RKGxj6i0s85FxA9L-UpDP76i276s3Hmk9Mw1gLGG2QbqOa5X6CoxdJmT4YjdfQB-bjt3N5ypqA=s68-c-k-c0x00ffffff-no-rj","fqdn":"i797433o6767706874o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:03.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /RKGxj6i0s85FxA9L-UpDP76i276s3Hmk9Mw1gLGG2QbqOa5X6CoxdJmT4YjdfQB-bjt3N5ypqA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1\r\nHost: i797433o6767706874o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995842$j57$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=4,i=?0\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"channels4_i70726f66696c65o6a70z.oszar.comg\"\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Fri, 10 Oct 2025 07\r\ncache-control: public, max-age=86400, no-transform\r\nage: 0\r\netag: \"v1\"\r\ncontent-type: image/jpeg\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2212\r\ndate: Thu, 09 Oct 2025 07:44:03 GMT\r\nserver: cloudflare\r\nset-cookie: yt3_ggpht_com=%7B%22HttpHost%22%3A%22yt3.ggpht.com%22%2C%22HttpDomain%22%3A%22yt3.ggpht.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2FRKGxj6i0s85FxA9L-UpDP76i276s3Hmk9Mw1gLGG2QbqOa5X6CoxdJmT4YjdfQB-bjt3N5ypqA%3Ds68-c-k-c0x00ffffff-no-rj%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fyt3.ggpht.com%5C%2FRKGxj6i0s85FxA9L-UpDP76i276s3Hmk9Mw1gLGG2QbqOa5X6CoxdJmT4YjdfQB-bjt3N5ypqA%3Ds68-c-k-c0x00ffffff-no-rj%22%2C%22GirisIP%22%3A%22142.251.140.33%22%7D; Path=/; Domain=i797433o6767706874o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:56 GMT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jUCKg%2B2cNOHnAB0p5YOiiPHaw%2Fvfk%2BlCc0Sgf6iwmERclSIO6uoLtKYfM1MQna%2FSxKsuQi%2FSwi76NniMYIepxeJuTO8nvriaBjlUJfewRKYpL2r4b5cWWr4uGsW4c%2Fygxj4%3D\"}]}\r\ncf-ray: 98bc40234feb56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2212,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3","md5":"d9f6dd362180719ee519c1d859e014c8","sha1":"35fe9292673a422a59bc1cd25432f9f54947c54e","sha256":"489174be58a18f7ef878df1452b0be14abb920f528f89cf256546f440bf517b9","sha512":"8fa61520e376bc6245d8365b76042c93d598b3ff7429ca19579c80b0cf99418f1582750c313583dc9306309ed926e46146301c84c93cacfef0d55aeea40cc52d","ssdeep":"","tlshash":"53412c1d7276a123d0b2a473d8f30f93a2209fe8465727c5e49199d2cf27642770bd6c","first_seen":"2025-10-02T10:05:42.262272Z","last_seen":"2025-10-09T07:44:53.053383Z","times_seen":2,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i797433o6767706874o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i797433o6767706874o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i797433o6767706874o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i797433o6767706874o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/js/js_xyF5ctzSbdc7CL2SNjDCUOijQ1bKF0bb8TI42omVJYA.js?scope=header\u0026delta=0\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyFU9GyozAI_SE1-7Lfk8EELS0GJyG2_ftLtb29td29MxmFcwjhQAIxqkC6Orgb3ZAladNDOHkVW7P7YftjaYKw5F4uLuIAlfUb8JSYErqd_-RZILoXz7iMLuY6A3cqNRxwwaSlVSzaYJl8DwXdw3hHusHSKKXRT5jqyocDaC_qftieacE3siDkcHhySZQGCpZOUrHsKWF2_yLWHWfriB5wMs0MmfS6R2tRsUJZwqnT64wd9FLVLxRRyq_BlBZrg2SfkbfDf93CmOKtGyrCJ9Jd_NpcHyDHHbEN_RUbWXrg9rg_9BtvDwj7RAxXE7jV0lfiiNn6HG7F_ydykJqDVJ6SV-iL__vH1j6eysfSb3PfskxA6XkNPkUU63sP2Q-Uy15ukojdQnju1un4oTKXkBH3hWccTU13E_92Ddb9ZYKsfoCgxRemNar6IHIitN80M0EKNo0PYIMXtUdzeryJu9uMIiOjdWd0o332fgdHuLyCU1PIsqKfZa7zdkeK-4A1t6KLPdaBEil6Ey3Mq5TSPtB2Q5sz9oPkyd3_XSRgGb8ACYWv7g","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /sites/default/files/js/js_xyF5ctzSbdc7CL2SNjDCUOijQ1bKF0bb8TI42omVJYA.js?scope=header\u0026delta=0\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyFU9GyozAI_SE1-7Lfk8EELS0GJyG2_ftLtb29td29MxmFcwjhQAIxqkC6Orgb3ZAladNDOHkVW7P7YftjaYKw5F4uLuIAlfUb8JSYErqd_-RZILoXz7iMLuY6A3cqNRxwwaSlVSzaYJl8DwXdw3hHusHSKKXRT5jqyocDaC_qftieacE3siDkcHhySZQGCpZOUrHsKWF2_yLWHWfriB5wMs0MmfS6R2tRsUJZwqnT64wd9FLVLxRRyq_BlBZrg2SfkbfDf93CmOKtGyrCJ9Jd_NpcHyDHHbEN_RUbWXrg9rg_9BtvDwj7RAxXE7jV0lfiiNn6HG7F_ydykJqDVJ6SV-iL__vH1j6eysfSb3PfskxA6XkNPkUU63sP2Q-Uy15ukojdQnju1un4oTKXkBH3hWccTU13E_92Ddb9ZYKsfoCgxRemNar6IHIitN80M0EKNo0PYIMXtUdzeryJu9uMIiOjdWd0o332fgdHuLyCU1PIsqKfZa7zdkeK-4A1t6KLPdaBEil6Ey3Mq5TSPtB2Q5sz9oPkyd3_XSRgGb8ACYWv7g HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: text/javascript;charset=UTF-8\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 30 Sep 2025 12\r\netag: \"13f-64003fa0b3918\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 07 Oct 2026 06\r\nvary: Accept-encoding,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3064316265373365336232653831383263656331323062373362663864356334o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: me6lFPhh2vHzmEbjRdgQVHbv3LvKh-bG1oTclpHGBRE6z2yYfTRtfA==\r\ncontent-length: 343\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2FlV5v4zzt%2Fm2VqjGBvO79v%2B3Q6Tuj0EdOwCjMaMQ%2B2Ci9qUGyQ6zL5In5FY8BqCDO%2FGA9qu3j%2BYS3otCp%2BXqXhyeF2uq%2BYW2urM22QPBa1SIkr5%2B1NciS9eurk8Y1bx3Mkzr9s2U3Fj\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40057dc256b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":605,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (348)","md5":"dec2313a7f8790ead8fdd547d7fb0b6a","sha1":"cb651694ded6fea99d7e77bcfb106e36b5a43f6a","sha256":"c95eb5b7a73ad2d47cf8ce017c6bc46b271efb8fe3f0e0d05a573f39b94d9817","sha512":"f16a05ea9b20da9e949a92a12c32141ba0ba392d18b5a9e76e57d7dd9c9faacd0100014b06aec9284a256354ec95689a637a8244e7e3124b60bffadf91df90f1","ssdeep":"","tlshash":"d5f0ebc13462883e948f247bee67f38e36220c2d3070f0a4451c698922fcaf79408eed","first_seen":"2025-10-02T10:05:42.388889Z","last_seen":"2025-10-09T07:44:53.157186Z","times_seen":2,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/rum?","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DDPX5wLp4UaE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=sN5BsVdm4yLBWFtCrHsNwOmhCGUNFXch6adEQ9dzN9c\u0026media_oembed_control%5Bprovider_name%5D=YouTube","date":"2025-10-09T07:44:01.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1302\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DDPX5wLp4UaE%26rel%3D0\u0026max_width=770\u0026max_height=433\u0026hash=sN5BsVdm4yLBWFtCrHsNwOmhCGUNFXch6adEQ9dzN9c\u0026media_oembed_control%5Bprovider_name%5D=YouTube\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=69A6UVPt%2BUHZi9MTiO9wa60sJiav%2B%2FqNbTFMjZhhE0z6EyJJEuWYeVGCjIX9F5BQGdPeELUAwdfMhtcRJsoWNW8xUioxaaUu8f6JiQLUDb8CzsXNzdDIiZCBV41XFqbVa1IQ5HJB9BO0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 09 Oct 2025 07:44:01 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 98bc40179eed56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/images/chevron-right-grey.png","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/images/chevron-right-grey.png HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/css/css_pmEoZYJoqAqjEHUOEhlJ89R2_IsF5X5U3dS8iCt6t8w.css?delta=1\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyNlAuO4yAMhi-UJquVqjkOcsBNmRrMYuhjT79O0s50sulDQkown4yx_RucKwzx0sH1p91ljqXpwR5MYV2pu_s3Bc-lsQd0vnDemkR18NGkkfDRYSymJ7aH7n7TWILM3UDcA22kXMjHobFMnHs-dw53UEm9csbO5ZqAWviE8w-D80A8zKbIOQD5v9g4MEcfrb_5tiINSjCnMdI9BuymANpySdhaTpfsh31ZILZK4WDuSOi5FvXskJf-_od7EG9fUj4eUW3ZZCQonuNrxwQ9ktFcHd5gMTpNqpaI6eBfv7D4Qrig8DhWzEJ2aweikcjq8dwwP20P60Fw0dxeM1c9OcxG0I4ZeULuuGbLlUI0BXox21-6nvAcUdurhmc-y4nfZ8zvrfnYvkW-iu2b_Niq2yXp-wzZo7SffyrmSyvkVUFLaL0SAWOdLtk86vUvQlPKBfOL41Yl_xDZI4zVGw0PmQA6HZ4SoirrIZudz_I4WmGrA2BVDJEdzlCCQQOvRAvi6PG0CThAySoT2RBMYlmhWpXIYK7n00amPC_vnNiIJ8msupoEMF6-RkmAXMwOrCpIa-nGnFdjmQ8e9RMSeYhWRbZiNLfRqEN3fPptGF63zdxW5qqjbu6sLzldT50Xy0dtpW5WRRN0eEPHGHp0WmedpWXshAQZhgxpL7drvi1tjan22nZ7dI14jQ9N4lTTPFOkW7E14_NlSoK0gV0l_AdXM4eY\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/png\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\naccept-ranges: bytes\r\nexpires: Wed, 07 Oct 2026 06\r\ncache-control: max-age=31536000\r\netag: \"11b-63fc947b0a800\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3932663436633632613836663132346136643961376365313066323838666261o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: aGZbLSb7dOK4v1cu5htjtdaImPMnLiPvb6r4Z0ptqJ5dggTdhTDD3w==\r\ncontent-length: 283\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xYfy0Gvv8j6Tbxqvro4WK6AOlCgPqKX3z7R5s%2BTmniwScuhXSsCniuu9ELkQtZaLCSLCBjpQPRJ%2Fc9dYICRCNrnR9KU1HCv%2BXjOuHY%2BnX%2FpH8JD81Zl85MrTrxzhUoWG5DNiRzL66nKM\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc4009ae0e56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":283,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 74, 8-bit/color RGBA, non-interlaced","md5":"587ee7eae6ccb6dffa51e1f2dec54ceb","sha1":"79839b05a0ad46e9605d4079cce76a16fac15f66","sha256":"ab6b2c87ba8e8778448c7a2d989d4c309c5d60f996f543fb8a9fe8e1055b29d9","sha512":"7e55037528e0268a48b6eec5d3a9490dfff0633518f3da0e3719d1674122c13f5eaa327559caf0d928ff1865917377791ed5482d0494de17fdf5ab2e1e423d5f","ssdeep":"","tlshash":"75d0c2c64aa009f6977f0e55a0a032608ca3692d5289262a12f7691a7b41c99298e93a","first_seen":"2025-10-02T10:05:42.419677Z","last_seen":"2025-10-09T07:44:53.15852Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/cdn-cgi/rum?","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:04.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1161\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995843$j56$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CbftrXyC63IGKbc%2BG%2FrcJZdSV7L5tmmPJ0xp43eUbjEXxWBvbpxVYR7KjzHnADtlRhH1MNhO%2FQf%2FeNBZhbGvEd4%2BW1sL5TQXmZ92IR%2BJalgqQgUls%2F2AwHXv1ken5D3SLRxjIYNfvpx8n3frF5MnOPHkun7z8CNk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 09 Oct 2025 07:44:04 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 98bc402c785456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/images/Youtube-25.svg","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/images/Youtube-25.svg HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/css/css_pmEoZYJoqAqjEHUOEhlJ89R2_IsF5X5U3dS8iCt6t8w.css?delta=1\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyNlAuO4yAMhi-UJquVqjkOcsBNmRrMYuhjT79O0s50sulDQkown4yx_RucKwzx0sH1p91ljqXpwR5MYV2pu_s3Bc-lsQd0vnDemkR18NGkkfDRYSymJ7aH7n7TWILM3UDcA22kXMjHobFMnHs-dw53UEm9csbO5ZqAWviE8w-D80A8zKbIOQD5v9g4MEcfrb_5tiINSjCnMdI9BuymANpySdhaTpfsh31ZILZK4WDuSOi5FvXskJf-_od7EG9fUj4eUW3ZZCQonuNrxwQ9ktFcHd5gMTpNqpaI6eBfv7D4Qrig8DhWzEJ2aweikcjq8dwwP20P60Fw0dxeM1c9OcxG0I4ZeULuuGbLlUI0BXox21-6nvAcUdurhmc-y4nfZ8zvrfnYvkW-iu2b_Niq2yXp-wzZo7SffyrmSyvkVUFLaL0SAWOdLtk86vUvQlPKBfOL41Yl_xDZI4zVGw0PmQA6HZ4SoirrIZudz_I4WmGrA2BVDJEdzlCCQQOvRAvi6PG0CThAySoT2RBMYlmhWpXIYK7n00amPC_vnNiIJ8msupoEMF6-RkmAXMwOrCpIa-nGnFdjmQ8e9RMSeYhWRbZiNLfRqEN3fPptGF63zdxW5qqjbu6sLzldT50Xy0dtpW5WRRN0eEPHGHp0WmedpWXshAQZhgxpL7drvi1tjan22nZ7dI14jQ9N4lTTPFOkW7E14_NlSoK0gV0l_AdXM4eY\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/svg+xml\r\nexpires: Wed, 30 Sep 2026 09\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\netag: \"3b7-63fc947b0a800\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3466323232383665663364636138303738373465633062626565653332613336o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: rPY7WOhtRqtATcU8oEYU4FaSgTBg5JzjkgVhL67sKMHcLS75SaCrvg==\r\ncontent-length: 473\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ev5uL53JoS8bGYFuKLN4bYwVdKeaWBa84pGm%2FTTiPaFKyKdtAxl32aZtud%2FpnJlY758H5b55sxgD%2Bj%2FAHj%2BhAOWV6WJ%2FS5yX7kd5XIh9LYT6DdRy35QVc3knnczgIE1uti7PQYq1C5Fc\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40047da856b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":951,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9612eaaea8eefdc47979fddf6aec37a8","sha1":"99440fd28e5074bfb0ae7acd2009ac7c5493b04c","sha256":"e2f4eaa1a756d85305d1d3e84fbe92a3b2631b4777c598da22e9b6ab458482f2","sha512":"7c82ae7296657022b7b6b0552e07bdf06296f9b36052ea31fcf346f3268e736785227c501696e481d4e855bfe3ef161b49be25f1bc9f8dde8095e38cea429df6","ssdeep":"","tlshash":"b111baf87b38a00c974b5e46efb49955931f18ba3b8bc5d18c9ee200e193f94d2c7820","first_seen":"2025-10-02T10:05:42.403623Z","last_seen":"2025-10-09T07:44:53.160046Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i63646eo75736572776179o6f7267z.oszar.com/widget.js","fqdn":"i63646eo75736572776179o6f7267z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /widget.js HTTP/1.1\r\nHost: i63646eo75736572776179o6f7267z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, PUT, POST, DELETE\r\naccess-control-expose-headers: Content-Range, Content-Length, ETag, Content-Type\r\naccess-control-max-age: 3000\r\nlast-modified: Tue, 30 Sep 2025 11\r\netag: W/\"85eefa0cd60f08c51e626ed9177d3d85\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=3600, public\r\nvia: 1.1 i3936353138316236643931393037626566643561303136356166333864616630o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: FRA56-P10\r\nx-amz-cf-id: b63htJtgrP4zKYIVuTZrQo298BRjUWPQxn96ksUxFvbKbEnwJyPeUA==\r\ncontent-length: 1023\r\nx-77-nzt: EgwBnJI0GQHXtAYAAAwBJRPCMQG3BgAAAA\r\nx-77-nzt-ray: 14c00c2826fa483cbe67e768919a171d\r\nx-77-cache: HIT\r\nx-77-age: 1716\r\nvary: Accept-Encoding\r\nx-77-pop: istanbulTR\r\ncontent-encoding: gzip\r\nset-cookie: cdn_userway_org=%7B%22HttpHost%22%3A%22cdn.userway.org%22%2C%22HttpDomain%22%3A%22cdn.userway.org%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fwidget.js%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fcdn.userway.org%5C%2Fwidget.js%22%2C%22GirisIP%22%3A%22156.146.52.27%22%7D; Path=/; Domain=i63646eo75736572776179o6f7267z.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:51 GMT\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k4rgxgGWeVHCZneN2qvz5ID%2BU2ijYX2%2FBFBbe40aVREMPOJiKvDsEfwrWgtlz1xDT5iwFjDQMPyvN%2BM0htDHkrzAuOu%2BkTHPvgBRt6ZzoeOCzcTZcDUpV8Lfg9PriQ%2Fxd%2BjOMIr2\"}]}\r\ncf-ray: 98bc40058dc356b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1812,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1812), with no line terminators","md5":"12713eeca3840e63feb80b6d74fd0aa4","sha1":"9e8e2a8fef17853da4d65d0ef77573980ffc645f","sha256":"a0af9b9f267f59eb1a35de064cfdd5666652140604f284d8149a396cf5a8ca74","sha512":"8b3a95ce98ad760cd0a6f2f625898d67e467e66b3f8e868fb8c56d67261b864edb5ff37b30e566a2ec866ae5bcc7dc2b6f3efc4304fcf709e234705b00c9bd2c","ssdeep":"","tlshash":"fa31853a7164f0370397145ba29a9b5c357b306af206cd51902eed685b18d9b5427cc8","first_seen":"2025-10-02T10:05:42.368564Z","last_seen":"2025-10-09T07:44:53.161445Z","times_seen":2,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i63646eo75736572776179o6f7267z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i63646eo75736572776179o6f7267z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i63646eo75736572776179o6f7267z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i63646eo75736572776179o6f7267z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i63646eo75736572776179o6f7267z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i73637269707473o636c6172697479o6d73z.oszar.com/0.8.33/clarity.js","fqdn":"i73637269707473o636c6172697479o6d73z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /0.8.33/clarity.js HTTP/1.1\r\nHost: i73637269707473o636c6172697479o6d73z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript;charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 08 Oct 2025 13\r\netag: W/\"0x8DE066F9A358F15\"\r\nx-ms-request-id: ee275c19-101e-0065-7164-38809f000000\r\nx-ms-version: 2018-03-28\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20251009T074359Z-177655d4c88bn26lhC1IST35sc00000006fg0000000070ke\r\ncache-control: public, max-age=86400\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: TCP_HIT\r\ncontent-encoding: gzip\r\ncontent-length: 26819\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nserver: cloudflare\r\nset-cookie: scripts_clarity_ms=%7B%22HttpHost%22%3A%22scripts.clarity.ms%22%2C%22HttpDomain%22%3A%22scripts.clarity.ms%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2F0.8.33%5C%2Fclarity.js%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fscripts.clarity.ms%5C%2F0.8.33%5C%2Fclarity.js%22%2C%22GirisIP%22%3A%2213.107.246.44%22%7D; Path=/; Domain=i73637269707473o636c6172697479o6d73z.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:52 GMT\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dGvJgVB%2BpA5x5vVgYwtC9X%2FAu6F9b6021rHN7VOFYcCgOVBZlvO8KHaglijSK%2Fy3YzP1C5PaAgHbhrx1206TpHhhD1Da8pdeKK0BoFfvg3uFSZ7GQFV69Z0jHVIdM7fIkgdyEPBSY83Yb8un\"}]}\r\ncf-ray: 98bc400b5e1c56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":78490,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65420), with CRLF line terminators","md5":"222f5a85d5ae47592f07b769405567d9","sha1":"a7774145b147b9881ee3f94f9754749423638ec3","sha256":"e15d1d235049e835e8a5dc14bb753336c597d2fe156d6029f425a05bb178b53d","sha512":"b715fb7e38774348094958b0b1242db00890b5776431e4d9df245e1a73566868c82a7bd710d8109a2b1e5972a88006bce5bd3e74ddfdd55f396f1291b1b97cdf","ssdeep":"1536:YQPzHqofC4+Nvtl8HTHpn1z2sA0T+q+PGySI:pP7qofBSAXz2sA0Ty","tlshash":"4573e6dc7243707e42a760b5807f120bf23a6d4a780b5c50da66d6c43c78e9692bbf6d","first_seen":"2025-10-09T07:44:52.990454Z","last_seen":"2025-10-09T07:44:52.990454Z","times_seen":1,"resource_available":true,"data":null}},"time_used":370,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":324,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i73637269707473o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i73637269707473o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i73637269707473o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i73637269707473o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i73637269707473o636c6172697479o6d73z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:06.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: content-type,x-goog-api-key,x-user-agent\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ToifKWLMVPjTbk20cbnxEIxPnDWHqw1mYlpBDpQpbSA0pEKqE7PK7MXvmwrr1WKkNNO%2FYR%2FVAS1ODn%2BOlcj5%2BHG7sYmHPo8BeJrP%2BWDpZRgLrcIo34eyiZrt6%2FQyYH2BxhVLgSdPTTsABxp6B2TC1IqL\"}]}\r\ndate: Thu, 09 Oct 2025 07:44:06 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc4039593956b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=770\u0026max_height=433\u0026hash=iTRAyQa3AeIiqUeahtXarnWb21_0TxNsH-BYMy2WmlA\u0026media_oembed_control%5Bprovider_name%5D=YouTube","date":"2025-10-09T07:44:00.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=770\u0026max_height=433\u0026hash=iTRAyQa3AeIiqUeahtXarnWb21_0TxNsH-BYMy2WmlA\u0026media_oembed_control%5Bprovider_name%5D=YouTube\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Thu, 09 Oct 2025 08:32:00 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ovQO2jQXa5P7%2Fd406wUbdvLQFHkoNGPe7AhhyAy7bZIHEPGi%2Bb73btIQ8HbtANkBLplxiIHbekxKf1EwarqCybN4xqJG98ZjN17qHUVzZpXKbgkNYhUBuyl2IEo%2Fh6oXIaXXkiPTn28e\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\ncf-ray: 98bc40128e9056b4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T16:53:36.485058Z","times_seen":109707,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i737461746963o616464746f616e79o636f6dz.oszar.com/menu/sm.25.html#type=core\u0026event=load","fqdn":"i737461746963o616464746f616e79o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /menu/sm.25.html HTTP/1.1\r\nHost: i737461746963o616464746f616e79o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=4,i=?0\r\ncontent-type: text/html; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000, immutable\r\nnel: {\"report_to\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding,Accept-Encoding\r\nreport-to: {\"group\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=6,cfOrigin;dur=237, cfExtPri\r\ncf-cache-status: DYNAMIC\r\nage: 8939\r\nset-cookie: static_addtoany_com=%7B%22HttpHost%22%3A%22static.addtoany.com%22%2C%22HttpDomain%22%3A%22static.addtoany.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fmenu%5C%2Fsm.25.html%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fstatic.addtoany.com%5C%2Fmenu%5C%2Fsm.25.html%22%2C%22GirisIP%22%3A%22172.66.171.172%22%7D; Path=/; Domain=i737461746963o616464746f616e79o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:52 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98bc40085dfe56b4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":3097,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (723)","md5":"cb8e19edb8458af977b333d237f58705","sha1":"ca73adf24ab7a490ef92d37824d2efeec3ff4bcf","sha256":"5f3c3596517929ca6cec1a3ea4d1d6957e75139b0ac75e42cfb3e8f202d3b0ae","sha512":"96d5ce075b907b14955aae17598ad80a28b578f4299e192482dbe4b3667bd870f703f77e534d288b1aab561e49e6acb0c1db739b31bf78e0b93a54c5254028ad","ssdeep":"","tlshash":"5151d812bc21d83c11531697b9b2fe8c607e6762d901e860e2c766b5d5d05f78a03f8d","first_seen":"2025-10-09T07:44:53.162843Z","last_seen":"2025-10-09T07:44:53.162843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/e9c9e9d67513/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\ncf-ray: 98bc40086e0056b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10218,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com/j/collect?v=1\u0026_v=j102\u0026a=1966870752\u0026t=pageview\u0026_s=1\u0026dl=https%3A%2F%2Fi777777o65736do6575726f7061o6575z.oszar.com%2F\u0026ul=en-us\u0026dt=Home%20%7C%20European%20Stability%20Mechanism\u0026sr=1280x1024\u0026vp=1280x1024\u0026_u=YADAAEABAAAAACAAI~\u0026jid=176318144\u0026gjid=79180559\u0026cid=1609304894.1759995840\u0026tid=UA-154688302-1\u0026_gid=417338032.1759995840\u0026_r=1\u0026_slc=1\u0026gtm=45He5a71n81KXWC6JHv830280439za204zd830280439\u0026gcd=13l3l3l2l1l1\u0026dma=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480710~115616986~115834636~115834638~115868795~115868797\u0026npa=1\u0026z=1215829055","fqdn":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /j/collect?v=1\u0026_v=j102\u0026a=1966870752\u0026t=pageview\u0026_s=1\u0026dl=https%3A%2F%2Fi777777o65736do6575726f7061o6575z.oszar.com%2F\u0026ul=en-us\u0026dt=Home%20%7C%20European%20Stability%20Mechanism\u0026sr=1280x1024\u0026vp=1280x1024\u0026_u=YADAAEABAAAAACAAI~\u0026jid=176318144\u0026gjid=79180559\u0026cid=1609304894.1759995840\u0026tid=UA-154688302-1\u0026_gid=417338032.1759995840\u0026_r=1\u0026_slc=1\u0026gtm=45He5a71n81KXWC6JHv830280439za204zd830280439\u0026gcd=13l3l3l2l1l1\u0026dma=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480710~115616986~115834636~115834638~115868795~115868797\u0026npa=1\u0026z=1215829055 HTTP/1.1\r\nHost: i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.2.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-origin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nrefresh: 2;\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CmE9LIeMwCHt%2FbaWbsvC856Ny571%2FKOE906MYtZ5OmQXnGaxeVkqREgAUJvl66PxtQ7F2r%2Fvsu5eOwMXOka%2BGiBKM%2FeIQwvRrq9XRDaD8uTGlKkCvH8Ph%2FIq%2F%2F%2FRHiy4Ev7aXwV6iD3vJlGtdKt23VHXsCLC4Lnr\"}]}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: 98bc400f9e7556b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6a532ed10ddcc9f012f8144fc8922022","sha1":"0ffefb6f16c5a5007ed6428e86ca604c72c28708","sha256":"6bd6d6803e0a9191ec775bb646dc32a1dba2c3043be403b5e042fda1238c0cda","sha512":"1221d384b5ded87cb4bacb6a0f4da4f91f0b9a9679c4ba05b8e1c75753678b9a077ff5c62f90d8dc7902d5590017513f4c8fc71737e1cb4db21f9130f5206025","ssdeep":"","tlshash":"ae60000c000000003030f30cf030f0033000c0c00c000c0f30cc000300c000c0cf000f","first_seen":"2024-07-24T08:29:06Z","last_seen":"2026-01-10T23:27:53.417708Z","times_seen":14,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c652d616e616c7974696373o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-4D2Y9B123H\u0026cid=1609304894.1759995840\u0026gtm=45je5a71v9223923711z8830280439za200zb830280439zd830280439\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480710~115834636~115834638~115868792~115868794\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480710~115834636~115834638~115868792~115868794\u0026z=1201915275","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:44:00.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:43:45 GMT","end":"Mon, 15 Dec 2025 08:43:44 GMT"},"fingerprint":{"sha1":"AF:04:70:AD:A3:31:10:AE:43:4C:21:61:D5:1E:03:15:9B:9D:82:EB","sha256":"B5:AF:C0:98:F7:62:50:F1:E8:09:72:78:55:CA:3D:4C:A4:82:7A:F5:B7:2F:AC:6D:F0:5D:44:50:49:3B:55:27"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-4D2Y9B123H\u0026cid=1609304894.1759995840\u0026gtm=45je5a71v9223923711z8830280439za200zb830280439zd830280439\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480710~115834636~115834638~115868792~115868794\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480710~115834636~115834638~115868792~115868794\u0026z=1201915275 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-26T18:19:02.568025Z","times_seen":914455,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":124,"dns":6,"connect":30,"send":0,"wait":46,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/cdn-cgi/rum?","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:03.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1163\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995843$j56$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MQgtTEC4Or2eIV42JZTDNlT0XAflJEKXajx2YL3Co1X%2BbehPu8dwhMEafb8v18F0LNJgsg0LCRw6V5l75i0sbtOT6fdWyVefG30amTQMmSaoqvtqI7vDwngpw2y%2BaCYb5RfML2Mvw073vRHltKlEGiMnOA2xY2RQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 09 Oct 2025 07:44:03 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 98bc40247ffa56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/system/files/styles/width_767/private/background-image/luxembourg-kirchberg-01-1920-600.jpg.webp?itok=3m7qqa5O","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:57.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /system/files/styles/width_767/private/background-image/luxembourg-kirchberg-01-1920-600.jpg.webp?itok=3m7qqa5O HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\nvary: accept-encoding\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\nlast-modified: Thu, 03 Jul 2025 07\r\ncache-control: private, max-age=2678400\r\nx-drupal-dynamic-cache: UNCACHEABLE (no cacheability)\r\ncontent-language: en\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sun, 19 Nov 1978 05\r\nx-generator: Drupal 10 (https\r\nx-drupal-cache: UNCACHEABLE (no cacheability)\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 i3937383164313637353962663362623765633036623132336433306661386130o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: ITTmMvIRcsfN3tsZd__T0uLyRpoIpbPAJuFg7yQ-MhscYIidUF4x6Q==\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1D7ABj9DZ9nkRnKHvjyVpuUkAl3%2B%2BOufQEvWsyuBifYq3leOCBj8cTSH83%2BT0PTOC8kSgR30H0lcMjPSE2wr5X4UQSUqRTeWTIO4pmieXMj3Jx6SzWuWc2lMfjjkZaS%2BxYf5zgM3RnhJ\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40007d4b56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Drupal","description":"Drupal is a free and open-source web content management framework.","website":"https://www.drupal.org/","common_platform_enumeration":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","icon":"Drupal.svg","categories":["CMS"]}],"data":{"size":25847,"size_decoded":0,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 767x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9d8325de55fa7cf3a0e1c9b708d2f683","sha1":"7f7f0a3c089d3bf642fb8c99129121bb66221f30","sha256":"efd14b91361c2817cfadf21e388eeabf7b37114dab74a4cde135f20cb4806f53","sha512":"f58f1f26d55ed0031349b9a79ec37617308e1365d2c571cafb7696e8dbda9d3ca2b0c63b21d3483d862e52f93543aa86656cfb1ac2f09e9c93f90ab7aa847332","ssdeep":"768:NCe0ByfQI5tyLAT/qjUb9woszZXqON9OiiPx:NKBFkyLAGjUb9wojOFi5","tlshash":"47c2e041184b79f1faa5e1cc8ca01457fe37091efd7319a713b46f082a5da2d72e6227","first_seen":"2025-10-02T10:05:42.428277Z","last_seen":"2025-10-09T07:44:53.164039Z","times_seen":2,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":565,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/js/menu--main.js?t3eiuv","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/js/menu--main.js?t3eiuv HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: text/javascript;charset=UTF-8\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 07 Oct 2026 12\r\netag: \"a93-63fc947b0a800-gzip\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i6537666162393131633866303038626561666263613230623139396165363234o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: cORCaXP9EXNm8dTukgdxr34hXfo8le4vrnmiT0mPnT03Vkb4qdeftw==\r\ncontent-length: 831\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p9wo2eKISyxy%2B%2BH7VvwAw3U0ss%2BM%2BWUb4s0SWfPSQz2v%2FQwPbwQwPxtbAxYEIvi1Tsb1r%2B%2BtipSJAQmeCBasD%2FTAU9LgonnOTDeR6dHJjYhvM0Wxj3fIlf5wjJwF%2BwZAodyK2NOGSQ1E\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40055db956b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2707,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"8de72c8478aa35b1e9881e9e5cbb079d","sha1":"4b94881996d39bf797f22913a1d7bc39f0683c76","sha256":"51f6cee661da954ae04e86f9fb86d17258025679f29fb364e5097fba19b61ba1","sha512":"ff37a2405712968bb3822d11b046d86cbcfabdf035891cd6cd868ee0313354f9f4599b53369e2d17555834d266ec17e9d1021053291a81b51a1b51f7ed322a7a","ssdeep":"","tlshash":"6351f184746249b010bb36ee47e7c07092314657d68dcb00f77e56cd8f446867ee674e","first_seen":"2025-10-02T10:05:42.451154Z","last_seen":"2025-10-09T07:44:53.165791Z","times_seen":2,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i65736d2d63686174626f742d7365617263682d75692d70726fo65642d696e746567726174696f6e73o636f6dz.oszar.com/index.js","fqdn":"i65736d2d63686174626f742d7365617263682d75692d70726fo65642d696e746567726174696f6e73o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.327Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /index.js HTTP/1.1\r\nHost: i65736d2d63686174626f742d7365617263682d75692d70726fo65642d696e746567726174696f6e73o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i65736d2d63686174626f742d7365617263682d75692d70726fo65642d696e746567726174696f6e73o636f6dz.oszar.com/index.js","fqdn":"i65736d2d63686174626f742d7365617263682d75692d70726fo65642d696e746567726174696f6e73o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.758Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /index.js HTTP/1.1\r\nHost: i65736d2d63686174626f742d7365617263682d75692d70726fo65642d696e746567726174696f6e73o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/images/logo.svg","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/images/logo.svg HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/css/css_pmEoZYJoqAqjEHUOEhlJ89R2_IsF5X5U3dS8iCt6t8w.css?delta=1\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyNlAuO4yAMhi-UJquVqjkOcsBNmRrMYuhjT79O0s50sulDQkown4yx_RucKwzx0sH1p91ljqXpwR5MYV2pu_s3Bc-lsQd0vnDemkR18NGkkfDRYSymJ7aH7n7TWILM3UDcA22kXMjHobFMnHs-dw53UEm9csbO5ZqAWviE8w-D80A8zKbIOQD5v9g4MEcfrb_5tiINSjCnMdI9BuymANpySdhaTpfsh31ZILZK4WDuSOi5FvXskJf-_od7EG9fUj4eUW3ZZCQonuNrxwQ9ktFcHd5gMTpNqpaI6eBfv7D4Qrig8DhWzEJ2aweikcjq8dwwP20P60Fw0dxeM1c9OcxG0I4ZeULuuGbLlUI0BXox21-6nvAcUdurhmc-y4nfZ8zvrfnYvkW-iu2b_Niq2yXp-wzZo7SffyrmSyvkVUFLaL0SAWOdLtk86vUvQlPKBfOL41Yl_xDZI4zVGw0PmQA6HZ4SoirrIZudz_I4WmGrA2BVDJEdzlCCQQOvRAvi6PG0CThAySoT2RBMYlmhWpXIYK7n00amPC_vnNiIJ8msupoEMF6-RkmAXMwOrCpIa-nGnFdjmQ8e9RMSeYhWRbZiNLfRqEN3fPptGF63zdxW5qqjbu6sLzldT50Xy0dtpW5WRRN0eEPHGHp0WmedpWXshAQZhgxpL7drvi1tjan22nZ7dI14jQ9N4lTTPFOkW7E14_NlSoK0gV0l_AdXM4eY\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 09\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\netag: W/\"1fe8-63fc947b0a800\"\r\nvary: accept-encoding,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3662653335636639316635396636373133663238613865346165323138396330o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: YzfY9BdBDttDphjgyKAh7bdODHGnqWe38Baz7l_MtAASb7KMoBgJpw==\r\ncontent-length: 3245\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LLwIqQJvwp%2FfMnJ6MNMza3Gplxys6PSNBHMaZ7pvCnUEZ9ChIAA3RjH%2BQ%2F1kLWn10mQOh%2BNLq7TjaRRNHyatdKSrpE7w%2F%2FZTpvyVBPLw3nbf%2Bj8oBYKiT0e5ZWC9rq%2F4BwROh1r2O0gH\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc400aae1656b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8168,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"524408d8dec02552b1930349d70448d4","sha1":"377ae95021af8ca5784282a9b225570f159362cc","sha256":"1f8643aa34787c3278311af42bcf91c87bb54f5329e029c1f698ccdc1cc355da","sha512":"b961a8d4a88eba39b76f6f437524b57a325b1b2314e87d2682047f926cffead6d6a55449755428aecfce57119e257c6789a2d74bd3b70eb4abc8c0073b6f9e53","ssdeep":"192:X0AvvUkydsjpgRjVCk5mTBzCYDvpISocGY:X0AvMJUptk5uQqI7JY","tlshash":"12f192e52bb092c4d9cdecadef399fd82027b0ad7ab605c095ae8b2570c75c5f208c55","first_seen":"2025-10-02T10:05:42.325888Z","last_seen":"2025-10-09T07:44:53.166976Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i666f6e7473o67737461746963o636f6dz.oszar.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"i666f6e7473o67737461746963o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:00.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: i666f6e7473o67737461746963o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 07:44:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15343\r\nx-powered-by: PHP/8.2.21\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Thu, 08 Oct 2026 03\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 16 Oct 2017 17\r\nage: 100017\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\nset-cookie: fonts_gstatic_com=%7B%22HttpHost%22%3A%22fonts.gstatic.com%22%2C%22HttpDomain%22%3A%22fonts.gstatic.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fs%5C%2Froboto%5C%2Fv18%5C%2FKFOmCnqEu92Fr1Mu4mxK.woff2%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Ffonts.gstatic.com%5C%2Fs%5C%2Froboto%5C%2Fv18%5C%2FKFOmCnqEu92Fr1Mu4mxK.woff2%22%2C%22GirisIP%22%3A%22142.251.141.35%22%7D; Path=/; Domain=i666f6e7473o67737461746963o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:54 GMT\r\ncf-ray: 98bc40163c86c759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":15343,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"4bb85bd5f1bd1ed55457ccfabdfa10b7","sha1":"2ee726760bcab1645487325950b8e914f2fafb07","sha256":"65b539a25082aa481e31ef0aa09c2950de59504a203eff4601966d7791a17a88","sha512":"b3b6fe5abb521ac7bdc20fe0b3dae042ff20c2e241a05e87e892fff02259d83b226e8dc33c8eda16e290309045415cffb279f80480043a7b13e4c36d78fc3cf4","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/e:cqrVO++tw/9CICFbQLlxe","tlshash":"2462e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"2025-06-21T10:27:34.662214Z","last_seen":"2025-10-09T07:44:53.016198Z","times_seen":3,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":502,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i666f6e7473o67737461746963o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o676f6f676c65o636f6dz.oszar.com/js/th/CfTnQukLks5bs8x-CaqyPUkLGsL_zVi8KCE037ufnyo.js","fqdn":"i777777o676f6f676c65o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:02.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /js/th/CfTnQukLks5bs8x-CaqyPUkLGsL_zVi8KCE037ufnyo.js HTTP/1.1\r\nHost: i777777o676f6f676c65o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995842$j57$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; google_com=%7B%22HttpHost%22%3A%22www.google.com%22%2C%22HttpDomain%22%3A%22google.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fjs%5C%2Fth%5C%2FCfTnQukLks5bs8x-CaqyPUkLGsL_zVi8KCE037ufnyo.js%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.google.com%5C%2Fjs%5C%2Fth%5C%2FCfTnQukLks5bs8x-CaqyPUkLGsL_zVi8KCE037ufnyo.js%22%2C%22GirisIP%22%3A%22142.250.187.164%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\"\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Thu, 08 Oct 2026 04\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 29 Sep 2025 09\r\ncontent-type: text/javascript;charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-length: 25466\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ndate: Thu, 09 Oct 2025 07:44:03 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncf-ray: 98bc4022bfd756b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":58957,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (57711)","md5":"09a3450a24dc078ae03de856372c1b8e","sha1":"237f85dee5c0a7dd5726cd88ae56d90d58c213bc","sha256":"09f4e742e90b92ce5bb3cc7e09aab23d490b1ac2ffcd58bc282134dfbb9f9f2a","sha512":"75478689fd0a17ec781ea26ec98d800620f622299e1a0d3e0e78bffd91c00550c56a1b7dd9fc015230188afcc153139a4cfbac0262970f8d51312d722e3a5e0a","ssdeep":"1536:jpkBjKiF6iLiS6WBcVW01eJKx+cUnK66kh4GurV:ejKiF6iLiS9k1ec4Lnh4j","tlshash":"9b432acfb2d2673089f369e2115b410921bea8265c543c6ebd16e3f46e75a87402ff39","first_seen":"2025-10-01T14:03:15.205419Z","last_seen":"2025-10-14T06:58:33.913817Z","times_seen":1101,"resource_available":true,"data":null}},"time_used":411,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":367,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o676f6f676c65o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:06.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nX-User-Agent: grpc-web-javascript/0.1\r\nContent-Length: 24\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Referer\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 100993\r\ndate: Thu, 09 Oct 2025 07:44:07 GMT\r\nserver: cloudflare\r\nset-cookie: jnn-pa_googleapis_com=%7B%22HttpHost%22%3A%22jnn-pa.googleapis.com%22%2C%22HttpDomain%22%3A%22jnn-pa.googleapis.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fjnn-pa.googleapis.com%5C%2F%24rpc%5C%2Fgoogle.internal.waa.v1.Waa%5C%2FCreate%22%2C%22GirisIP%22%3A%22142.251.140.74%22%7D; Path=/; Domain=i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:42:00 GMT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dJee79h3hVJk%2B06IeWIKtOsVVPPWATfwAnvt0oCJh9IS5MAgKyTThPag1Fke%2FVK6k571%2B4zMV2eizhJ1bB0fQqtSh%2BFSNVAyyWXhjLYmea5b7NjjQ30p1LmXUMYu7agbutpV8cHeBP7%2FHFRkJaoKl01s\"}]}\r\ncf-ray: 98bc403ab94b56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11004,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"ASCII text, with very long lines (11004), with no line terminators","md5":"a7a33e9ba72b5ded61928ef9343cf1d7","sha1":"be43422ee641ef3b669decc82433fa84c49f19ae","sha256":"1f2753430036995160b2c6b5151e161b1cfcf3e5ae9d4e50df3e6e11a0e9546b","sha512":"08b4a153b92ab7451d9a0459439fe0f6c16ed744d0fe741664bfe498989da54951593605d384830432b85e427a1e0992276135f2e9832f2679896ba6235e0eb9","ssdeep":"192:mxM11xPflhQaUXgMH16qGgWIhEuo+LGEIcfLL9xp51wwpRdSP/wChgXhs:mKPflAxH16h8e5+qENl7515ly/LuS","tlshash":"2a32b689f90eb104758d0259ca49ba8eeb37d58010b048e85207e77996fcb87cf5db9f","first_seen":"2025-10-09T07:44:53.168842Z","last_seen":"2025-10-09T07:44:53.168842Z","times_seen":1,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:09.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: content-type,x-goog-api-key,x-user-agent\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pXHTfLq61rx51GGOaj1cFXL%2FAOmTzwnS6raTP0TDhkO66LAdlr8cngvv5Pxxf5O1pdIp5E9LhI%2FI3uORFMW5tGRVj0dSIM6lIiujo0gaguKZE7rn28lVhN13zYF04V%2BLoae5%2BCsEfEPr9kniKQoU93si\"}]}\r\ndate: Thu, 09 Oct 2025 07:44:09 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc404c09d856b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/js/js_UzDuFmolz9fZaxUdNseJK6Jp7yITYXNrLvW1gtbinJA.js?scope=footer\u0026delta=4\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyFU9GyozAI_SE1-7Lfk8EELS0GJyG2_ftLtb29td29MxmFcwjhQAIxqkC6Orgb3ZAladNDOHkVW7P7YftjaYKw5F4uLuIAlfUb8JSYErqd_-RZILoXz7iMLuY6A3cqNRxwwaSlVSzaYJl8DwXdw3hHusHSKKXRT5jqyocDaC_qftieacE3siDkcHhySZQGCpZOUrHsKWF2_yLWHWfriB5wMs0MmfS6R2tRsUJZwqnT64wd9FLVLxRRyq_BlBZrg2SfkbfDf93CmOKtGyrCJ9Jd_NpcHyDHHbEN_RUbWXrg9rg_9BtvDwj7RAxXE7jV0lfiiNn6HG7F_ydykJqDVJ6SV-iL__vH1j6eysfSb3PfskxA6XkNPkUU63sP2Q-Uy15ukojdQnju1un4oTKXkBH3hWccTU13E_92Ddb9ZYKsfoCgxRemNar6IHIitN80M0EKNo0PYIMXtUdzeryJu9uMIiOjdWd0o332fgdHuLyCU1PIsqKfZa7zdkeK-4A1t6KLPdaBEil6Ey3Mq5TSPtB2Q5sz9oPkyd3_XSRgGb8ACYWv7g","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /sites/default/files/js/js_UzDuFmolz9fZaxUdNseJK6Jp7yITYXNrLvW1gtbinJA.js?scope=footer\u0026delta=4\u0026language=en\u0026theme=esm_wop_theme\u0026include=eJyFU9GyozAI_SE1-7Lfk8EELS0GJyG2_ftLtb29td29MxmFcwjhQAIxqkC6Orgb3ZAladNDOHkVW7P7YftjaYKw5F4uLuIAlfUb8JSYErqd_-RZILoXz7iMLuY6A3cqNRxwwaSlVSzaYJl8DwXdw3hHusHSKKXRT5jqyocDaC_qftieacE3siDkcHhySZQGCpZOUrHsKWF2_yLWHWfriB5wMs0MmfS6R2tRsUJZwqnT64wd9FLVLxRRyq_BlBZrg2SfkbfDf93CmOKtGyrCJ9Jd_NpcHyDHHbEN_RUbWXrg9rg_9BtvDwj7RAxXE7jV0lfiiNn6HG7F_ydykJqDVJ6SV-iL__vH1j6eysfSb3PfskxA6XkNPkUU63sP2Q-Uy15ukojdQnju1un4oTKXkBH3hWccTU13E_92Ddb9ZYKsfoCgxRemNar6IHIitN80M0EKNo0PYIMXtUdzeryJu9uMIiOjdWd0o332fgdHuLyCU1PIsqKfZa7zdkeK-4A1t6KLPdaBEil6Ey3Mq5TSPtB2Q5sz9oPkyd3_XSRgGb8ACYWv7g HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: text/javascript;charset=UTF-8\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 30 Sep 2025 14\r\netag: \"71e8-640052d309648\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 07 Oct 2026 06\r\nvary: Accept-encoding,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3439353963303933633837303037646163383136633162636563656131646632o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: b47gKDuvfbD9K1XlupPZ-DFVt3LNQVEMAd-0g4EjFOfd1pNSGaU2xw==\r\ncontent-length: 29382\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQmYV%2BzQrX8iJe%2FPH1dm58wmz6ADGlM1%2F01C4ktCRG6Wm8d%2BwRybEKfyuOadxUI8FQ%2FZ2chBbzTYLdlEetpbwDxMz2wCY%2BJxO%2Bk4Ajj2G%2BJCqZfqkZNnpq2tJbO19d0441eQzDdiGOzH\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc40055db856b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":120865,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (34017)","md5":"588fe921b0b7023cf894a478afa95294","sha1":"d4270bf626dfe553a5bcc9ca08ef72034f2fff8a","sha256":"725c209f06adb6f3e19068737476e53f6c324de156d838c418414476594efeaf","sha512":"552ecfb1464bb64b13f9c5bfb17bf2b18bfbcb53c87158e5dcee9b80151104c67698750be4d980653ec92974bf2768ea715a4975d606b590f73e2b494efa7fce","ssdeep":"1536:Ecyy4st7C4yBIu+ywV9UEsSZGZI9MkePXotLfsRbet8WWOTkRhz/Y/0w/AKhErm6:6yrt7C4yBX+ywVuKOryW3BR6m","tlshash":"e2c3e607330ca07d41ef6191b587034dbf355ea9a08390a4e424d4b22a65a977aeff7f","first_seen":"2025-10-02T10:05:42.423923Z","last_seen":"2025-10-09T07:44:53.170476Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/e9c9e9d67513/main.js?","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/e9c9e9d67513/main.js? HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98bc4005ddcb56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10016,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10016), with no line terminators","md5":"33ff1397641a1945df59155fedc15e00","sha1":"85f5f7baa1164e65972383e6682074b7a29f3122","sha256":"284dd11c30b6da49f3ca4bcc20d6e54f1e617dcc48f54bd630b74b88d2b1faa5","sha512":"560c9f7e86b005e341e79faaa001c0324f038ace3efeb62c337860bfa5b46ed8928ace9b74772ce4e08aa234f04417a1cbfaa3df1457d498d55e4636916d95b3","ssdeep":"192:7xLe2/TQGPF61wYPL2Nd2gMWOlkuJdeUja1m8kasi3Gads:7xK2bQ4sF5WOlkuJ3jcm8kasSBds","tlshash":"96221bcfac4876d4e5e53c70950f70cfbb2ece650486386b92451cf6ba10329988be8c","first_seen":"2025-10-09T07:44:53.171979Z","last_seen":"2025-10-09T09:17:52.291408Z","times_seen":12,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/system/files/styles/thumbnail/private/image/smartfact02blcapitalstock.png.webp?itok=oO8wUatY","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /system/files/styles/thumbnail/private/image/smartfact02blcapitalstock.png.webp?itok=oO8wUatY HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\nlast-modified: Thu, 03 Jul 2025 07\r\ncache-control: private, max-age=2678400\r\nx-drupal-dynamic-cache: UNCACHEABLE (no cacheability)\r\ncontent-language: en\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sun, 19 Nov 1978 05\r\nx-generator: Drupal 10 (https\r\nx-drupal-cache: UNCACHEABLE (no cacheability)\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 i3932663436633632613836663132346136643961376365313066323838666261o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Aqjkg8GYHaIV2oGcWhffIawtW7arpha13ph4k9ViLg23GhK1TpuOcw==\r\ncontent-length: 1253\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gxUPZDs%2BPYBWcmvzRQY%2FQ3fzoQegQ1r7x4zhon39HfUB0ZwuraSAUxA7M7PcMCcBQQnhXucnAiHxIrPrLeIuaad8slZ12y3YFM1gJqiA2AdixgABInzD2R%2FixY9Ae4YoZbm5gCMhB4ov\"}]}\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bc400b6e1e56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Drupal","description":"Drupal is a free and open-source web content management framework.","website":"https://www.drupal.org/","common_platform_enumeration":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","icon":"Drupal.svg","categories":["CMS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1253,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"346166e65e1224d981d018a6db8f152d","sha1":"d9fc173e6a5b55c76005d2f7ce4e4a851ca8546f","sha256":"ddb77cad47bba597df1d5585ebfcb015fcc0eabc1172803e6b6d5b7348bcde25","sha512":"70f014e0787f0bf00d71802235beeb9816e295747bd82031b52b3c83ab91dd08cb3ceb66dfe2e23fec7d2a742aeef81944c783b09197e0588e24d5e3062fafb7","ssdeep":"","tlshash":"be21b7fc836b1526ab12a8f33265e464de47f608a3005e301b8b7f867287f884a77d55","first_seen":"2025-10-02T10:05:42.421099Z","last_seen":"2025-10-09T07:44:53.173503Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/youtubei/v1/log_event?alt=json","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:02.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1759995842124\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgtQNnk0OUs2eWtIcyi_z53HBjIKCgJUUhIEGgAgNQ%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 1.20251006.00.00-canary_control_1.20251007.21.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 814261735\r\nX-YouTube-Page-Label: youtube.player.web_20251006_00_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1759995841786\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C717\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 7002\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Referer,Accept-Encoding\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 47\r\ndate: Thu, 09 Oct 2025 07:44:03 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ch4JCUseuk8bnfCrDCXWSSnqB2eL9vEkA%2Fw9aWfsih3VMWD%2FWGmE9v6TprmEjEQElD2WgEYACcmrJ0aXYHqfXZJH6g18xtb5wHTavKYdv8HxWyS3DcshA3YrDYqljf59%2BxPFyr%2FvMoDYQ9YQ1lVtDIA2GaferjsN\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc401d5f5156b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"de76b37ee1f94b42a83da569801e2801","sha1":"989e5098c6a30bb708a80cba05172a84450e7aed","sha256":"c02b3933ef8efd8252092f534c78188f5501bf32ea38fb90d9c8a2d213803e9a","sha512":"d4c41823fb070e86440748a91cc39f57d3ff1de83246f0a7241ef35c2bf1a1ea0df2381482842b8c8c2bb545667e580dff9b422d229deeb167c9f0f604feed83","ssdeep":"","tlshash":"c6800038a8200322232000ea202888322a88c8203200ca28830200280cc0a0000a2282","first_seen":"2025-06-21T10:27:34.631531Z","last_seen":"2025-10-09T07:44:53.097588Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1323,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi_webp/pIyTAxHfb7Y/maxresdefault.webp","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:02.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"FC:96:96:16:3E:98:C2:EA:35:B8:AF:BC:B2:BE:C4:30:7E:6A:02:93","sha256":"B7:FA:E5:8D:39:32:EB:35:29:5A:6A:2A:1B:53:00:A2:A4:0B:FD:94:F0:1E:EF:06:F7:4F:ED:14:44:D9:1B:58"}}},"request":{"raw":"GET /vi_webp/pIyTAxHfb7Y/maxresdefault.webp HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 53128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 07:20:48 GMT\r\nexpires: Thu, 09 Oct 2025 09:20:48 GMT\r\ncache-control: public, max-age=7200\r\nage: 1394\r\netag: \"1697709704\"\r\ncontent-type: image/webp\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":53128,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"343aff7945026fddaf3bd94bf79775b3","sha1":"946d89ff52e2d7609160d6381a9a15f6cc7bc3aa","sha256":"29114d657001c06abd5f839fdc885344e2d392e55ddba6a79f2f2a1eb4b28191","sha512":"6bf2734e02afdc08b3786126308838c164b98bed1426ac834338d8ad2b2b526ca6101380b4b66152f5586bb35926dfef9ef4876d1bca51585b94b931e8f762a5","ssdeep":"1536:FxSu1HgMvdRQqXWNi9kUtpKVmuDrUn/00qwcAKpMLzzoPOT:pAYoqXWNOqcuXsZqwQpaAe","tlshash":"ad33f217ab53e949e7d8bf093ebba53e7adb6cc28cdac55db9de004021d11b8255cc10","first_seen":"2025-10-02T10:05:42.399118Z","last_seen":"2025-10-09T07:44:53.174884Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/e9c9e9d67513/main.js?","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/e9c9e9d67513/main.js? HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98bc400c1e2c56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10218,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10218), with no line terminators","md5":"d2ae9c6329340c843526d95d45e3b920","sha1":"08432367a32eb72d46829d07e549df470bc30540","sha256":"acbecdb791d83f4df2a465da7b66a2bd4ada356e638ff92ba100804e07fb2013","sha512":"c01037448c061786e031327599eddbb814b726a10a084e09c8d46fae06bb7c7a759f34711aaa1f4132604af48f7c20336e290e2d3e3bcfba1fa54d2f463c1b98","ssdeep":"192:6aTToCHz/lk41LmPd292gmCEXTelzPpva269SbXI3L7BEoML:6a3oCT/RazCmTexo2CSbXUfBEoW","tlshash":"62224bce6848b3e4e2a43c70914f70cbab3ffe561445786a91489cfaf926b589057e4c","first_seen":"2025-10-09T07:44:53.176458Z","last_seen":"2025-10-09T10:14:32.303569Z","times_seen":12,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=1920\u0026max_height=889\u0026hash=xWhLk7Ki-rPBwB_EPDITkxWUpG5V83Ou8MnuaDYyfjM\u0026media_oembed_control%5Bprovider_name%5D=YouTube\u0026media_oembed_control%5Bsettings%5D%5Bvideo_autoplay%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bloop%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bvideo_background%5D=0","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=1920\u0026max_height=889\u0026hash=xWhLk7Ki-rPBwB_EPDITkxWUpG5V83Ou8MnuaDYyfjM\u0026media_oembed_control%5Bprovider_name%5D=YouTube\u0026media_oembed_control%5Bsettings%5D%5Bvideo_autoplay%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bloop%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bvideo_background%5D=0 HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: max-age=31536000, public\r\nx-drupal-dynamic-cache: UNCACHEABLE (poor cacheability)\r\ncontent-language: en\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sun, 19 Nov 1978 05\r\nx-generator: Drupal 10 (https\r\nx-drupal-cache: HIT\r\nlast-modified: Tue, 30 Sep 2025 12\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cookie,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3437643033323737626630363634613637386461383465663139363538643238o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Ldi6M8vVix2bDxJpXhZAAOpEM5Y_PidY3BxaLU1SFCf9vM88htz3gQ==\r\nage: 601199\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=3,cfOrigin;dur=137, cfExtPri\r\ncontent-encoding: br\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zptFU2jyUrcQs0zYV79SIHD%2F40TbAWeOf0QPFhDknqR%2FwLvN4zjepiXWIuY9jRy3zreEXy0UZZNW3y0tYAJH9fOdqAth0bbsV%2BeyqJO3dOSb%2FkTf0roj3pn6B3VX0l2ClxJUxOFxQewh\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: 98bc4008ce0456b4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Drupal","description":"Drupal is a free and open-source web content management framework.","website":"https://www.drupal.org/","common_platform_enumeration":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","icon":"Drupal.svg","categories":["CMS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5057,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (645)","md5":"286db1516e5873420d4d9c9fa13d6735","sha1":"9cdb81e4a0edbe2810afe69ab22b15dd57ebf419","sha256":"cf43aa822848323f62fcc6061230152b5be8461a464ee3b09820423dacc74f46","sha512":"731688abbaed9a559a3ea6debba86083c3e9c2705da891788974b1cfedded8d9a8e84d696d3b70d205fbf3e55463e923d2566d35fc1b1f5cf432f384fb6eb11c","ssdeep":"96:e5C34eNILfVS3jCJur8eS9QBJfuH4xrpUmqx6mI31fGtOuvqKjyhjd9QHTlL6RU6:e+4eNafVjurA9QLfuYxrp8xw3wtSKjyD","tlshash":"e9a1c8056aab0516401770e627be6340363850836106cf1afe8ef6cdaf9c57f81fab8c","first_seen":"2025-10-09T07:44:53.177997Z","last_seen":"2025-10-09T07:44:53.177997Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_ias.vflset/en_US/base.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed","date":"2025-10-09T07:44:01.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/player/38e0f4b0/player_ias.vflset/en_US/base.js HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/HnPzxr_IYrE?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-type: text/javascript;charset=UTF-8\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\"\r\nexpires: Wed, 07 Oct 2026 12\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Oct 2025 04\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 928075\r\ndate: Thu, 09 Oct 2025 07:44:01 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\ncf-ray: 98bc40194ef956b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2636935,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1100)","md5":"4d209eb3ed72085fc52ef742427fe05f","sha1":"9a55353fef56ca9eaf3b28528099299ce7c3e9cd","sha256":"c632e9eb10115eebb73360d71e159f1cb024792719be2f65e2e6de71b7462aa4","sha512":"1609b0d7d0164403ec0361e8cf303c27a503456c24826db01d863820958fa17ddd7ad0a94a498118f2321fed0c3ef55bcc769556cf2849884dfc9f242296e5a4","ssdeep":"12288:9JJ7aNnKwAJJFqxZf1DlN1F9SqfgbGL+s050OyUlBO/:cRKwA4Zf1xodTYUHO/","tlshash":"c6253bdcb2a7b8515373f0b6482f2206b13b645458499a1cf256ead9acb0c1ed13ffb4","first_seen":"2025-10-09T07:44:53.036045Z","last_seen":"2025-10-09T07:44:53.036045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/s/player/38e0f4b0/player_ias.vflset/en_US/embed.js","fqdn":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:00.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /s/player/38e0f4b0/player_ias.vflset/en_US/embed.js HTTP/1.1\r\nHost: i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed\r\nCookie: cf_clearance=qV2rMypENy9DYxaRCeDLDo3K76qXgbg6W6uBjfoETBc-1759995839-1.2.1.1-4N92jo6x.gFUlYHT3XxltHewX.Y3uUKhR_1hxsJZdLayll5H1T_16TOmRh04h7bDzy2ArikITGO.I0qqj61BSYq75VUI1DvikKzsQEvh_Y_16codXbXhB4f4wS_KPxNZW.FkjYABRlW_R0yEpvgZ8YefWM7a5whRbB2L3h2pQOSYoCupfp5MvxjuGAbR0LoD8KwgA2kR5rvZfsgJZBFqfd4lsIQV3cMrStsDeJO30fs; _ga_PNFHQ1FTKQ=GS2.1.s1759995839$o1$g1$t1759995839$j60$l0$h0; _ga=GA1.1.1609304894.1759995840; _clck=py498r%5E2%5Eg00%5E0%5E2108; _gid=GA1.2.417338032.1759995840; _gat_UA-154688302-1=1; _ga_4D2Y9B123H=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h1102618926; youtube-nocookie_com=%7B%22HttpHost%22%3A%22www.youtube-nocookie.com%22%2C%22HttpDomain%22%3A%22youtube-nocookie.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fembed%5C%2FpIyTAxHfb7Y%22%2C%22GetVeri%22%3A%22%3Ffeature%3Doembed%22%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.youtube-nocookie.com%5C%2Fembed%5C%2FpIyTAxHfb7Y%3Ffeature%3Doembed%22%2C%22GirisIP%22%3A%22172.217.17.110%22%7D; _ga_J0YDDLDEYK=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_HVYT0WNVXX=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_J1TMMZD7V3=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0; _ga_KDHGVQDDS2=GS2.1.s1759995840$o1$g0$t1759995840$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-type: text/javascript;charset=UTF-8\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\"\r\nexpires: Wed, 07 Oct 2026 10\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Oct 2025 04\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-length: 10813\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: 98bc40126e8d56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":33150,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3391)","md5":"652f1bf9d51ccc032e720af32da5b8cc","sha1":"8f7d2f8f47b9e35b84c69e7e354f3e961005c3ad","sha256":"08fb33a47e1d9fc813e540d0baa624c34d2f7225ecf8063a425194077c3c17e1","sha512":"836a4854cae1a6f59584ca0710c2e6171b94a1fffd5b07f84a07203f7e8a349c09db6497342bd1f62a7e7c1dd33abe84f796af8600f9f909ead9eebfa5e9c552","ssdeep":"768:V+1oNSYuOQEU+a6oWmMii0q/anDq9MT3DFNf:5oWmMh/aDjj","tlshash":"ece2d64eb7e1e4349265e2ee2c0b1104673b94cc58a0a35c763edde92db4d25b07afb1","first_seen":"2025-10-09T07:44:53.059014Z","last_seen":"2025-10-09T07:44:53.059014Z","times_seen":1,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:00.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 07:44:00 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98bc401618055685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-26T18:21:48.088861Z","times_seen":336413,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi_webp/DPX5wLp4UaE/default.webp","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/DPX5wLp4UaE?feature=oembed","date":"2025-10-09T07:44:01.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"FC:96:96:16:3E:98:C2:EA:35:B8:AF:BC:B2:BE:C4:30:7E:6A:02:93","sha256":"B7:FA:E5:8D:39:32:EB:35:29:5A:6A:2A:1B:53:00:A2:A4:0B:FD:94:F0:1E:EF:06:F7:4F:ED:14:44:D9:1B:58"}}},"request":{"raw":"GET /vi_webp/DPX5wLp4UaE/default.webp HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 1634\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 07:20:48 GMT\r\nexpires: Thu, 09 Oct 2025 09:20:48 GMT\r\ncache-control: public, max-age=7200\r\nage: 1393\r\netag: \"1540821161\"\r\ncontent-type: image/webp\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1634,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"aeb486c395524a8c12b0398eeff9040d","sha1":"89efa47460220530729e2a4f3bc083db25dcbbea","sha256":"d1660ab7fe6713c46d32e67125e9c1276fe6ad62b167b92c7ea099b7aa212323","sha512":"4acace73ef4d91326517fa229a74b94cfdab505bebf4964ce39bcd2045e636299fff0d8a5f01a73ed98463250a9e67380d9207b6006b47706a70f7d72bd0f305","ssdeep":"","tlshash":"ca310ab611e0566d36f11c3c0077b8d8f54829f2e52ef039cc3499e00430923b36159e","first_seen":"2025-10-02T10:05:42.377797Z","last_seen":"2025-10-09T07:44:53.179437Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":50,"dns":0,"connect":7,"send":0,"wait":8,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/cdn-cgi/challenge-platform/h/g/jsd/r/0.4227070164828552:1759994622:2VgnGR7w-HQ5KNofxFqaTQzs0vYke5i_j3FnFWzdlS8/98bc3ffc49e25690","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:58.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/r/0.4227070164828552:1759994622:2VgnGR7w-HQ5KNofxFqaTQzs0vYke5i_j3FnFWzdlS8/98bc3ffc49e25690 HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12178\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Thu, 09 Oct 2025 07:43:58 GMT\r\ncontent-length: 0\r\nset-cookie: cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=oszar.com; Expires=Fri, 09 Oct 2026 07:43:58 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 98bc40073ddf56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/media/oembed?url=https%3A//i777777o796f7574756265o636f6dz.oszar.com/watch%3Fv%3DpIyTAxHfb7Y\u0026max_width=1920\u0026max_height=889\u0026hash=xWhLk7Ki-rPBwB_EPDITkxWUpG5V83Ou8MnuaDYyfjM\u0026media_oembed_control%5Bprovider_name%5D=YouTube\u0026media_oembed_control%5Bsettings%5D%5Bvideo_autoplay%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bloop%5D=1\u0026media_oembed_control%5Bsettings%5D%5Bvideo_background%5D=0","date":"2025-10-09T07:43:59.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://i777777o65736do6575726f7061o6575z.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98bc400c4e865685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-26T18:21:48.088861Z","times_seen":336413,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com/$rpc/google.internal.waa.v1.Waa/Create","fqdn":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/embed/pIyTAxHfb7Y?feature=oembed","date":"2025-10-09T07:44:04.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1\r\nHost: i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent\r\nReferer: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com/\r\nOrigin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 07:44:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.2.21\r\naccess-control-allow-origin: https://i777777o796f75747562652d6e6f636f6f6b6965o636f6dz.oszar.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: content-type,x-goog-api-key,x-user-agent\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LViiIZSTH1jbnieYsBX5yBE%2BLCtuqAloXsLOYhLv%2B5yyZRWEDbviFO2C0dJleV4%2F5qtlpgk2AlVLk6ykvadhpxcSpIEtpbdRmF06tNCMYK%2BKxC8motvQwL4p5d2NAhTomFyg0wTnef6SszVxMF%2B8r9ZZIXg%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98bc402efde4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i6a6e6e2d7061o676f6f676c6561706973o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/themes/custom/esm_wop_theme/assets/fonts/preloaded/inter-italic-latin-variable.woff2","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:57.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /themes/custom/esm_wop_theme/assets/fonts/preloaded/inter-italic-latin-variable.woff2 HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\npriority: u=3,i=?0\r\ncontent-type: font/woff2\r\nexpires: Wed, 07 Oct 2026 08\r\nx-content-type-options: nosniff\r\nlast-modified: Sat, 27 Sep 2025 14\r\netag: \"1aba8-63fc947b0a800\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3738636462343631366637396333643563313966643738313539343861653161o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: nzHF8w-CrcUIt-2bmkZjv3POA3q09yWkNRnJztZpog3-mBFydZEa-w==\r\ncontent-length: 109476\r\nset-cookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Fassets%5C%2Ffonts%5C%2Fpreloaded%5C%2Finter-italic-latin-variable.woff2%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Fassets%5C%2Ffonts%5C%2Fpreloaded%5C%2Finter-italic-latin-variable.woff2%22%2C%22GirisIP%22%3A%22108.157.52.126%22%7D; Path=/; Domain=i777777o65736do6575726f7061o6575z.oszar.com; Max-Age=3600; Expires=Thu, 09 Oct 2025 08:41:51 GMT\r\ndate: Thu, 09 Oct 2025 07:43:57 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JziD8gCcb%2BiIl7QdmlJIldLkk02B%2FF1wC%2FmFlttdj2RblO5du%2B9D6xpJzn1HSuoLbEZh0pGwDTApUXdaIFO9ayUE7puOYDm4YXQyU24vKXIdRayxijCWjIMcqLZH9K92kGEO6vnmKKtD\"}]}\r\ncf-ray: 98bc40004d4556b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":109476,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 109480, version 4.66","md5":"18fc5f37f015e0ac1a543628b0b8a9b3","sha1":"be2d97374adfa0e58f32f62783d7fb929b1acfd9","sha256":"27cdfaa2a89772e576a4da47d19950aad85870abae7e48cd39ce9b0f552898aa","sha512":"a1fc399e5f21f980f5829f106c787d86e8b3c8995d3a860a107ba995a00e59002f04dee518880087ef84b026529a8f30e3a2f1704afb7beeccce172fe26aa938","ssdeep":"3072:AtaZgreM+FXiqotXXbP7QPt6/Ab7aHDtcXdfp4b5s:AYireMbVv/Ab7ASb4b5s","tlshash":"8cb31268fac9e203b5e708fc3bd617f2cb11aa2b6a631151bd076e2dd5c27e2251c416","first_seen":"2025-10-02T10:05:42.38354Z","last_seen":"2025-10-09T07:44:53.180927Z","times_seen":2,"resource_available":false,"data":null}},"time_used":739,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":279,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i777777o65736do6575726f7061o6575z.oszar.com/sites/default/files/styles/slider_big_image/public/image/2025-10/kalin-gff-1920-889.jpg.webp?itok=NbJxBXu8","fqdn":"i777777o65736do6575726f7061o6575z.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://i777777o65736do6575726f7061o6575z.oszar.com/","date":"2025-10-09T07:43:59.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /sites/default/files/styles/slider_big_image/public/image/2025-10/kalin-gff-1920-889.jpg.webp?itok=NbJxBXu8 HTTP/1.1\r\nHost: i777777o65736do6575726f7061o6575z.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i777777o65736do6575726f7061o6575z.oszar.com/\r\nCookie: esm_europa_eu=%7B%22HttpHost%22%3A%22www.esm.europa.eu%22%2C%22HttpDomain%22%3A%22esm.europa.eu%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fwww.esm.europa.eu%5C%2Fthemes%5C%2Fcustom%5C%2Fesm_wop_theme%5C%2Flogo.svg%22%2C%22GirisIP%22%3A%22108.157.52.60%22%7D; cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.21\r\ncontent-type: image/webp\r\nexpires: Tue, 06 Oct 2026 12\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 06 Oct 2025 11\r\netag: \"1f522-6407bf2200df0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 i3838613562316466643063623232386463616663313238353663313934323936o636c6f756466726f6e74o6e6574z.oszar.com (CloudFront)\r\nx-amz-cf-pop: IST50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: wNeWPkEqBzP1jyTMQfFUDABaOKRGZlAEA_F9_2gdjXff2JJTGAd-eg==\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yfSFnUwM%2BHwlA4gwkk%2BCRmx7oxl%2F4W4ffULSUd9xfagvUUeoSkD4jPowit1TU6xpm56ODy1J8WP%2FTWW3ZZn6xsk0zI5MIVbfW%2Bb7wmTkdQMx0%2Bkyse3c6ncwtYGKP0syrk4sDA%2Fp3BSV\"}]}\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc400b6e2356b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.2.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128288,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x889, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d85356db90d8b07bc7774deb153a6ebf","sha1":"6e258bf28735ac8c2e62f90c113d2bcd3e5bfded","sha256":"3807297d0743148b70d70e19001890db55bb3495a89ec6755934a3bc163401f1","sha512":"2cd0524fd902c830c90c1f08213140f6ae2e80ba2c4ef8e583e7e7bcb520926b3bde26a39232d6aa01b710bf402502f1d42cb0183be0d9a94eb266ccd4f4a619","ssdeep":"1536:N5AeJMcuhMUSGgQEzhsgjhXJN1yCuLYRuRN+L15XEZ3kN2P94D5yWbUsl0/AR:bzdVGmsu31yFYRu3d6wC5ysy/u","tlshash":"c2c3120dce08fa3dff5d47a6ec09de74039eb81af68cc4ea5405ccb09aa5758f54a291","first_seen":"2025-10-09T07:44:53.182575Z","last_seen":"2025-10-09T07:44:53.182575Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i777777o65736do6575726f7061o6575z.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i737461746963o616464746f616e79o636f6dz.oszar.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"i737461746963o616464746f616e79o636f6dz.oszar.com","domain":"oszar.com","tld":"com"},"ip":{"addr":"104.21.53.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://i737461746963o616464746f616e79o636f6dz.oszar.com/menu/sm.25.html#type=core\u0026event=load","date":"2025-10-09T07:43:59.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oszar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 18:36:37 GMT","end":"Thu, 04 Dec 2025 19:30:10 GMT"},"fingerprint":{"sha1":"60:7C:25:2E:47:2F:A2:B7:B9:C1:B1:CE:27:34:27:E9:C4:25:08:92","sha256":"DF:CF:CE:36:8F:62:3F:28:F6:FC:CB:F9:81:3C:D6:47:06:EC:B8:69:E4:DF:BA:40:FC:42:F4:67:EC:03:F7:73"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: i737461746963o616464746f616e79o636f6dz.oszar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://i737461746963o616464746f616e79o636f6dz.oszar.com/menu/sm.25.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=dhp1VJwDNbXVvKuzY83n5JYHXc14IpxlWD8TtqkkXTQ-1759995838-1.2.1.1-EOuuAbbJ8T1baJwk3bqnnvUIsC2FIZfGvjS_r1IHXwFQH5GkgFCuIIQKmxzF_Fbwpt34hXL5AdDufdsxuKemgd8xEaWrTAx6x3wm.xSqHso67QxZQ5YFLuXHuKQGma3IW6F6v9M5Ycy4ynC2KDL1_PEZHtscn6HOBL9YsVEk.gn51UPaWn_wtL5okYqHQKk2Vs1iWCwJ.xwkWaEJKTAJ4V_kf_EYIgJOWGw28bi5gb0; static_addtoany_com=%7B%22HttpHost%22%3A%22static.addtoany.com%22%2C%22HttpDomain%22%3A%22static.addtoany.com%22%2C%22Protokol%22%3A%22http%22%2C%22Port%22%3A80%2C%22KulAdSifre%22%3Anull%2C%22UrlAdresi%22%3A%22%5C%2Fmenu%5C%2Fsm.25.html%22%2C%22GetVeri%22%3Anull%2C%22GitOpjeId%22%3Anull%2C%22DnsAdresi%22%3A0%2C%22URL_Adresi%22%3A%22http%3A%5C%2F%5C%2Fstatic.addtoany.com%5C%2Fmenu%5C%2Fsm.25.html%22%2C%22GirisIP%22%3A%22172.66.171.172%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Thu, 09 Oct 2025 08:31:59 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DJWjyUd2g9YEWFCtsCiuVJEJi8%2F8CM1xwQ8AbrtUc%2BLBPnzZyPkB2R1ZvBqmpkxQpUSTaHyDqZ%2FFV3inrdSXa%2FsPESoC5P2GB1IEZZGFdy88uW2MDEevpI%2FHlXcQ%2BENxTlh6eLauAR9XYuqX63w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 07:43:59 GMT\r\ncf-ray: 98bc400c4e2f56b4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T16:53:36.485058Z","times_seen":109707,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"i737461746963o616464746f616e79o636f6dz.oszar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}