{"report_id":"f007e176-0997-4c6a-9f4d-92044cefe147","version":0,"status":"done","tags":[],"date":"2026-09-16T19:02:33Z","url":{"schema":"http","addr":"saga.so/","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"63.176.8.218","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"saga.so/","fqdn":"saga.so","domain":"saga.so","tld":"so"},"title":"Saga - AI workspace for your notes, docs, and tasks","dom":{"size":36625,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13670)","md5":"1a511a966df35312aeab0f2d7c674e1f","sha1":"f90aaeed161142f06a401e6e86c06fdaead1a5d0","sha256":"d4c64513d9660f41148e9c92d077a4b2abdef1ff7b2212b88e506d050aa56181","sha512":"f5815c70f99ee3ba775ed6bf85092c5c1ab8d54a3580fa5711ed4ceaec7c24cc0612d2c011d5008e2d2423e30e7bc9962732a6d9e11dd4baf4ced4e591a1e805","ssdeep":"768:0ai08HR33VsIQIFmQqit+AwRE0WS/fVoNfhqfjf8x6tWSCOdehIFgfE6D:0az8j/Q2mQqixwRE0/fKNfhqfT8x6tLG","tlshash":"72f22bb3e8e01537518f06dcfe676b04fce6538eea058d45b05cebd827eb88296ca145","dom_hash":"domhashb620792914750924d57161221230dfdb","first_seen":"2026-09-16T19:02:40.483379Z","last_seen":"2026-09-16T19:02:40.483379Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"saga.so/","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"63.176.8.218","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-21T19:02:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"e.saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"e.saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"saga.so","ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2020-04-27","domain_rank":1986274,"first_seen":"2020-06-25T04:30:45Z","last_seen":"2023-10-07T21:56:47Z","alert_count":52,"request_count":26,"received_data":370626,"sent_data":14222,"comment":"","tags":null,"fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Rewardful","description":"Rewardful is a way for SaaS companies to setup affiliate and referral programs with Stripe.","website":"https://www.getrewardful.com/","common_platform_enumeration":"","icon":"Rewardful.svg","categories":["Affiliate programs"]},{"name":"Clickbank","description":"","website":"https://www.clickbank.com/","common_platform_enumeration":"","icon":"Clickbank.svg","categories":["Affiliate programs"]}]},{"fqdn":"e.saga.so","ip":{"addr":"3.174.2.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2020-04-27","domain_rank":0,"first_seen":"2023-05-12T09:50:10Z","last_seen":"2026-09-16T18:55:21.306858Z","alert_count":10,"request_count":5,"received_data":422268,"sent_data":2258,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"arclight.vimeo.com","ip":{"addr":"34.120.202.204","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2004-12-15","domain_rank":24414,"first_seen":"2024-11-18T21:51:17Z","last_seen":"2026-09-15T10:13:09.895897Z","alert_count":0,"request_count":5,"received_data":1185,"sent_data":4298,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"i.vimeocdn.com","ip":{"addr":"151.101.192.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2010-04-21","domain_rank":24258,"first_seen":"2014-03-27T22:24:57Z","last_seen":"2026-09-14T15:36:55.461764Z","alert_count":0,"request_count":2,"received_data":26222,"sent_data":1250,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"player.vimeo.com","ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-12-15","domain_rank":132,"first_seen":"2013-09-26T03:16:08Z","last_seen":"2026-09-14T14:49:38.644457Z","alert_count":0,"request_count":1,"received_data":26553,"sent_data":658,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"r.wdfl.co","ip":{"addr":"65.9.46.44","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-05-09","domain_rank":172123,"first_seen":"2020-08-05T07:03:05Z","last_seen":"2026-09-11T22:00:09.345166Z","alert_count":0,"request_count":1,"received_data":11991,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"vod-adaptive-ak.vimeocdn.com","ip":{"addr":"23.33.119.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-04-21","domain_rank":36736,"first_seen":"2024-05-07T08:34:39Z","last_seen":"2026-09-11T17:18:44.466367Z","alert_count":0,"request_count":9,"received_data":7068040,"sent_data":8350,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vimeo.com","ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-12-15","domain_rank":78,"first_seen":"2012-05-20T22:35:29Z","last_seen":"2026-09-10T15:58:33.496804Z","alert_count":0,"request_count":8,"received_data":9187,"sent_data":4821,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"f.vimeocdn.com","ip":{"addr":"151.101.192.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2010-04-21","domain_rank":25524,"first_seen":"2014-04-09T18:24:34Z","last_seen":"2026-09-09T23:10:48.758368Z","alert_count":0,"request_count":4,"received_data":1501123,"sent_data":1958,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"lensflare.vimeo.com","ip":{"addr":"34.120.15.67","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2004-12-15","domain_rank":36991,"first_seen":"2024-11-18T21:51:17Z","last_seen":"2026-09-14T09:04:29.930605Z","alert_count":0,"request_count":1,"received_data":293,"sent_data":799,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"saga.so/","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"262cefe22607557c146a3437340f019c","sha1":"3958b695ce33dda47b26843356046b7bd33c0400","sha256":"5f87f97fcaab0366e47466089bc2c7d6fef9134ff1d1c6d81912cb4205b6766b","sha512":"93a3dae2442b9a8b423ff9cb5da55327b975e57f3822f3382825cf174210690eddc0553e7ef7009fb79d9eaab61dab0e508c0433bd69c721cdb3c7625a4a9c24","ssdeep":"","tlshash":"53c08cac2081a0e889b260f6037b6f46bed0860a68d40410131241d84a19c0b184bc68","size":144,"data":"","first_seen":"2026-09-16T18:55:25.579901Z","last_seen":"2026-09-16T19:02:40.527039Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"01439022fc0e7ff63671555051f206dd","sha1":"345d0604bde28c3920a6819e8d6c69ed9f61d41f","sha256":"6a0748f1e7a61627099581bf0e4e82631a1aed8c70193fc8ea71a020db4be662","sha512":"e1e888f058ef5183ac1f5017dd3e481ee56eb700dc382e76755a45488db842ade85f3900d90b38e3a590bb0e929a0b4868326662cfe089b424a6a6da355090c9","ssdeep":"","tlshash":"9371ffaca8f324374477749557dfa98c3b668067a200fc053d6c47890fe68511eeabea","size":3621,"data":"","first_seen":"2026-09-16T18:55:25.581658Z","last_seen":"2026-09-16T19:02:40.527892Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"b85f8154474069c0c9f2c386123fb853","sha1":"5afb10bd25adfbe546456f55eeb32609016a67ae","sha256":"7a23370103970455dbaff54e4d4c0996f20c2423ed0a38ec858d929ea222b336","sha512":"c687363503a0c783b023cce305baae0eee2ebdc0f31c26e8fedd488fd693cb5c0f7e7165b8e1e8d587f6cdc0268e6bdf612f97c0707446af2553b449ea6f3a1f","ssdeep":"192:dGQbb89VCmsrJogevymnzzxgHPje3xhUMb18OsFAZOS1dBe0S8ejnIqSe3yIp5nN:vNmsrUlgih2MR98ao","tlshash":"17822c482df721b5947b307e6bff9188b6a441078808dd50bc5cd9186fe0e6896febd4","size":18660,"data":"","first_seen":"2026-09-16T18:55:25.584665Z","last_seen":"2026-09-16T19:02:40.528632Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"2cfc909f563cfe8d37c8306ce52902de","sha1":"6d83ac656ac7b532d96fd059208f85cbae9e6a01","sha256":"3ccc4c12905cb7f3a6a0c5a02691458c4a95361d436b0a6582aef84537eb9184","sha512":"54e87290155e7ab70aeeb523ad3d22e1fc77bc42ad28a68b0e17630e11b091fef1e8f4f94f4672875f4b0417f0c7c70a764f571a2057d0e5c1ef49fbb8502e39","ssdeep":"","tlshash":"c951696925b23273493360aa9acf51c93a5031d3a442ed9c3e6c92425fc7c51adf4bef","size":3037,"data":"","first_seen":"2026-09-16T18:55:25.587034Z","last_seen":"2026-09-16T19:02:40.529309Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"a77dc2549a448f0b0306b5e7d6fffe8c","sha1":"bf8cf83b3e539d45793467280a998102b6aa3aab","sha256":"c1a673794964d5f89e32f7469075ac11dc88668caa293d5270652ee80c871058","sha512":"0aaadda2e090c404f2f52a9170fc52bbf3374b6ad0540f5fa3d54b791e550d2ff53dcf863958d2f7fc261c833e8d148f8441e46351044d2710ef438822ddca4a","ssdeep":"","tlshash":"9a41970df90770338ad2b2d5b1f69987cf56138453388c85d92180c97640ecb872efb8","size":2132,"data":"","first_seen":"2026-09-16T18:55:25.592764Z","last_seen":"2026-09-16T19:02:40.530309Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1eae30ce6b60b706e700c469ac8b55c","sha1":"2a73e40d163a68e0a7520979eef18f651a472d7f","sha256":"7281b4e6b5c42cfbf6236750487446e8a93eb0971fe10a61717855cc4aad2d78","sha512":"04cf1c8820493ad8a9ac665b783e0acce6a5a326dda65048ec1e0f266dd6cd42666d7de2f8f7a115f5f995b6779786ca1d190ee85e6982accceb712479da8484","ssdeep":"","tlshash":"afc08c4dc83a83b932a5e14e7aab3f8e7e31130201480010d200889033348a7cc9d8cc","size":172,"data":"","first_seen":"2026-09-16T18:55:25.595106Z","last_seen":"2026-09-16T19:02:40.530942Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3211a6582621044c0325af801f138fb7","sha1":"747986850eecf90e8f2a53e3219b148d77a4f461","sha256":"23d785588957731eae9310b684a4d525d26679f2942d89dd51cecd0b0c0b9a19","sha512":"0243d3822edc14e283f3a27b6bed5465c58bb7709b0578c7ce3e41c29f1280a7a76da9b7c231222567b9b1e36d8edcd8c6976808a47d374759b31231a7ed553d","ssdeep":"","tlshash":"8f012b0f5aa361a51cf722ad9b5f62a4a3775003314ccd517d2dc5407f59e2e0b85dcd","size":714,"data":"","first_seen":"2026-09-16T18:55:25.596171Z","last_seen":"2026-09-16T19:02:40.531507Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/_astro/ClientRouter.astro_astro_type_script_index_0_lang.CLRjag--.js","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccb8364e024612b505edb0e6241ff2de","sha1":"92ae8f4225dd31abe37f9a9e51ad57d00152f7de","sha256":"a0353634d9bc459199ad4137b6991ae3b6204d04f7bb7629bab1c81b59460179","sha512":"dc10028470796fcd41d3c19daeada21207812322eb35e50f3453b6bf65b31776cf890b3d09bbd1c8e2172638606acf62b2ba53ec2c08d9c597a3bbdb377635d8","ssdeep":"384:935TEKtxv1NYeAQ+nWfdMknVg/QUsOZ7m9cLm:935Ntxv1NYeAQEWfdMWg/QUsOZ7m9cLm","tlshash":"0862e7b9326270b64bff05dde1f69290b5311494780bd090742c8c6a293af8a2777f9e","size":15410,"data":"","first_seen":"2026-09-16T18:55:25.570515Z","last_seen":"2026-09-16T19:02:40.505296Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"57f7f3aa3a3a44664be2364871960b24","sha1":"9b073ecf9f6f1718559dcd89f4d819ebd68dac9d","sha256":"11aa3ddcb239e4ee1fe72f1f7796f62c444af5f33957da1da475b10b53a47144","sha512":"e15d2f8d463cfb4671e21c78a94f0510c12e5517dde05fff074d39c49fb7d00abedac548dd1ef7531584ebe5f2bd5cebcbff647296a67687ceb9caf02030b21a","ssdeep":"","tlshash":"4b11c0214210b872459ea5970297d30d7013666ecb06c78c412a9559207c9d7b3aabbe","size":876,"data":"","first_seen":"2026-05-25T17:50:02.53288Z","last_seen":"2026-09-16T22:17:20.48893Z","times_seen":10085,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"34c68a535b26160df48d0cd4c09db208","sha1":"fc36b8b324f50584c7657dc22667c0a3f0e461e1","sha256":"e4bd8df8f47f93180ca8c810e89beb144c4d582b58ee680d6ef06d7b4fb8a839","sha512":"d5d922a13a8c83fad2420fb0ba71f694a3dd5432a96415e7bcd49bc035c20dbd020dafdacbb8ae44192e2b082040beebc2284a4ae0ad6ce38dc8f2dac9dc51ae","ssdeep":"","tlshash":"f9c0c0f90041b37c03c0c4d9343d1d0483140000e446c002e0d1e3cc2f2ee91cc0c018","size":186,"data":"","first_seen":"2026-09-16T18:55:25.599838Z","last_seen":"2026-09-16T19:02:40.532586Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"665a19c3dfaf61c4d1fa991df29ddf21","sha1":"a5b5f4d0aa16c12e404ab7e675cc8cb57e338e6d","sha256":"b061b766036d7ab044ed7274da463d7bf105470976009af797d219eab1232917","sha512":"b3834915f0f2c942f2ee638dd50dc82d87ed47f4fb25011a0dce329fe15848bd504af998631e3ff1d777616d6bdb39f033418b8d7997358c5f132d42e6906c77","ssdeep":"384:yt+tXuK+StNCtNJTUT0WGJp/fqfstjoNfhqffbiQR8xCTDVDx:N+AwRE0WS/fVoNfhqfjf8x6T","tlshash":"5252096bbac4483a87c86acc5d9bbc0958dd1407fe88cec9a8d69f4c02ff4c72746156","size":13653,"data":"","first_seen":"2026-09-16T19:02:40.533204Z","last_seen":"2026-09-16T19:02:40.533204Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e63984957c82aeb4edfe9c016959bad","sha1":"ab9e8bb49f8eb458e90a942e1d7e77c9ed8b1c90","sha256":"ca23e94bcdbd075324976c12a260082302e7b09dde0fd25d3b7b7709a9a7b5c6","sha512":"1764d76dc4b7800c3c146697ad3340635e58d3be972b660b4cbb5b75f7d861f65ee45837f18e5f2db4bdf81a0e4f6940a833d44b8dc796afbc7c30824581227f","ssdeep":"","tlshash":"d251ab7aa442f43a12310ce9f77b2316707636d87906a360e02e789c385dc23d627bcd","size":2656,"data":"","first_seen":"2026-05-25T17:50:02.538897Z","last_seen":"2026-09-16T22:17:20.492425Z","times_seen":10085,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d43b3e79081c2d1cc4669e7bf712464d","sha1":"e7a864cf22a98463d6b7bc6897dd61a568762d07","sha256":"12119301eae947625dfec4677c8575137b7c3726567fa3c2f802c31c0fc0e236","sha512":"e5a8db7ea9315bea683415d397c3c4d583ad8383d7006f67ace889def38b3465f6e212964859789f0d70170a1a6adae026fca95c10d4d47f415aac656512ea05","ssdeep":"","tlshash":"02b0223ba8a00028b83a88c0220a238038300002ac0ae300e02c200c2228f0300228c2","size":125,"data":"","first_seen":"2026-05-25T17:50:02.540973Z","last_seen":"2026-09-16T22:17:20.493389Z","times_seen":10085,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e.saga.so/static/array.js","fqdn":"e.saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"3.174.2.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f974928540e8e0a667c2b7bd9cd4799","sha1":"fea6d5585cece0c06a494e11f0935b09dc389290","sha256":"16e32edc860600d69aa31251cbeab25c7089816613d6a250b33183fc1b5702a0","sha512":"55712b1c9f771a1afd601ef9ce8c518d67e1a4081caa5ba84f163ca89e5246965853bee8b38df7c0411c767d2ececa49f80148c55cddda6b8df6d5ece6c084c2","ssdeep":"6144:Smr1kwoY3bARK4G6P38AEKV318WT0EfFja0R2aVHM:/1Fov3P383KVOEfI","tlshash":"b864b896f7a6d03207f698e5d0334523e72d3a09314ac06cf5af5cca394d68a6276f39","size":311410,"data":"","first_seen":"2026-09-16T19:02:40.500078Z","last_seen":"2026-09-16T19:02:40.500078Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e.saga.so/array/phc_X8oFnLQuwpz4SDQQmOyZohDgfJ7PzOhDdkQe26oLp27/config.js","fqdn":"e.saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"3.174.2.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"858f4cf20e80a60ea6dc2dd51c1ecabd","sha1":"15339153ebf2adbb65c1d05ee4ecf045653714ea","sha256":"443bf8538afc9763ae0de2f91da7c56dfb45e43cdc20e3ef944df6a2e08aaf3d","sha512":"5605ceade4da3f47fd4c4123ac03ccd47d68c212793f8f70d8e86c6fee06551d7b8dc6f2b18a83da3bb8475e88b63d899cc297bdb3ca0343e9ffd56c2cf68bfb","ssdeep":"","tlshash":"a0019c4dba90007984826354b7d7254b9fbb01273214251cf8d849013aef8cf8653b83","size":742,"data":"","first_seen":"2026-09-16T18:55:25.447151Z","last_seen":"2026-09-16T19:02:40.518691Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.112/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.192.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"af853e723b5e4a93a3c0dbe5eb7f18ed","sha1":"a759e1598b38242d096284ac1dcc2f9d64fc86a0","sha256":"22c974a55edf05a5149649d3ce2c14f1755b0df37f94aeea087178dffc4d911e","sha512":"b760f7beb247510c90e6e2e8a75d4a4bd5ab72dd7667b697649cc29fd2e6ceacc67fd314dbb1270a2f1e257e67aa5e485a4f5e12fa78649089e1d791387d189f","ssdeep":"12288:TUBG36ZNyED69/oykyexHrC+HTpfESz/Dm6M6QzK8oxGHMfAG+y4Byu83ciyV2kg:UN/D6q5HrC+HTpfJ/7cvSlWGbP","tlshash":"39156cc672d6f43585d685a5a07b0203b33e169db80d868cf03eadcc2a9d545b2b7fb4","size":930981,"data":"","first_seen":"2026-09-14T18:38:17.375096Z","last_seen":"2026-09-17T00:01:10.094505Z","times_seen":213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e.saga.so/static/1.433.3/surveys.js","fqdn":"e.saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"3.174.2.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c132fedb7bbebf06dfb04291b2ee0de","sha1":"c4e7dffdc8bd62e3b28330079aa1aa8210630fde","sha256":"9719b92698fc9da98e2054c27e8c540db6d375791d68c686d48f1fb8584886a9","sha512":"3b85d1f89acb96bb1ea2025c41facb3381ebec56d0d539036a6038cf983ac7bdb68b85b5d2a6cb0dff9885e6eb8995a1001914c00d3a1f2fa544e7d8ac8ddac4","ssdeep":"1536:S5qVEiGsHh4xkNFIhHDCCNC4DscAOWnLWiitDQa0bhx8VwbHkeN:08Ei//CDCCo810bEVwbki","tlshash":"3aa35b95f741f06942fb84a950bb4853e33c3a06fa4d8858b12b4cd83cd6589a39ff79","size":103956,"data":"","first_seen":"2026-09-10T16:33:32.701534Z","last_seen":"2026-09-16T22:29:33.460039Z","times_seen":677,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/js_opt/modules/utils/vuid.min.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.192.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"83583a4061ddc27e8b6ee0dc269519cd","sha1":"8b1c0acc28729208f640473eb5d8fb82c4ba3e15","sha256":"c051b8b5eb2a0aef699780f15a449491868faa6f8b39b684b5ae8f64f345b94a","sha512":"3652ab4345c138245677f415607e6447358dc064b8b3ad7820f34bf225a0d70b0820afd87e5d2235919afc703248da54f126df8f793dfda529d1fa336fba22c3","ssdeep":"","tlshash":"55318449b1e270b743e7029505ab245ab2f49e527cbf24049802f5e038357b2de7fe35","size":1862,"data":"","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-09-16T22:17:20.482654Z","times_seen":42461,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r.wdfl.co/rw.js","fqdn":"r.wdfl.co","domain":"wdfl.co","tld":"co"},"ip":{"addr":"65.9.46.44","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"06d623224879b6f691d4f44dcb10efee","sha1":"7f03892a26c216b8238932e57fff8b6cb4520cd0","sha256":"1afb62188dd85ef871df7d22b7727324c3b3333d33accbe51bd9f023b372fff8","sha512":"4685f218dc5087b2c04788211d7ca885c665e4e627c21682d79b1ccde8556f7b86c0a74a4e2d966d620972aa1e1d0c949084393d800dc01225328cd3ef937dc7","ssdeep":"192:fH9rZDzJ75AI4L7SOSVuX3825vcsMOIFEYR0C1GyA07vYY2sZ8WJT/RkCVSP:fNZzJ7eIyOOSGHvcjhFEC0C1GyA07zZU","tlshash":"f63296d170dba8b207d5045a55be1317f3990cb6393c8498f5287cee3e59d83823eba9","size":11460,"data":"","first_seen":"2026-09-15T09:04:29.057326Z","last_seen":"2026-09-16T23:04:02.987949Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.112/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.192.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e9d51dfcd7031b0908ac6e9f71fe308","sha1":"6828f08cd120cf2df3f56d4ad767e844afb84dea","sha256":"da9ca01a7bea9251bb772026eb8c5986c54a2fe30117c5384ea1fc3f824a813f","sha512":"5484276a474c51b3a9db07ca937c29e2c4158ba75eec3a829868085af668abd9d24c8112e4fe2410cdcbfa1c427563fb356d2f41eb39283c64623e1d87c48b46","ssdeep":"6144:2xrQb8XM5U5dAbYwlkclS4KGwNGRDc+FiTVQlPi1:2x/85ucsG2GmgBW","tlshash":"6864f7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","size":327675,"data":"","first_seen":"2026-09-14T18:38:17.348998Z","last_seen":"2026-09-17T00:01:10.141881Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"saga.so/_astro/logo-caltech.JDkLJebD.svg","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.139Z","timestamp":1789585311139,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /_astro/logo-caltech.JDkLJebD.svg HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"327507f66269596d4f2e7f5b015e6a40-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M2NSHHDH979S0C1B8RTN95BS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3020,"size_decoded":1819,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d2e7aae96be2c87e782748f082c38069","sha1":"612c0c06bcbda52c248ddd35b7d1225187372963","sha256":"54cabf78cca067fd742aa52fafc8f530a64a8903ca90d0847957c07d6d014186","sha512":"df5345b90f5637938813bf0d86c810e829588367686af05751973b1aaf9097125f6ef0ff8447062a74f1a3d689fdf72029713653b3a80a8825dd1cae95c183e1","ssdeep":"","tlshash":"e85163d8b3c8f2f4b902e394d5165826b56b24faf957d79cc355be88da2206c4f1c481","first_seen":"2026-09-16T18:55:25.444335Z","last_seen":"2026-09-16T19:02:40.484922Z","times_seen":2,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-16T19:01:50.542Z","timestamp":1789585310542,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 15884\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit; ttl=31520116\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Wed, 16 Sep 2026 19:01:50 GMT\r\netag: \"780605a0327039649149d6c36d036119-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M2NSHGX3G2B6MKH5ZXG98QWQ\r\ncontent-length: 38639\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Rewardful","description":"Rewardful is a way for SaaS companies to setup affiliate and referral programs with Stripe.","website":"https://www.getrewardful.com/","common_platform_enumeration":"","icon":"Rewardful.svg","categories":["Affiliate programs"]},{"name":"Clickbank","description":"","website":"https://www.clickbank.com/","common_platform_enumeration":"","icon":"Clickbank.svg","categories":["Affiliate programs"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":212966,"size_decoded":39107,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"a62040bd9fb1ede824109a82bbcbe713","sha1":"fbd8ba382c93e9a1d959ddb8901b51f2ed491e6f","sha256":"743723759dc0c43b092eccc0aecf2989bba73690737a9db00686f10da01d09dc","sha512":"6523b3e33a90da6fce4e10dd9d2b36f3ce1da48aa475a38b93e86b9124ba718b502cb3dcb90be498acf6517d307168f44893c8c703395feeea32ad52d892280f","ssdeep":"6144:IeyK2P4RZf4pCNDNNj0hj/HpUVBvEnmHZwo25JiqJ7KSccSGEzyMJ7O5L:0bL","tlshash":"cc242ca47234593f2d2311b9a7a5f60ca315a282ce1399d8f95dd0211fcaef1ce6f394","first_seen":"2026-09-16T18:55:25.500581Z","last_seen":"2026-09-16T19:02:40.485598Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":19,"connect":24,"send":0,"wait":24,"receive":41,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vod-adaptive-ak.vimeocdn.com/exp=1789588911~acl=%2F949b47e9-9bec-4756-a347-ecc0ec1a64a5%2Fpsid%3D688bb8966f077a9c61ce091e2ce2c7527791359c1789585311%2F%2A~hmac=545ab22d4c62e7fa4f88deb279d799acbf91ca3f3a339dc866bf2d15f46591fb/949b47e9-9bec-4756-a347-ecc0ec1a64a5/psid=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311/v2/range/prot/cmFuZ2U9MTE0NzA2MC0yMjUyNzM3/avf/12e04dda-199f-490b-b2ed-5a0a76d3c1d0.mp4?pathsig=8c953e4f~M6R_EmGz__xxvLetaXACrxPhirL32Zl6TmQE-gQLv4k\u0026r=dXMtZWFzdDE%3D\u0026range=1147060-2252737","fqdn":"vod-adaptive-ak.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"23.33.119.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:53.120Z","timestamp":1789585313120,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vod-adaptive-ak.vimeocdn.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:42:10 GMT","end":"Sun, 25 Oct 2026 08:42:09 GMT"},"fingerprint":{"sha1":"41:4A:14:24:63:A8:41:24:2E:80:CA:20:90:D3:DD:EE:DF:46:6B:21","sha256":"13:66:FC:DA:A3:66:F9:A9:F2:C7:F1:1E:B2:BD:3C:BD:78:C7:A8:57:92:32:B8:54:42:08:AD:C4:A1:77:93:93"}}},"request":{"raw":"GET /exp=1789588911~acl=%2F949b47e9-9bec-4756-a347-ecc0ec1a64a5%2Fpsid%3D688bb8966f077a9c61ce091e2ce2c7527791359c1789585311%2F%2A~hmac=545ab22d4c62e7fa4f88deb279d799acbf91ca3f3a339dc866bf2d15f46591fb/949b47e9-9bec-4756-a347-ecc0ec1a64a5/psid=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311/v2/range/prot/cmFuZ2U9MTE0NzA2MC0yMjUyNzM3/avf/12e04dda-199f-490b-b2ed-5a0a76d3c1d0.mp4?pathsig=8c953e4f~M6R_EmGz__xxvLetaXACrxPhirL32Zl6TmQE-gQLv4k\u0026r=dXMtZWFzdDE%3D\u0026range=1147060-2252737 HTTP/1.1\r\nHost: vod-adaptive-ak.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-length: 1105678\r\nlast-modified: Tue, 12 Nov 2024 16:00:42 GMT\r\nserver: parcel\r\norigin-retrieved-hour: 1733148000\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nx-vim-cachebc: ,CW:m,TD2:m\r\ndate: Wed, 16 Sep 2026 19:01:53 GMT\r\nakamai-request-bc: [a=23.33.119.135,b=41930019,c=g,n=NO__OSLO,o=20940],[c=p,n=NO__OSLO,o=20940]\r\nakamai-mon-iucid-del: 1594261\r\ncontent-type: video/mp4\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nakamai-grn: 0.87772117.1789585313.27fcd23\r\naccess-control-expose-headers: Akamai-GRN, Akamai-Request-BC\r\naccess-control-allow-headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1105678,"size_decoded":1106468,"mime_type":"video/mp4","magic":"data","md5":"2ee3ac9493e871d023a64f1de63c477c","sha1":"540d9661ea4ccd507581f4dec3c97b28d45a5900","sha256":"e5bf65dedf31287cd9eaceec6415c2a98f63f2d62f0bd2c83f6edb603fa6c1da","sha512":"a205aa2aa5873e41731e01aaf152eb12b8f4f7ea5909902ca1e92cd9267a99a23d358c8d2ad087e12113922a979de30d5fb2a2f599d58356e86f0441c7e7944a","ssdeep":"24576:jkYB5BZ5OSUlxIglwA2Uj2TTALvhWksv281hQh5wnVTCxF:rB5BZgsglwRUKTcj4hwhGn1CxF","tlshash":"ff2523901bd92d1add3c58338e120906afacc1a18ea90bdf5bad7781bc7dfdc45b8512","first_seen":"2026-09-16T18:55:25.476859Z","last_seen":"2026-09-16T19:02:40.48617Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vod-adaptive-ak.vimeocdn.com/exp=1789588911~acl=%2F949b47e9-9bec-4756-a347-ecc0ec1a64a5%2Fpsid%3D688bb8966f077a9c61ce091e2ce2c7527791359c1789585311%2F%2A~hmac=545ab22d4c62e7fa4f88deb279d799acbf91ca3f3a339dc866bf2d15f46591fb/949b47e9-9bec-4756-a347-ecc0ec1a64a5/psid=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311/v2/range/prot/cmFuZ2U9Mjc3OTQ1Ni0zMzI2MzA5/avf/12e04dda-199f-490b-b2ed-5a0a76d3c1d0.mp4?pathsig=8c953e4f~yOsvkYSVnBlmrvqNNZJydKKjAULxnHxOMNwYG5KKZlk\u0026r=dXMtZWFzdDE%3D\u0026range=2779456-3326309","fqdn":"vod-adaptive-ak.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"23.33.119.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:53.205Z","timestamp":1789585313205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vod-adaptive-ak.vimeocdn.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:42:10 GMT","end":"Sun, 25 Oct 2026 08:42:09 GMT"},"fingerprint":{"sha1":"41:4A:14:24:63:A8:41:24:2E:80:CA:20:90:D3:DD:EE:DF:46:6B:21","sha256":"13:66:FC:DA:A3:66:F9:A9:F2:C7:F1:1E:B2:BD:3C:BD:78:C7:A8:57:92:32:B8:54:42:08:AD:C4:A1:77:93:93"}}},"request":{"raw":"GET /exp=1789588911~acl=%2F949b47e9-9bec-4756-a347-ecc0ec1a64a5%2Fpsid%3D688bb8966f077a9c61ce091e2ce2c7527791359c1789585311%2F%2A~hmac=545ab22d4c62e7fa4f88deb279d799acbf91ca3f3a339dc866bf2d15f46591fb/949b47e9-9bec-4756-a347-ecc0ec1a64a5/psid=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311/v2/range/prot/cmFuZ2U9Mjc3OTQ1Ni0zMzI2MzA5/avf/12e04dda-199f-490b-b2ed-5a0a76d3c1d0.mp4?pathsig=8c953e4f~yOsvkYSVnBlmrvqNNZJydKKjAULxnHxOMNwYG5KKZlk\u0026r=dXMtZWFzdDE%3D\u0026range=2779456-3326309 HTTP/1.1\r\nHost: vod-adaptive-ak.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-length: 546854\r\nlast-modified: Tue, 12 Nov 2024 16:00:42 GMT\r\nserver: parcel\r\norigin-retrieved-hour: 1733148000\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nx-vim-cachebc: ,CW:m,TD2:m\r\ndate: Wed, 16 Sep 2026 19:01:53 GMT\r\nakamai-request-bc: [a=23.33.119.135,b=41930025,c=g,n=NO__OSLO,o=20940],[c=p,n=NO__OSLO,o=20940]\r\nakamai-mon-iucid-del: 1594261\r\ncontent-type: video/mp4\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nakamai-grn: 0.87772117.1789585313.27fcd29\r\naccess-control-expose-headers: Akamai-GRN, Akamai-Request-BC\r\naccess-control-allow-headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":546854,"size_decoded":547643,"mime_type":"video/mp4","magic":"data","md5":"e404626451e19bf3856eadb7f1c87a7b","sha1":"713a69712f00f5d778af875dc149cb669f325867","sha256":"33ffba8ecb3512f8c990b7d420125672198ee4a7a199d9c8182bafb9baa0ad87","sha512":"e485e24efef4e9f4591ec56c5245e815ef1648a95b271cb646fcd7b2853aa95db37ab3a071799881d8829e8fed2bbd891646df17243f7e80b05b0e32f47bc396","ssdeep":"12288:5zoE8+/RkYlobKqxhVvsK7soUve8OMWLqgouo7YHO6Oc1g:5zo9+/pKg+UvsdOgoX7y0cW","tlshash":"5fc4230ad3f27e53dc7c453f49d68ba0af2ae9600d168beb662922034e1e3dd5e553d0","first_seen":"2026-09-16T18:55:25.497976Z","last_seen":"2026-09-16T19:02:40.48675Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vimeo.com/flarepoint/Hqb0y2qg","fqdn":"vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:02:23.528Z","timestamp":1789585343528,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 12:27:17 GMT","end":"Wed, 02 Dec 2026 13:26:58 GMT"},"fingerprint":{"sha1":"22:90:8C:24:09:75:D0:BD:92:C0:C4:CA:0A:B5:7F:01:F3:21:F3:B6","sha256":"0A:3E:75:E9:A0:0F:D6:CC:C4:12:38:DA:F7:82:0C:80:CB:BA:10:C5:03:5C:EF:D1:C9:B6:90:FE:ED:F5:4B:DC"}}},"request":{"raw":"OPTIONS /flarepoint/Hqb0y2qg HTTP/1.1\r\nHost: vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-pico-auth\r\nReferer: https://player.vimeo.com/\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:02:23 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\naccess-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 600\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://player.vimeo.com\r\naccess-control-allow-headers: content-type,x-pico-auth\r\nx-envoy-upstream-service-time: 3\r\nvia: 1.1 google, 1.1 varnish\r\naccept-ranges: bytes\r\nx-served-by: cache-bma-essb1270039-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1789585344.544186,VS0,VE147\r\nvary: Origin, Accept-Encoding,x-http-method-override\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\nset-cookie: __cf_bm=VrqiTzQQnm7M9T_KpA4blGLL4RIFs6HTP4ogs6wZY30-1789585343.5333178-1.0.1.1-u131qK96bgn0XYugqp8BspMYJjGGb7u9Ve58gIPNk2JdIsdC6kguVtaL8.YN9h9ZBsF2k1YEFwLSe.Ug5Ajybl43nqapVLEaEzTvmDCr2dsY7I8.4BXE2H_qOWBR0ok8; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Wed, 16 Sep 2026 19:32:23 GMT\r\ncf-ray: a3c2200d1a8da41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"VrqiTzQQnm7M9T_KpA4blGLL4RIFs6HTP4ogs6wZY30-1789585343.5333178-1.0.1.1-u131qK96bgn0XYugqp8BspMYJjGGb7u9Ve58gIPNk2JdIsdC6kguVtaL8.YN9h9ZBsF2k1YEFwLSe.Ug5Ajybl43nqapVLEaEzTvmDCr2dsY7I8.4BXE2H_qOWBR0ok8","quoted":false,"path":"/","domain":"vimeo.com","expires":"2026-09-16T19:32:23Z","raw_expires":"Wed, 16 Sep 2026 19:32:23 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=VrqiTzQQnm7M9T_KpA4blGLL4RIFs6HTP4ogs6wZY30-1789585343.5333178-1.0.1.1-u131qK96bgn0XYugqp8BspMYJjGGb7u9Ve58gIPNk2JdIsdC6kguVtaL8.YN9h9ZBsF2k1YEFwLSe.Ug5Ajybl43nqapVLEaEzTvmDCr2dsY7I8.4BXE2H_qOWBR0ok8; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Wed, 16 Sep 2026 19:32:23 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2,"size_decoded":1091,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-09-16T23:53:12.327051Z","times_seen":381489,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/_astro/tab-notes.DtmNbxzX.svg","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.119Z","timestamp":1789585311119,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /_astro/tab-notes.DtmNbxzX.svg HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-type: image/svg+xml\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"d6cd5105b9a79cb4f047e8fd03e8da71-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M2NSHHCVR3CMHFTW8JFNXBCA\r\ncontent-length: 888\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":888,"size_decoded":1307,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"94d81f6a44450e8384021859295e7017","sha1":"d6733a0acc985c887917b00bfd09896a491eae2e","sha256":"4c9979c8b00030bb855f804d839754669279080b77dfd67a54875a016d9917d1","sha512":"3f91ddbdf12dabb2b7a9da2e2d0e8761a100f4d0cc769e8efc9e08c8eaf4f07f4f33da698da5b7f77fb61e47897753a02dacc4bd487e90eaa4f397e5afb4e09c","ssdeep":"","tlshash":"c61148591368cc2cb4228f30e345bf35212ba1631a55b68c8d7b24f1472166e7d7bde4","first_seen":"2026-09-16T18:55:25.504789Z","last_seen":"2026-09-16T19:02:40.487892Z","times_seen":2,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/_astro/tab-ai.B13RJz7h.svg","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.123Z","timestamp":1789585311123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /_astro/tab-ai.B13RJz7h.svg HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-type: image/svg+xml\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"5a6671cf630a41fe63b0bfd0144c44f8-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M2NSHHCYNJWFB966PSYDFQBX\r\ncontent-length: 395\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":395,"size_decoded":814,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a10222785a3e4b224ee80863401eb019","sha1":"9f8f28e6d74fc88beb8e8da24b27961341176dfd","sha256":"59feaa1717ebfe337a28ff401405ceabd1beb384c33514476b0ca3382681b7ec","sha512":"53d7dd731b4e2db2fe2f0f5e8291556eb951956d59c6295a6ce7dc86ead694758338a8819c5222156127a708b8f6f6cf8eef6e2870f6de0761ddc48a3b0d0f25","ssdeep":"","tlshash":"c7e068b5136cc11cf6241b40e754b29856b9b77cab4d9809bbc57317283c2ab6da73cc","first_seen":"2026-09-16T18:55:25.463818Z","last_seen":"2026-09-16T19:02:40.488688Z","times_seen":2,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/_astro/logo-fivetran.CZk7UXNT.png","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.140Z","timestamp":1789585311140,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /_astro/logo-fivetran.CZk7UXNT.png HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-type: image/png\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"743b5dd44f09733688514fe89a9b7d7a-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M2NSHHDH4X07BXGQCS2W3451\r\ncontent-length: 1846\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":1846,"size_decoded":2262,"mime_type":"image/png","magic":"PNG image data, 101 x 29, 8-bit/color RGBA, non-interlaced","md5":"3654c834c241040c299d1156e38a05af","sha1":"f4c37a20eb25549e4ef2da0415cbf75687c417e4","sha256":"6f65b47765b0b93a6a2ca485c5f5ceee354f48f57218b57f3149b7214ed5dd47","sha512":"c864c043b6bd8980f364c2ae064776940e696e0a497dd9df5a354bd04a9667a11b3dc88d16c0363f952c7a12e893e88b6ce750bcde5276cab4f87ef002cf17ed","ssdeep":"","tlshash":"cd3109f06bc4a08a0cdb50e0977760c6f61fee659e232e7e5fbd2d1884789247763220","first_seen":"2026-09-16T18:55:25.468511Z","last_seen":"2026-09-16T19:02:40.489309Z","times_seen":2,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/js_opt/modules/utils/vuid.min.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.192.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:52.360Z","timestamp":1789585312360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Jun 2026 08:20:06 GMT","end":"Mon, 28 Dec 2026 07:20:06 GMT"},"fingerprint":{"sha1":"9D:ED:76:FD:60:04:EF:FE:92:4B:1F:3B:1D:DE:3C:0E:77:9E:BD:98","sha256":"AD:B2:D2:F7:0E:85:41:A3:BE:F2:5B:0D:16:F5:63:31:78:76:24:17:2E:F2:B7:E0:B7:84:A9:2D:AA:4D:5C:2B"}}},"request":{"raw":"GET /js_opt/modules/utils/vuid.min.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\ntiming-allow-origin: *\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 16 Sep 2026 19:01:52 GMT\r\nage: 163965\r\nx-served-by: cache-iad-kcgs7200052-IAD, cache-bma-essb1270056-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 13802, 6607\r\nx-timer: S1789585312.366622,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\ncontent-length: 985\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1862,"size_decoded":1595,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1839)","md5":"83583a4061ddc27e8b6ee0dc269519cd","sha1":"8b1c0acc28729208f640473eb5d8fb82c4ba3e15","sha256":"c051b8b5eb2a0aef699780f15a449491868faa6f8b39b684b5ae8f64f345b94a","sha512":"3652ab4345c138245677f415607e6447358dc064b8b3ad7820f34bf225a0d70b0820afd87e5d2235919afc703248da54f126df8f793dfda529d1fa336fba22c3","ssdeep":"","tlshash":"55318449b1e270b743e7029505ab245ab2f49e527cbf24049802f5e038357b2de7fe35","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-09-16T22:17:20.482654Z","times_seen":42461,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vod-adaptive-ak.vimeocdn.com/exp=1789588911~acl=%2F949b47e9-9bec-4756-a347-ecc0ec1a64a5%2Fpsid%3D688bb8966f077a9c61ce091e2ce2c7527791359c1789585311%2F%2A~hmac=545ab22d4c62e7fa4f88deb279d799acbf91ca3f3a339dc866bf2d15f46591fb/949b47e9-9bec-4756-a347-ecc0ec1a64a5/psid=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311/v2/playlist/av/primary/prot/cXNyPTE/playlist.json?omit=av1-hevc\u0026pathsig=8c953e4f~Kl4QaYquD3LAAH_Op1PHeuCzeJ7er9LB4wuJBfQkenc\u0026qsr=1\u0026r=dXM%3D\u0026rh=3HXVtd","fqdn":"vod-adaptive-ak.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"23.33.119.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:52.362Z","timestamp":1789585312362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vod-adaptive-ak.vimeocdn.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:42:10 GMT","end":"Sun, 25 Oct 2026 08:42:09 GMT"},"fingerprint":{"sha1":"41:4A:14:24:63:A8:41:24:2E:80:CA:20:90:D3:DD:EE:DF:46:6B:21","sha256":"13:66:FC:DA:A3:66:F9:A9:F2:C7:F1:1E:B2:BD:3C:BD:78:C7:A8:57:92:32:B8:54:42:08:AD:C4:A1:77:93:93"}}},"request":{"raw":"GET /exp=1789588911~acl=%2F949b47e9-9bec-4756-a347-ecc0ec1a64a5%2Fpsid%3D688bb8966f077a9c61ce091e2ce2c7527791359c1789585311%2F%2A~hmac=545ab22d4c62e7fa4f88deb279d799acbf91ca3f3a339dc866bf2d15f46591fb/949b47e9-9bec-4756-a347-ecc0ec1a64a5/psid=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311/v2/playlist/av/primary/prot/cXNyPTE/playlist.json?omit=av1-hevc\u0026pathsig=8c953e4f~Kl4QaYquD3LAAH_Op1PHeuCzeJ7er9LB4wuJBfQkenc\u0026qsr=1\u0026r=dXM%3D\u0026rh=3HXVtd HTTP/1.1\r\nHost: vod-adaptive-ak.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 4731\r\ncontent-type: application/json\r\norigin-retrieved-hour: 1763020800\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\ndate: Wed, 16 Sep 2026 19:01:52 GMT\r\nvary: Accept-Encoding\r\nakamai-request-bc: [a=23.33.119.135,b=41929994,c=g,n=NO__OSLO,o=20940],[c=p,n=NO__OSLO,o=20940]\r\nakamai-mon-iucid-del: 1594261\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nakamai-grn: 0.87772117.1789585312.27fcd0a\r\naccess-control-expose-headers: Akamai-GRN, Akamai-Request-BC\r\naccess-control-allow-headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18023,"size_decoded":5482,"mime_type":"application/json","magic":"JSON text data","md5":"891f5bfc336becd7e19537498642b2eb","sha1":"f0be467c4e9965d000294191deb42fad93d266f5","sha256":"142042ae581ce3d965188b691d4732912dafb09ca56ac454cab96b6fe1d6fbca","sha512":"8b474e823a9f65439dedd730a05bc3dad4d8f7cfb46d359e74bc5a444ae5e3b297b5f295faaec9de2fadd10b64440b241bfdab95dcf1b0a452fc445ffa3fda94","ssdeep":"384:I8ZoLW3ddxdLsLxZ7OG0/hmPD5B2JYp/3:pMW3dxHG00PD5Byg3","tlshash":"bb82a733d20ab45359d84d47bdbe7b280c2a78c3f50ace48bbc91eac944d9191f2d597","first_seen":"2026-09-16T18:55:25.525426Z","last_seen":"2026-09-16T19:02:40.490568Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":4,"connect":2,"send":0,"wait":24,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/_astro/checkmark.BGkLNgMv.svg","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.125Z","timestamp":1789585311125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /_astro/checkmark.BGkLNgMv.svg HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-type: image/svg+xml\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"63421d899f28adab3e53e0f21ac3117e-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M2NSHHD153NNDKNCKBNT7FQ8\r\ncontent-length: 189\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":189,"size_decoded":608,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8351062c4c886d6557639a881495ad80","sha1":"62646d6e84edd92bacf3ed8f895f53c12316747a","sha256":"8bd5a8b6a8eb18d0d86dc98b51feb143f14453c12a46ef43db586e2c571c92b5","sha512":"559b76b7d1354f9c089eda4d183e9a90785adc47d5485146093088c6c541d612cec53ce0576030a38a28113b64b4b225fc9e01b72b939e68746331448aee74fb","ssdeep":"","tlshash":"28c022a5410caa34a2644300e328b02424ba25d2a2582184e9902530aa0d8eb6c3f5ec","first_seen":"2026-09-16T18:55:25.484882Z","last_seen":"2026-09-16T19:02:40.491139Z","times_seen":2,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.112/css/player.css","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.192.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:51.807Z","timestamp":1789585311807,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Jun 2026 08:20:06 GMT","end":"Mon, 28 Dec 2026 07:20:06 GMT"},"fingerprint":{"sha1":"9D:ED:76:FD:60:04:EF:FE:92:4B:1F:3B:1D:DE:3C:0E:77:9E:BD:98","sha256":"AD:B2:D2:F7:0E:85:41:A3:BE:F2:5B:0D:16:F5:63:31:78:76:24:17:2E:F2:B7:E0:B7:84:A9:2D:AA:4D:5C:2B"}}},"request":{"raw":"GET /p/4.46.112/css/player.css HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\nage: 174786\r\nx-served-by: cache-iad-kiad7000179-IAD, cache-bma-essb1270056-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 47, 37170\r\nx-timer: S1789585312.844031,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 24461\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":238281,"size_decoded":25023,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65489)","md5":"a2a9b64f5c57d985b4ddeb6b76130993","sha1":"01a1c6386a0cc63d014214befc05eef2e596881b","sha256":"f1d09e7df5e96fbdb9a719928c4d6c095865e4bc215bc864c58fd3753e1692ab","sha512":"8d8b4ad245379d3fcaf07c84634bae0a54cec727cc9cfd4112a2aa87095120821eaa63475783491bc1d1d1842d969f1cf1b62c7ab87c1859ee56caccc4e42e1f","ssdeep":"1536:h7dfqBcFdFgF7FW8RT8RX8X98z98pl98p4v5BencLCZspnq6kUu7BX1IhRGWdHHz:Uv5BOwnq6kUuXDlxc6Q","tlshash":"c434b2d516f6552b605e6ee2f4c31848fdac43dc97226f8af00e79cd89ca1a60dfd206","first_seen":"2026-09-14T18:38:17.364921Z","last_seen":"2026-09-17T00:01:09.952992Z","times_seen":223,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":10,"receive":2,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lensflare.vimeo.com/add/vimeo.play_video","fqdn":"lensflare.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"34.120.15.67","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:52.620Z","timestamp":1789585312620,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"POST /add/vimeo.play_video HTTP/1.1\r\nHost: lensflare.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Length: 4140\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nCookie: __cf_bm=uCcNeBdKIthObNgfi1qCq5Sf8FuM59tHNaqJLyNq840-1789585311.125691-1.0.1.1-hzVAa1Ihc7ww6NWJzmokIA01qsPrBQj2omEqsUr5xbPgxkQbtr5SIf.wA.A4WeQhJPEyGX9BOfAThcHQRgJmP7k0KvJk7FiGll30.MObOQid8rmJevO.0z25H3K9pESv; vuid=pl779178303.933827040; COOKIE_ID_PICOX_ID=3ae0c2fa-77c5-49c4-b208-927a7bb82965\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4140,"data":"[{\"eid\":\"e8d308af-980b-4a78-9522-28ebe31c5445\",\"ts_ms\":1789585312571,\"created_at\":1789585312571,\"event\":{\"name\":\"vimeo.play_video\",\"ts_ms\":1789585312569,\"version\":2,\"fields\":{\"session_segment_id\":1,\"segment_start_time\":0,\"log_end_time\":0,\"video_duration_ms\":46800}},\"global\":{\"name\":\"vimeo.web_global\",\"ts_ms\":1789585312569,\"version\":11,\"fields\":{\"user\":{\"subscription_type\":\"none\",\"is_mod\":false,\"session_id\":\"688bb8966f077a9c61ce091e2ce2c7527791359c1789585311\",\"teams\":[],\"user_id\":null,\"vuid\":\"pl779178303.933827040\",\"local_storage_id\":\"d0aff285-bcd4-420f-8763-5d9fff86242b\",\"flags\":[\"plays\",\"dnt\",\"autohide_controls\",\"preload_video\",\"qoe_survey_forced\",\"ai_widget\",\"ecdn_delta_updates\",\"disable_mms\",\"check_clip_skipping_forward\",\"disable_orion_standalone\",\"disable_picox_standalone\",\"picox_sampling\",\"orion_rollout_percentage\",\"heartbeat_cadence_policy\",\"picox_session_segment_id_ceiling\"],\"is_free_trial\":false,\"singular_session_id\":null},\"application\":{\"application\":\"vimeo\",\"vimeo_language\":\"en\",\"product\":\"vimeo-vod\",\"build_environment\":\"production\",\"version\":{\"full\":\"4.46.112\",\"major\":\"4\",\"minor\":\"46\",\"patch\":\"112\"}},\"platform\":{\"device_language\":\"en-US\",\"screen\":{\"dpi\":24,\"height\":1024,\"width\":1280,\"size\":\"1280 x 1024\"},\"network\":null,\"platform\":\"web\",\"singular_device_id\":null},\"organization_id\":null,\"owner_id\":null,\"session_replay_id\":null,\"workspace_id\":null}},\"tracker\":{},\"contexts\":{\"player_context\":{\"name\":\"player_context\",\"ts_ms\":1789585312570,\"version\":5,\"fields\":{\"player_session_id\":\"688bb8966f077a9c61ce091e2ce2c7527791359c1789585311\",\"total_video_duration\":46.8,\"video_timestamp\":0,\"player_location\":\"embed\",\"player_breakpoint\":\"md\",\"player_width\":1055,\"player_height\":593}},\"video_context\":{\"name\":\"video_context\",\"ts_ms\":1789585312570,\"version\":19,\"fields\":{\"video_id\":1028851046,\"title\":\"Introducing Saga 1.0 Website Preview\",\"video_privacy\":\"anybody\",\"video_embed_privacy\":\"public\",\"content_rating\":[\"6\"],\"duration\":47,\"resolution\":\"1920x1080\",\"video_height\":1080,\"video_width\":1920,\"orientation\":\"landscape\",\"is_auto_cc_enabled\":null,\"upload_method_api\":null,\"upload_method_api_id\":null,\"is_demo\":null,\"video_owner_id\":166541506,\"video_owner_account_type\":\"plus\",\"video_categories\":null,\"has_embed_available\":false,\"video_version_id\":962211217,\"embed_context\":\"embed.main\",\"is_drm_enabled\":false,\"is_intaractive\":false,\"language\":null,\"audio_track_lang\":null,\"audio_track_provenance\":null,\"audio_track_type\":null,\"text_track_lang\":null,\"text_track_provenance\":null,\"text_track_type\":null,\"streaming_quality\":\"1080p\",\"highest_available_streaming_quality\":\"1080p\"}},\"web_context\":{\"name\":\"web_context\",\"ts_ms\":1789585312570,\"version\":25,\"fields\":{\"location\":\"player\",\"page_name\":\"embedded_page\",\"referrer\":\"https://saga.so/\",\"copy\":null,\"path\":null,\"referrer_page_name\":null,\"target\":null,\"target_path\":null}},\"team_context\":{\"name\":\"team_context\",\"ts_ms\":1789585312570,\"version\":5,\"fields\":{\"team_owner_id\":0,\"team_subscription_type\":\"none\",\"team_role\":\"viewer\",\"team_id\":0,\"joined_team_at\":null,\"resource_permission_level\":null,\"team_size\":null}},\"action_context\":{\"name\":\"action_context\",\"ts_ms\":1789585312570,\"version\":5,\"fields\":{\"feature\":\"player\",\"action_type\":\"click\"}},\"product_analytics_context\":{\"name\":\"product_analytics_context\",\"ts_ms\":1789585312570,\"version\":171,\"fields\":{\"product\":\"viewer_experience\",\"feature\":\"player\",\"location\":\"player\",\"modal_name\":null,\"flow\":null,\"element\":null,\"copy\":null,\"device_type\":\"desktop\",\"is_user_facing_data\":null,\"entity_type\":null,\"cta_location_id\":null,\"scrolling_percentage\":null}},\"target_team_context\":{\"name\":\"target_team_context\",\"ts_ms\":1789585312570,\"version\":6,\"fields\":{\"is_team_member\":false,\"team_owner_id\":0,\"team_subscription_type\":\"none\",\"team_role\":\"viewer\",\"team_id\":0,\"team_size\":null,\"resource_permission_level\":null,\"joined_team_at\":null}},\"user_facing_video_analytics_context\":{\"name\":\"user_facing_video_analytics_context\",\"ts_ms\":1789585312571,\"version\":4,\"fields\":{\"session_ts\":1789585311,\"session_id\":2714417788,\"lead_id\":null,\"content_type\":null,\"is_do_not_track\":false,\"playback_route\":\"player_embed\",\"is_session_live\":null}}}}]"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://player.vimeo.com\r\ncontent-type: application/json\r\ndate: Wed, 16 Sep 2026 19:01:52 GMT\r\ncontent-length: 47\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T23:51:47.12966Z","times_seen":18504645,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/_astro/tab-tasks.D3CE8KZQ.svg","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.122Z","timestamp":1789585311122,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /_astro/tab-tasks.D3CE8KZQ.svg HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-type: image/svg+xml\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"46f116e4e322861c3ff6d418f09f143a-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M2NSHHCXKY55238AK82JSFAA\r\ncontent-length: 645\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":645,"size_decoded":1064,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"30ca52cfcd5e7735a618e45bb0378f39","sha1":"e83b79b357fd6daf14590bd6b355568d325e0508","sha256":"efb469b683627673d42a6f54a0ea333c27bf34ecfaed4b647994446a036ed62b","sha512":"8a9cbe3c0e167ee48c10812a21a6b0a74481f7ab0a8805f574d1a693c2112bb7f6599ee5234eeead9ae31e7a6e0f813891bf58011cbf3106c62eebc7247b43ce","ssdeep":"","tlshash":"e2f07d66571c0c2cf8288a28d700fe36717b1772b980e5ddc83a1171442127dad7f9d7","first_seen":"2026-09-16T18:55:25.578168Z","last_seen":"2026-09-16T19:02:40.492734Z","times_seen":2,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e.saga.so/flags/?v=2","fqdn":"e.saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"3.174.2.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.740Z","timestamp":1789585311740,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.saga.so","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 09 Jan 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"12:C2:DA:B7:DB:4F:69:B1:E3:6A:77:CA:F9:87:8C:15:4E:CD:B2:F6","sha256":"29:D4:23:4C:EE:A1:83:61:B8:14:B9:E0:BB:14:3F:DA:03:95:1C:D3:CD:F8:B9:2F:4E:1E:09:C7:F2:2C:2B:E4"}}},"request":{"raw":"POST /flags/?v=2 HTTP/1.1\r\nHost: e.saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: text/plain\r\nReferer: https://saga.so/\r\nContent-Length: 418\r\nOrigin: https://saga.so\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":623,"data":"\u001f‹\b\u0000\u0000\u0000\u0000\u0000\u0000\u0003•“KoÛ0\u0010„ÿ\u000b‘cdëáH±®1r(\u0002¤FS È… Èµ´ø(¹Š[\u0007ù縷¢HmöÐ\u001b9ß쀐f_\u0019Ù\u0011\fk™\u001b$ÿvkïÍÃ~\u003eºÓæËn¿×?Ÿí°ë\u000fŸšÏ§Ça§Æ=”µ}peî™Â@h$qTq\u003e/D.ºím\u0026ëJe¸é²m\r•RŠM£6 š*\u000eõÞÎ.°öõíš9ðÁ\u001a'BXdv…\u0006\tÅÄ=\u001cÀ{ð1ûJ¡\u0007IqüŒ¢é¹²Z I»ä\u001c\u0013\fñÙOÑ0\u0010¹Ð®×Aôb\u0015ìú£s°¢å7úHœ Á\b\r‘þ51“æÁÎ^Fbæi:C\u001a\u0014Î:‰¤ÐN`oÒÐ\u001aŠON2\u0002™Ø\u000bõ¯whÉåòsÎ'ä”Vƒ—\u0017²J›;/\u0012ò1-\u001fºdˆ\u000er\u001a\u0013:\u001d“ö\tùA¼·íŒ`\u001f†T\u000e%s¼¢äg\u0001‡ã…ø=\u0019\u0011d*\u0000}ÒÌÇ\u001f´\t»Ø£#tìýÂ_â\u000e ]ê[¬6UµªX\\\fB\r'k–Ê}}º[¬\n^PÂmZXŠ/–R—yYgù6+ê§bÛæE{S¬šªzfo¿\u0000£_uMÿ\u0003\u0000\u0000"}},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3c21f467d6cbc80-ARN\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://saga.so\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: x-posthog-rate-limit-warning\r\nx-envoy-upstream-service-time: 2\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 02e58bd7a9a3f2c207778470b70a5570.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P3\r\nx-amz-cf-id: 4nFgzcsNIwqYu4sDj2wkRshCO88sR7InZ_Nn1MWuFcP9NQzMOYl9PQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1990,"size_decoded":1195,"mime_type":"application/json","magic":"JSON text data","md5":"49511196657bd9092b1b18ca205f3578","sha1":"30222868fa1b22fab7171bd0d00403a2f7e5f4ae","sha256":"cadce7defe93fef8078c4d2201aa0e7df9b2180eca20af1077a51338424432ce","sha512":"3bc89806f5ab1d0447f3e6fa4bafc7f68fe25a7d7fa56583c6385aea082dd1932a41ff00d2198acd50a46a28ec168ebcecfc032a3c9acfdcf4fe930c45ea1b36","ssdeep":"","tlshash":"af4108396d24ec7b548ec3d05d9dfe06477e13372a669c944d8b863807a39f5761bc20","first_seen":"2026-09-16T19:02:40.493301Z","last_seen":"2026-09-16T19:02:40.493301Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"e.saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"e.saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vod-adaptive-ak.vimeocdn.com/exp=1789588911~acl=%2F949b47e9-9bec-4756-a347-ecc0ec1a64a5%2Fpsid%3D688bb8966f077a9c61ce091e2ce2c7527791359c1789585311%2F%2A~hmac=545ab22d4c62e7fa4f88deb279d799acbf91ca3f3a339dc866bf2d15f46591fb/949b47e9-9bec-4756-a347-ecc0ec1a64a5/psid=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311/v2/range/prot/cmFuZ2U9OTMzLTExNDcwNTk/avf/12e04dda-199f-490b-b2ed-5a0a76d3c1d0.mp4?pathsig=8c953e4f~JMqqy8anqG0imCyLpJ-XzZX0MHWUOvN_iPMrClnBfg0\u0026r=dXMtZWFzdDE%3D\u0026range=933-1147059","fqdn":"vod-adaptive-ak.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"23.33.119.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:52.495Z","timestamp":1789585312495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vod-adaptive-ak.vimeocdn.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:42:10 GMT","end":"Sun, 25 Oct 2026 08:42:09 GMT"},"fingerprint":{"sha1":"41:4A:14:24:63:A8:41:24:2E:80:CA:20:90:D3:DD:EE:DF:46:6B:21","sha256":"13:66:FC:DA:A3:66:F9:A9:F2:C7:F1:1E:B2:BD:3C:BD:78:C7:A8:57:92:32:B8:54:42:08:AD:C4:A1:77:93:93"}}},"request":{"raw":"GET /exp=1789588911~acl=%2F949b47e9-9bec-4756-a347-ecc0ec1a64a5%2Fpsid%3D688bb8966f077a9c61ce091e2ce2c7527791359c1789585311%2F%2A~hmac=545ab22d4c62e7fa4f88deb279d799acbf91ca3f3a339dc866bf2d15f46591fb/949b47e9-9bec-4756-a347-ecc0ec1a64a5/psid=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311/v2/range/prot/cmFuZ2U9OTMzLTExNDcwNTk/avf/12e04dda-199f-490b-b2ed-5a0a76d3c1d0.mp4?pathsig=8c953e4f~JMqqy8anqG0imCyLpJ-XzZX0MHWUOvN_iPMrClnBfg0\u0026r=dXMtZWFzdDE%3D\u0026range=933-1147059 HTTP/1.1\r\nHost: vod-adaptive-ak.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-length: 1146127\r\nlast-modified: Tue, 12 Nov 2024 16:00:42 GMT\r\nserver: parcel\r\norigin-retrieved-hour: 1733148000\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nx-vim-cachebc: ,PE:h\r\naka-c-hit: cache-hit\r\ndate: Wed, 16 Sep 2026 19:01:52 GMT\r\nakamai-request-bc: [a=23.33.119.135,b=41929999,c=g,n=NO__OSLO,o=20940],[c=p,n=NO__OSLO,o=20940]\r\nakamai-mon-iucid-del: 1594261\r\ncontent-type: video/mp4\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nakamai-grn: 0.87772117.1789585312.27fcd0f\r\naccess-control-expose-headers: Akamai-GRN, Akamai-Request-BC\r\naccess-control-allow-headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1146127,"size_decoded":1146933,"mime_type":"video/mp4","magic":"data","md5":"67d631c6628f2deb0a836b3b8ba44608","sha1":"70bb0c8b562ccb5a41897ebddc18a7e5fd8d2684","sha256":"69207a3e3a61e353a28b7352f597e30dbd033fb0e036f23637330ff52770daa9","sha512":"3eb7008b6cc03d7614aa977e336a1d4c13fc4db9745d8d6732bfb536ddedf0db2a9dbdb2385d7861fd088ef02e392d8c54a17467ad9a04423a6fc1ad79130725","ssdeep":"12288:cVuUSo9wIcgVs/+VQIfp056WDM55D/h2pXkW0XbHUtNiIE4vLa5BsAv3ifCQ8teC:cV8mPfcvYD6XIYtNRLa5ON6WlSwXa","tlshash":"072523058fd24c3edf7e9237e46a0b586d31e3514f7547c3633aea114c8a79c99922ca","first_seen":"2026-09-16T18:55:25.475281Z","last_seen":"2026-09-16T19:02:40.494407Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/saga-logo.svg","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.118Z","timestamp":1789585311118,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /saga-logo.svg HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"807b4c5fe5b1191677bb220826257d61-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M2NSHHCV1D9JVHSCRTBCTA69\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":8700,"size_decoded":2811,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c3e6622e5043f713adf9d2ddce57acaa","sha1":"ba2a7d68599d543843395ecd4b352bdc2ba78a6e","sha256":"3afbca7bc2714afe74daeabfdc0fc7e48e6ea57161b05e5f13ffc7e4b104c26f","sha512":"aa93cf1929e2479a3693d21c8dd841a2ded4e84ef93dce7cd9d5d9e9c8b56616799a16083333420f2b775393ad7c81b3c6d08bb478f71f0c62f118933cb05748","ssdeep":"96:ZBtlf6/njVxZ78/crFib5/crFibDayqrZnxUtQS4wXS4wPeJExNUkdhNUkd3c9dn:jPfOZ78tb5tbDuuBfCfPRxB32Vxzd","tlshash":"2c0272e112e553e0b505abf9dd0bf4ba2b6f28f53b5196a9c3a92c51e9620fc0c5ccc0","first_seen":"2026-09-16T18:55:25.502608Z","last_seen":"2026-09-16T19:02:40.494985Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vod-adaptive-ak.vimeocdn.com/exp=1789588911~acl=%2F949b47e9-9bec-4756-a347-ecc0ec1a64a5%2Fpsid%3D688bb8966f077a9c61ce091e2ce2c7527791359c1789585311%2F%2A~hmac=545ab22d4c62e7fa4f88deb279d799acbf91ca3f3a339dc866bf2d15f46591fb/949b47e9-9bec-4756-a347-ecc0ec1a64a5/psid=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311/v2/range/prot/cmFuZ2U9MjI1MjczOC0yNzc5NDU1/avf/12e04dda-199f-490b-b2ed-5a0a76d3c1d0.mp4?pathsig=8c953e4f~1JdMgaAdJoWJsPtyIgxfVeSjTCD78Jc1flGxxAyUbDg\u0026r=dXMtZWFzdDE%3D\u0026range=2252738-2779455","fqdn":"vod-adaptive-ak.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"23.33.119.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:53.158Z","timestamp":1789585313158,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vod-adaptive-ak.vimeocdn.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:42:10 GMT","end":"Sun, 25 Oct 2026 08:42:09 GMT"},"fingerprint":{"sha1":"41:4A:14:24:63:A8:41:24:2E:80:CA:20:90:D3:DD:EE:DF:46:6B:21","sha256":"13:66:FC:DA:A3:66:F9:A9:F2:C7:F1:1E:B2:BD:3C:BD:78:C7:A8:57:92:32:B8:54:42:08:AD:C4:A1:77:93:93"}}},"request":{"raw":"GET /exp=1789588911~acl=%2F949b47e9-9bec-4756-a347-ecc0ec1a64a5%2Fpsid%3D688bb8966f077a9c61ce091e2ce2c7527791359c1789585311%2F%2A~hmac=545ab22d4c62e7fa4f88deb279d799acbf91ca3f3a339dc866bf2d15f46591fb/949b47e9-9bec-4756-a347-ecc0ec1a64a5/psid=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311/v2/range/prot/cmFuZ2U9MjI1MjczOC0yNzc5NDU1/avf/12e04dda-199f-490b-b2ed-5a0a76d3c1d0.mp4?pathsig=8c953e4f~1JdMgaAdJoWJsPtyIgxfVeSjTCD78Jc1flGxxAyUbDg\u0026r=dXMtZWFzdDE%3D\u0026range=2252738-2779455 HTTP/1.1\r\nHost: vod-adaptive-ak.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-length: 526718\r\nlast-modified: Tue, 12 Nov 2024 16:00:42 GMT\r\nserver: parcel\r\norigin-retrieved-hour: 1733148000\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nx-vim-cachebc: ,PE:h\r\naka-c-hit: cache-hit\r\ndate: Wed, 16 Sep 2026 19:01:53 GMT\r\nakamai-request-bc: [a=23.33.119.135,b=41930023,c=g,n=NO__OSLO,o=20940],[c=p,n=NO__OSLO,o=20940]\r\nakamai-mon-iucid-del: 1594261\r\ncontent-type: video/mp4\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nakamai-grn: 0.87772117.1789585313.27fcd27\r\naccess-control-expose-headers: Akamai-GRN, Akamai-Request-BC\r\naccess-control-allow-headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":526718,"size_decoded":527523,"mime_type":"video/mp4","magic":"data","md5":"b564fc147d6d2e7a5994f9641a91f1df","sha1":"bf28aef3f3c0ad1aff1e455140bea2cd75a3b3e2","sha256":"2e07353273ebbad418363d3b973ebdfe1af75085b89082550e33bc2242d698eb","sha512":"de84c41dcde96f61e3731f0641221469d2fc05f2b9ea2316792072fd8e5fab2413db3a328a5072ac9d49cf250c9c13e985e2e2723ce129b174c992b06faadf2b","ssdeep":"12288:ZQQyud9JqQIuNpdCLdc/9l4goTqA7/908SN:Zvd9lZNToc/9CgUqAZwN","tlshash":"86b423196bd19fa3ce7f437f42ca0ba05d30f3a2164647f7269868265d2fb4c5eb4290","first_seen":"2026-09-16T18:55:25.562533Z","last_seen":"2026-09-16T19:02:40.495755Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/_astro/integration-google-drive.CU13ZEvM.svg","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.127Z","timestamp":1789585311127,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /_astro/integration-google-drive.CU13ZEvM.svg HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"a33ecdf80909c2cfd502ccd1cdb3ea67-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M2NSHHD2JVGE008G7AY2VQ4B\r\ncontent-length: 601\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":1257,"size_decoded":1068,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"28d730815dad1b6d3f450a09c26bca29","sha1":"ad82d1103e18e0a4733cf51b4bb3d8f2e30107f7","sha256":"9421c9963179adcde328966adfb52b46d64fbfd918af1ed3b3254455b26c9ceb","sha512":"b981ed20ed931608f5769f4bae84ee69a41ca65212eb0ddd584dc339131072e2d0bfcd64885f9d01b4c9de54455dc3800f652f120d59eed71337cf5091f34c2b","ssdeep":"","tlshash":"e0216580b2acd2c68806a719d9bdd135222f30f22f91e1d123ff5b25bc9618e087c8d4","first_seen":"2026-09-16T18:55:25.539164Z","last_seen":"2026-09-16T19:02:40.498119Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/slack-icon.svg","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.130Z","timestamp":1789585311130,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /slack-icon.svg HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"285fa3b22e57cf3cecbc06b45bdd3618-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M2NSHHD5Y23W3NFB1ECDTRRY\r\ncontent-length: 824\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":2285,"size_decoded":1290,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67f5e8e8f3e1586f326a707fc2efe081","sha1":"2ab3da0f8f5b9777860ec1c862513198361c548b","sha256":"74c50a337ef3aff8f4cd0c92f3dbdc72ceba9b5d5fa64274df3bf0fedcc543d9","sha512":"cd3ec15e88e113858c0306a74d9da28ecddc2ad0e5e116ae7db7868827d407ee8021fe38f95f963aca1af4824d3fc1575e9c1f859ed293aa0b2558284362bf79","ssdeep":"","tlshash":"5f41cbc0f258c764650021b5cb7d6cf9f85e3cb571490a95baf0bdd85a6813a1c4d2f7","first_seen":"2026-09-16T18:55:25.521775Z","last_seen":"2026-09-16T19:02:40.49877Z","times_seen":2,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/_astro/logo-dataiku.D1Az_Xi1.svg","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.137Z","timestamp":1789585311137,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /_astro/logo-dataiku.D1Az_Xi1.svg HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"feb1f7f6820cb6b798c5cde77677dea7-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M2NSHHDHGBXGYBR4XS4J23DV\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4906,"size_decoded":2437,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"17cb576b36dc3e3bf5aece8f5915bb8e","sha1":"f4d0f3219bbcab158de8bd1eacb94b52f6ee7caa","sha256":"cb0b27b3374188bec24e495d994dfcaa21021d7b5e725257b4f9b8a8827486c7","sha512":"0baa3dcda77076bbfae82baf7cd292a0b411a35c911ff76a1190a44ac4627d5788b3a794ea05ce5b69ee1128bd1a966d41e83dfd1f95668a25410516bb89069e","ssdeep":"96:yza2uka2Y4wWZrT5HZhTmjkdUEOt61ieh+PqARXVGnIaAqKEo7RnBUJ0/X3Sw4QG:yzuk3H3EEOt6geYPPVyKEoRBUuviw4Dt","tlshash":"22a162e5335862f8f105e7ecca5780b1216f39fabe96c285d35a2925b82468e4d88c94","first_seen":"2026-09-16T18:55:25.472287Z","last_seen":"2026-09-16T19:02:40.499354Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e.saga.so/static/array.js","fqdn":"e.saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"3.174.2.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.108Z","timestamp":1789585311108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.saga.so","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 09 Jan 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"12:C2:DA:B7:DB:4F:69:B1:E3:6A:77:CA:F9:87:8C:15:4E:CD:B2:F6","sha256":"29:D4:23:4C:EE:A1:83:61:B8:14:B9:E0:BB:14:3F:DA:03:95:1C:D3:CD:F8:B9:2F:4E:1E:09:C7:F2:2C:2B:E4"}}},"request":{"raw":"GET /static/array.js HTTP/1.1\r\nHost: e.saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://saga.so\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Wed, 16 Sep 2026 19:00:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Sep 2026 18:57:07 GMT\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=300, must-revalidate\r\nx-amz-version-id: AOYlYVesFY.nMa7cfiPIsmLJuY4XiBtl\r\ncontent-encoding: br\r\netag: W/\"4f974928540e8e0a667c2b7bd9cd4799\"\r\ncf-ray: a3c21cfe7e86d39a-FRA\r\nvia: 1.1 cf7e8b3887a490b60a55be14eb004b54.cloudfront.net (CloudFront), 1.1 02e58bd7a9a3f2c207778470b70a5570.cloudfront.net (CloudFront)\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nx-cache-status: HIT\r\nx-envoy-upstream-service-time: 13\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: IAD55-P5, ARN56-P3\r\nx-amz-cf-id: zhts4z8euU38ItmnkbYBX00Q05nxmpi1PQLek9jAvHjkyGnFtFs2SA==\r\nage: 132\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":311410,"size_decoded":92735,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"4f974928540e8e0a667c2b7bd9cd4799","sha1":"fea6d5585cece0c06a494e11f0935b09dc389290","sha256":"16e32edc860600d69aa31251cbeab25c7089816613d6a250b33183fc1b5702a0","sha512":"55712b1c9f771a1afd601ef9ce8c518d67e1a4081caa5ba84f163ca89e5246965853bee8b38df7c0411c767d2ececa49f80148c55cddda6b8df6d5ece6c084c2","ssdeep":"6144:Smr1kwoY3bARK4G6P38AEKV318WT0EfFja0R2aVHM:/1Fov3P383KVOEfI","tlshash":"b864b896f7a6d03207f698e5d0334523e72d3a09314ac06cf5af5cca394d68a6276f39","first_seen":"2026-09-16T19:02:40.500078Z","last_seen":"2026-09-16T19:02:40.500078Z","times_seen":1,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":15,"connect":8,"send":0,"wait":37,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"e.saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"e.saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/_astro/integration-linear.DBeqz6Uv.svg","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.128Z","timestamp":1789585311128,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /_astro/integration-linear.DBeqz6Uv.svg HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"548b46da0f5750d35b226d44bbb353cc-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M2NSHHD2BA983XRENRPQ6CZW\r\ncontent-length: 638\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1246,"size_decoded":1105,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"954f2f48be7358097cbc66e2a65d34bc","sha1":"f3f7ae15369ccec871d0cc1da42bd35c88262bff","sha256":"8fd2060d1bffd6e9a237752847e4adee4abad3b80c118448ccb3a93f758be63f","sha512":"a255a7126ac263631ac897468d3560f1849dc3ca5522c6dc9e5f4173b4ca57c42ff78a162cf18b7e49d2441d0145de2becb459472f4ecd71072a8426dfd99e68","ssdeep":"","tlshash":"4f2151bb87f4a2ecf401c3a44a3678393a276cfebe01c21142982412e09a95d8963d97","first_seen":"2026-09-16T18:55:25.486207Z","last_seen":"2026-09-16T19:02:40.501104Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/_astro/integration-search.Dhr3_8u6.svg","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.128Z","timestamp":1789585311128,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /_astro/integration-search.Dhr3_8u6.svg HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"aa2382da70b41e46f3a0ef6b8950f814-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M2NSHHD3NPHCYVP7WZJG3VPW\r\ncontent-length: 470\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":1070,"size_decoded":937,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac5c596ecd4f32fb800eee9ced85040b","sha1":"6f3a6f54f5a0a176e4f629e576b38b170ee005d2","sha256":"70224b6d82d6a6d8c2b9e0c49b89ad1826baf36de41f7248217ed2f3d042c76f","sha512":"7498b8bca8cf14e25a8cb572de05a5adb5b6f1eeeb8ba385496b72cc470f6ccf70f9f1977d33ccdbbc9b76a3163cb44197f4a80f0a6859055099ab42783ae0a3","ssdeep":"","tlshash":"0a11fcd42336c985d5054339e5b17dd268779cd43c42c1daa3dc3a30cc696af8828ceb","first_seen":"2026-09-16T18:55:25.555673Z","last_seen":"2026-09-16T19:02:40.501832Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/_astro/logo-strava.B1qyThAd.svg","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.141Z","timestamp":1789585311141,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /_astro/logo-strava.B1qyThAd.svg HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"e31fdb924b81cf5bdd97e72b4a7db86a-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M2NSHHDHRZACWEQ50SRMJTHV\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3033,"size_decoded":1864,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50363145da4cb3cab41d0120a050e148","sha1":"cc38eeeb77c5eee90b5b412b54930313b32c220b","sha256":"d0de6e0b7bb61ecd74848bd53536e96cc105c694fb5e811ed26ced5d5438f3d2","sha512":"8e1cb01c729ebd1ae073fb336bcb5b6ca68a90d429f40a78881d2678f1e573f6a18a44303c983ef0ec407fe152f559293e48646320f82c74250dd89921ca4aed","ssdeep":"","tlshash":"5d5143d12b5ca2e470478fa4e9225c25e66f64fd7fab42cc4254fed0a65928ccc98c94","first_seen":"2026-09-16T18:55:25.559346Z","last_seen":"2026-09-16T19:02:40.502595Z","times_seen":2,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vimeo.com/ablincoln/vuid?pid=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311","fqdn":"vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:52.467Z","timestamp":1789585312467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 12:27:17 GMT","end":"Wed, 02 Dec 2026 13:26:58 GMT"},"fingerprint":{"sha1":"22:90:8C:24:09:75:D0:BD:92:C0:C4:CA:0A:B5:7F:01:F3:21:F3:B6","sha256":"0A:3E:75:E9:A0:0F:D6:CC:C4:12:38:DA:F7:82:0C:80:CB:BA:10:C5:03:5C:EF:D1:C9:B6:90:FE:ED:F5:4B:DC"}}},"request":{"raw":"POST /ablincoln/vuid?pid=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311 HTTP/1.1\r\nHost: vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nCookie: __cf_bm=uCcNeBdKIthObNgfi1qCq5Sf8FuM59tHNaqJLyNq840-1789585311.125691-1.0.1.1-hzVAa1Ihc7ww6NWJzmokIA01qsPrBQj2omEqsUr5xbPgxkQbtr5SIf.wA.A4WeQhJPEyGX9BOfAThcHQRgJmP7k0KvJk7FiGll30.MObOQid8rmJevO.0z25H3K9pESv; vuid=pl779178303.933827040\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\ndate: Wed, 16 Sep 2026 19:01:52 GMT\r\ncf-ray: a3c21f4aec36a41f-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate,post-check=0, pre-check=0\r\nexpires: Wed, 16 Sep 2026 07:01:52 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: User-Agent\r\nvia: 1.1 google\r\nvimeo-php-controller: Vimeo.Controller.ABLincolnController\r\nx-backend: pweb\r\nx-bapp-server: pweb-758695f585-xxskl\r\nx-content-type-options: nosniff\r\nx-edge-version: 8ededf1 2026-09-10T13:56:34.649Z\r\nx-frame-options: sameorigin\r\nx-route: prefix \u003cdefault\u003e *\r\nx-ua-compatible: IE=edge\r\nx-vimeo-device: d\r\nx-vimeo-edge: 1\r\nx-xss-protection: 1; mode=block\r\npriority: u=6,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T23:51:47.12966Z","times_seen":18504645,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vimeo.com/flarepoint/Hqb0y2qg","fqdn":"vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:53.281Z","timestamp":1789585313281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 12:27:17 GMT","end":"Wed, 02 Dec 2026 13:26:58 GMT"},"fingerprint":{"sha1":"22:90:8C:24:09:75:D0:BD:92:C0:C4:CA:0A:B5:7F:01:F3:21:F3:B6","sha256":"0A:3E:75:E9:A0:0F:D6:CC:C4:12:38:DA:F7:82:0C:80:CB:BA:10:C5:03:5C:EF:D1:C9:B6:90:FE:ED:F5:4B:DC"}}},"request":{"raw":"POST /flarepoint/Hqb0y2qg HTTP/1.1\r\nHost: vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://player.vimeo.com/\r\nX-Pico-Auth: 9b1e1c51-f237-46e2-aa2c-9606f6dbc8a3\r\nContent-Type: application/json\r\nContent-Length: 1737\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1737,"data":"{\"events\":[{\"event_id\":\"6885bcb2-0ee4-46b2-bd3a-04592a520fd0\",\"event_name\":\"player_event_play_video\",\"payload\":{\"player_uuid\":\"f5bb67a6-774c-459a-b5d4-b5a9228db407\",\"video_id\":1028851046,\"video_duration\":46.8,\"owner_id\":166541506,\"owner_account_type\":\"plus\",\"referrer\":\"https://saga.so/\",\"analytics_session_id\":2714417788,\"analytics_session_ts\":1789585311,\"team_id\":0,\"is_viewer_mod\":false,\"playback_route\":\"player_embed\",\"lead_id\":null,\"analytics_local_storage_id\":\"d0aff285-bcd4-420f-8763-5d9fff86242b\",\"legacy_viewer_unique_id\":\"3391139999873910213\",\"recurring_live_event_id\":null,\"video_version_id\":962211217,\"is_live\":false,\"session_segment_id\":1,\"playback_trigger\":\"auto\",\"video_duration_ms\":46800,\"text_track_available\":false,\"text_track_language\":null,\"text_track_provenance\":null,\"text_track_type\":null,\"audio_track_available\":false,\"audio_track_language\":null,\"audio_track_provenance\":null,\"audio_track_type\":null},\"identifiers\":{\"local_storage_id\":\"24276d62-2a20-48b6-99d1-778700394757\",\"session_storage_id\":\"8fd0657b-bdc4-486a-b028-6d5f411f5a14\",\"cookie_storage_id\":\"3ae0c2fa-77c5-49c4-b208-927a7bb82965\",\"user_id\":null,\"vuid\":\"pl779178303.933827040\",\"team_owner_id\":null,\"actor_id\":null},\"context\":{\"device_browser\":\"Firefox\",\"device_os\":\"Windows\",\"device_os_version\":\"10\",\"device_type\":\"desktop\",\"language\":\"en-US\",\"locale\":\"en-US\",\"session_id\":\"f12df313-55fe-4907-9e56-97f5786e5f7d\",\"sdk_version\":\"web@0.8.0\",\"timezone_daylight_saving\":false,\"timezone_name\":\"UTC\",\"timezone_seconds\":0,\"page\":\"/video/1028851046\",\"account_type\":\"none\",\"is_team_user\":false,\"vimeo_player_version\":\"4.46.112\"},\"event_timestamp\":\"2026-09-16T19:01:52.572Z\"}],\"delta\":0,\"last_event_timestamp\":null,\"request_timestamp\":\"2026-09-16T19:01:53.279Z\"}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:01:53 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 23\r\nvia: 1.1 google, 1.1 varnish\r\nx-served-by: cache-bma-essb1270044-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1789585313.497353,VS0,VE172\r\nvary: Accept-Encoding,x-http-method-override\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\nset-cookie: __cf_bm=kVQmikqKeBpi4CkKPVQTXYrhvw4ggJZxV1yqw7_knJk-1789585313.4848866-1.0.1.1-odv1zw5knS1VB04C3JQ.4o3AvVaEIB_rYmehL955d0nYd7mSJZyxODlmsy1K5vL4HX4udVqCmOWPVRde_20aF7cncXMxgl1596b1TOXrsMhwQzZGR8asp0CmEJx5Z5BD; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Wed, 16 Sep 2026 19:31:53 GMT\r\ncontent-encoding: gzip\r\ncf-ray: a3c21f514bf9a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"kVQmikqKeBpi4CkKPVQTXYrhvw4ggJZxV1yqw7_knJk-1789585313.4848866-1.0.1.1-odv1zw5knS1VB04C3JQ.4o3AvVaEIB_rYmehL955d0nYd7mSJZyxODlmsy1K5vL4HX4udVqCmOWPVRde_20aF7cncXMxgl1596b1TOXrsMhwQzZGR8asp0CmEJx5Z5BD","quoted":false,"path":"/","domain":"vimeo.com","expires":"2026-09-16T19:31:53Z","raw_expires":"Wed, 16 Sep 2026 19:31:53 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=kVQmikqKeBpi4CkKPVQTXYrhvw4ggJZxV1yqw7_knJk-1789585313.4848866-1.0.1.1-odv1zw5knS1VB04C3JQ.4o3AvVaEIB_rYmehL955d0nYd7mSJZyxODlmsy1K5vL4HX4udVqCmOWPVRde_20aF7cncXMxgl1596b1TOXrsMhwQzZGR8asp0CmEJx5Z5BD; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Wed, 16 Sep 2026 19:31:53 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":64,"size_decoded":956,"mime_type":"application/json","magic":"JSON text data","md5":"8a462c5c4145b4d9e8aa1373e3c3cda0","sha1":"fd4c730c9c97c4275938e3fece0ac7a7ed11fe08","sha256":"df7cfd1f537d775e2cc95ff63b66b5b5e81fd69e34897144122a9a59c2177972","sha512":"dcbeed1861f3c27a5f486cad7241120da763a52f40344b35ad1d8aa75c0e558a0aa90b48b7d89f54b452549b019bd6c952e52c8f02370a7955e26fca577dca30","ssdeep":"","tlshash":"f0a00255355716573af54a1a51432b89923ab34a4e00852752592e8858683272535231","first_seen":"2026-09-16T19:02:40.503263Z","last_seen":"2026-09-16T19:02:40.503263Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/_astro/ClientRouter.astro_astro_type_script_index_0_lang.CLRjag--.js","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.105Z","timestamp":1789585311105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /_astro/ClientRouter.astro_astro_type_script_index_0_lang.CLRjag--.js HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 5752\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; hit; ttl=31530248\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"44fe168fe92e97d5b033376a51348a61-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M2NSHHCCQTMPQHS7SRNFJVXV\r\ncontent-length: 5145\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15410,"size_decoded":5625,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15409)","md5":"ccb8364e024612b505edb0e6241ff2de","sha1":"92ae8f4225dd31abe37f9a9e51ad57d00152f7de","sha256":"a0353634d9bc459199ad4137b6991ae3b6204d04f7bb7629bab1c81b59460179","sha512":"dc10028470796fcd41d3c19daeada21207812322eb35e50f3453b6bf65b31776cf890b3d09bbd1c8e2172638606acf62b2ba53ec2c08d9c597a3bbdb377635d8","ssdeep":"384:935TEKtxv1NYeAQ+nWfdMknVg/QUsOZ7m9cLm:935Ntxv1NYeAQEWfdMWg/QUsOZ7m9cLm","tlshash":"0862e7b9326270b64bff05dde1f69290b5311494780bd090742c8c6a293af8a2777f9e","first_seen":"2026-09-16T18:55:25.570515Z","last_seen":"2026-09-16T19:02:40.505296Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/_astro/logo-deloitte.9gJ0nNM8.svg","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.138Z","timestamp":1789585311138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /_astro/logo-deloitte.9gJ0nNM8.svg HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"3228df4ad76b7b067a54a67a436e831f-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M2NSHHDH3V7WGB09AAV4A1NF\r\ncontent-length: 1896\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4503,"size_decoded":2364,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"965751b8e208bf83c4fbd5809c496585","sha1":"76a8179e92e6cbf0fba93c2f3e65c94210c020d5","sha256":"80b33401dfc8db8c919e148703680f7ac91ef699298b8a31dbf293274e86e6d6","sha512":"9cc234d43e77b0aa209876b216556048c34a7921737f13337b5aca10bc2fd85cf907591ee07ba9e1a59ad890f3f963a4bc1bcb52ab1ad957f8288e6fae90b196","ssdeep":"96:puQQ48cnDlnALnMBYXrWpAdDeizWQWHt751WmTyWfnV8q:zQ48cnDln2MBYi6Be/xzfnOq","tlshash":"f39174d577eca2f4d806f7d0c612d862be9a30f777a6d268c7d17ec8e51709d8888860","first_seen":"2026-09-16T18:55:25.473718Z","last_seen":"2026-09-16T19:02:40.506125Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arclight.vimeo.com/add/player-stats?beacon=1\u0026session-id=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311","fqdn":"arclight.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"34.120.202.204","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:52.389Z","timestamp":1789585312389,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arclight.vimeo.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:06:46 GMT","end":"Thu, 29 Oct 2026 10:59:59 GMT"},"fingerprint":{"sha1":"C2:C7:21:93:C1:E2:A0:4C:B6:CB:73:B6:B9:A9:81:7F:BC:51:EB:EF","sha256":"5F:3E:F4:A0:F3:8D:3C:C6:60:40:C3:19:B0:28:18:55:72:12:DA:52:44:75:24:5F:44:6F:93:2C:A2:10:73:52"}}},"request":{"raw":"POST /add/player-stats?beacon=1\u0026session-id=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311 HTTP/1.1\r\nHost: arclight.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1793\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nCookie: __cf_bm=uCcNeBdKIthObNgfi1qCq5Sf8FuM59tHNaqJLyNq840-1789585311.125691-1.0.1.1-hzVAa1Ihc7ww6NWJzmokIA01qsPrBQj2omEqsUr5xbPgxkQbtr5SIf.wA.A4WeQhJPEyGX9BOfAThcHQRgJmP7k0KvJk7FiGll30.MObOQid8rmJevO.0z25H3K9pESv\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1793,"data":"[{\"analytics_session_id\":2714417788,\"autoplay\":true,\"background\":true,\"clip_id\":1028851046,\"context\":\"embed.main\",\"device_pixel_ratio\":1,\"drm\":false,\"embed\":true,\"has_sd_drm_fallback\":false,\"is_mod\":false,\"is_spatial\":false,\"looping\":true,\"owner_id\":166541506,\"picox_ancestor_origins\":\"https://saga.so\",\"product\":\"vimeo-vod\",\"referrer\":\"https://saga.so/\",\"session_id\":\"688bb8966f077a9c61ce091e2ce2c7527791359c1789585311\",\"version\":\"4.46.112\",\"version_backend\":\"6fa488d\",\"viewer_id\":0,\"viewer_team_id\":0,\"viewer_team_origin_user_id\":0,\"vuid\":null,\"fps\":60,\"account_type\":\"plus\",\"app_id\":\"58479\",\"privacy\":\"anybody\",\"audio_bitrate\":0,\"audio_provenance\":null,\"auto\":true,\"average_speed\":0,\"cdn\":\"akfire_interconnect_quic\",\"delivery\":\"dash\",\"display\":null,\"drm_cdm\":\"\",\"drm_mode\":\"default\",\"dropped_frame_percent\":0,\"event_time\":1789585311,\"fullscreen\":false,\"is_visible\":true,\"picture_in_picture\":false,\"highest_available_profile\":\"5ff7441f-4973-4241-8c2e-976ef4a572b0\",\"highest_profile\":null,\"max_speed\":0,\"mime\":\"application/vnd.vimeo.dash+json\",\"min_speed\":0,\"most_used_profile\":null,\"profile_id\":null,\"codec\":\"\",\"audio_codec\":\"\",\"quality\":null,\"quality_downswitch_count\":0,\"quality_upswitch_count\":0,\"separate_av\":true,\"target_profile_id\":null,\"video_bitrate\":0,\"video_duration\":46,\"picox_mode\":\"standalone\",\"picox_init_ok\":null,\"picox_init_fail_reason\":null,\"picox_idb_ok\":null,\"ab_tests\":[{\"test\":\"disable_netinfo_startup\",\"group\":\"variant\",\"data\":\"{\\\"seed_speed\\\":5}\"},{\"test\":\"prune_renditions_540p\",\"group\":\"control\"},{\"test\":\"scrub_playback_strategy\",\"group\":\"variant\"},{\"test\":\"starting_stream_bitrate\",\"group\":\"control\"},{\"test\":\"startup_disable_upshifts\",\"group\":\"control\"},{\"test\":\"startup_timeout_downshift\",\"group\":\"variant\",\"data\":\"{\\\"timeout_ms\\\":3000}\"}],\"name\":\"video-ready\"}]"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://player.vimeo.com\r\ndate: Wed, 16 Sep 2026 19:01:52 GMT\r\ncontent-length: 0\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":2848,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T23:51:47.12966Z","times_seen":18504645,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":12,"send":0,"wait":137,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e.saga.so/e/","fqdn":"e.saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"3.174.2.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://saga.so/","date":"2026-09-16T19:01:54.299Z","timestamp":1789585314299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.saga.so","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 09 Jan 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"12:C2:DA:B7:DB:4F:69:B1:E3:6A:77:CA:F9:87:8C:15:4E:CD:B2:F6","sha256":"29:D4:23:4C:EE:A1:83:61:B8:14:B9:E0:BB:14:3F:DA:03:95:1C:D3:CD:F8:B9:2F:4E:1E:09:C7:F2:2C:2B:E4"}}},"request":{"raw":"POST /e/ HTTP/1.1\r\nHost: e.saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: text/plain\r\nReferer: https://saga.so/\r\nContent-Length: 893\r\nOrigin: https://saga.so\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1362,"data":"\u001f‹\b\u0000\u0000\u0000\u0000\u0000\u0000\u0003U[oÛ6\u0014þ+‚‡\u0015ˆlQWË}\u001a\u001a´ØЭ\u000b’bC† È#‹µDj$\u0015Ç\u000eúßw(Û­Ý$\u001d6СïܾsõcÈ\u0006I×°\r—áÐrúÇB¿Uï¯ÇÍ°Ën®®¯û\u000fÛ;Ý^­šŸËßv\u001fÚ+±¾†¤Ð\f/Ú9ކË?\u001fÃq”\u0002]ĄŬ®\u0016\u0011/²,*\u001bRE‹´¨£ª.ʲÉDœ\u0013‚vp\u000fÊ¡úÅÀVp/aƒØ`ô\u0000ÆI°áò1¼Ðø\u0013þ.•Ð\u001b‹R|§÷`¬Ô\nq\u0012{¨6(\u0003ƒïo¥F?xP ?\u000eÔm\u0007@Á\u0015صӃ\u00178ÙÃN+~¼}sŠPÝ4\u0016OŒ \u001fArt4\u001dj¶Î\rv9Ÿ[¶b3«çÞ¬ÕÖs?@\u001e\u0019˜k\u0015ë½ëIð\r\u001d‘\u0019Åì¦\u003cÑ;ÙulžÏâà‡CRÁ¯·\u0001‰gñë\u0000\"{\u001d\u003cø‡¹_’4›Å¯‚wÀ×zžÄ$Æ/\t\u000e)Î'éIö_«‚’\u0013¸cj5b|Œ\u000e*úx\u0013\u003e#£\u0003ú”\u000f“Š—[n\u0000\u0014mA®Z¤Mâ$ûŠn¤pØk’,|™|Ó\u0006mÜ\u0017å*!§ðQ›ä\t¬1È\u0006êpÿrÚÊY–¦³Ô\u000b¤BrŽNƒô©Z%B›6.sÂêZ\u001eû….ËE•/ò”Y:Å´bM…´Žò–)\u0005¾m\\¨½Cé$ëäŽ9\fF÷öa\u0012'E\u0014W\u0011)nIµŒÉ2'³¤\"wނkÕÈÕh@P\u000bÖ\u001e­ôèh\u0003I\u0016±ÿ\\†\u003ežTü@ödêS\u0011•,ǁ/\u0000¢„s–•\"\u0003V¦'³ùŸl¦ì \u001eW\u0014\u001e\u001c(OÉRŸ\u0018íÁµÚ»²[Å[£•\u001eí÷-|*û\u003cüB\u00038ê~}.\u0004\u000e\u0017wá\u0017Tª\u0015\u0015ºgRI^ƒú_‡âPXäÕ°±s~·GåwÎó=\u0014úÛ²äUT’¬Šª\u0006òˆgE••\tK‹jò·™–è_mØ¢ \u0002xžœ\u00064[ú|þÏé¼Pot_\u003e\u0018çzOÏǹüÉ1\u0001®ð\u001c¬cnô¥Ãécu\u0007â¼Û\u0006¼ùß#Œ@­ÜÁþžùmã£uº§þÒ\u001f¢\u001fiÂììŒíñ“ª~ï”;é:Ïõ\u0006ý\u0004QðãOÁF›µ\u001d\u0018‡ Ñ\u0026ØêÑ\u0004J;°—Ð\u001cŸL‰À1»ž†Uâh\nL\\6\u0012óY6¬³à©\u0018ͱ*\u0014ÿ\u0011,V\u0006_\u001béÃ\u001cå\u003e+Ã\u001cÐNö8Ø\u0006|w|¦\u0011Å\u001aUÕgÏ­\u0007,Z?¼°õi\u001c߅Ÿÿº\f­¿øÌ=«–áqÈQí\u001f“ ×¸*\u0007\u0000\u0000"}},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ncontent-length: 15\r\ndate: Wed, 16 Sep 2026 19:01:54 GMT\r\ncf-ray: a3c21f567b0e516a-ARN\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: https://saga.so\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 22\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 02e58bd7a9a3f2c207778470b70a5570.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P3\r\nx-amz-cf-id: ft8Ggj4z6gtwcx8dGs8_4tY9KzajaCBysEaUmJ5I1mluAgZTdwFH5A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":15,"size_decoded":674,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-09-17T00:04:49.660764Z","times_seen":51941,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"e.saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"e.saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vimeo.com/flarepoint/Hqb0y2qg","fqdn":"vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:02:13.146Z","timestamp":1789585333146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 12:27:17 GMT","end":"Wed, 02 Dec 2026 13:26:58 GMT"},"fingerprint":{"sha1":"22:90:8C:24:09:75:D0:BD:92:C0:C4:CA:0A:B5:7F:01:F3:21:F3:B6","sha256":"0A:3E:75:E9:A0:0F:D6:CC:C4:12:38:DA:F7:82:0C:80:CB:BA:10:C5:03:5C:EF:D1:C9:B6:90:FE:ED:F5:4B:DC"}}},"request":{"raw":"OPTIONS /flarepoint/Hqb0y2qg HTTP/1.1\r\nHost: vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-pico-auth\r\nReferer: https://player.vimeo.com/\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:02:13 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\naccess-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 600\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://player.vimeo.com\r\naccess-control-allow-headers: content-type,x-pico-auth\r\nx-envoy-upstream-service-time: 1\r\nvia: 1.1 google, 1.1 varnish\r\naccept-ranges: bytes\r\nx-served-by: cache-bma-essb1270056-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1789585333.160581,VS0,VE147\r\nvary: Origin, Accept-Encoding,x-http-method-override\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\nset-cookie: __cf_bm=HTmyyGWQ0oof3q_gezaus80JdhivOvi6pGpIRjw.U3c-1789585333.1497169-1.0.1.1-CLTwDhFSQ5eDHbNp2T7.GGfsdEF6BrXiDFvPY.Yb07pGy5NRPYhV4e1xWsodM7qBDRexCRjrs.jndg1F.rwqhXCITsg.tOKEcKbKObh7kab.kWBJEM9lE.Edt_24zTYi; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Wed, 16 Sep 2026 19:32:13 GMT\r\ncf-ray: a3c21fcc2fa6a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"HTmyyGWQ0oof3q_gezaus80JdhivOvi6pGpIRjw.U3c-1789585333.1497169-1.0.1.1-CLTwDhFSQ5eDHbNp2T7.GGfsdEF6BrXiDFvPY.Yb07pGy5NRPYhV4e1xWsodM7qBDRexCRjrs.jndg1F.rwqhXCITsg.tOKEcKbKObh7kab.kWBJEM9lE.Edt_24zTYi","quoted":false,"path":"/","domain":"vimeo.com","expires":"2026-09-16T19:32:13Z","raw_expires":"Wed, 16 Sep 2026 19:32:13 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=HTmyyGWQ0oof3q_gezaus80JdhivOvi6pGpIRjw.U3c-1789585333.1497169-1.0.1.1-CLTwDhFSQ5eDHbNp2T7.GGfsdEF6BrXiDFvPY.Yb07pGy5NRPYhV4e1xWsodM7qBDRexCRjrs.jndg1F.rwqhXCITsg.tOKEcKbKObh7kab.kWBJEM9lE.Edt_24zTYi; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Wed, 16 Sep 2026 19:32:13 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":1091,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-09-16T23:53:12.327051Z","times_seen":381489,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/discord-icon.svg","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.129Z","timestamp":1789585311129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /discord-icon.svg HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"66b9620680c691d1efaa2a860c3794e4-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M2NSHHD4B6TDZ1WQKG9942YP\r\ncontent-length: 988\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":2189,"size_decoded":1454,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71291419c8ed2bd03f9d935f4d8e3d46","sha1":"d6f3c4c36b8875c13905c601411dfca69498ff63","sha256":"bcdf00d326aaa383bc416b4720d21f9c06bb364b2b33282184e9a0a78228b80e","sha512":"5f6cb3c6e0091e954ff42e2757b348bb8ff6bde3bfe5de587c316a082e5bfd56c60e261f0c92a5ac9da3ba8be950122619ef9c5a8f97da4fbfc0cb349ea6f730","ssdeep":"","tlshash":"0241a4e43738e3e0f408f3f6c522a0d17d5634a9526dc2a8c394cc48752d5bcd9a1cc4","first_seen":"2026-09-16T18:55:25.542573Z","last_seen":"2026-09-16T19:02:40.507268Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.112/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.192.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:51.805Z","timestamp":1789585311805,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Jun 2026 08:20:06 GMT","end":"Mon, 28 Dec 2026 07:20:06 GMT"},"fingerprint":{"sha1":"9D:ED:76:FD:60:04:EF:FE:92:4B:1F:3B:1D:DE:3C:0E:77:9E:BD:98","sha256":"AD:B2:D2:F7:0E:85:41:A3:BE:F2:5B:0D:16:F5:63:31:78:76:24:17:2E:F2:B7:E0:B7:84:A9:2D:AA:4D:5C:2B"}}},"request":{"raw":"GET /p/4.46.112/js/vendor.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\nage: 174786\r\nx-served-by: cache-iad-khef600040-IAD, cache-bma-essb1270071-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 47, 34654\r\nx-timer: S1789585312.842443,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 95527\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":327675,"size_decoded":96102,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65113)","md5":"1e9d51dfcd7031b0908ac6e9f71fe308","sha1":"6828f08cd120cf2df3f56d4ad767e844afb84dea","sha256":"da9ca01a7bea9251bb772026eb8c5986c54a2fe30117c5384ea1fc3f824a813f","sha512":"5484276a474c51b3a9db07ca937c29e2c4158ba75eec3a829868085af668abd9d24c8112e4fe2410cdcbfa1c427563fb356d2f41eb39283c64623e1d87c48b46","ssdeep":"6144:2xrQb8XM5U5dAbYwlkclS4KGwNGRDc+FiTVQlPi1:2x/85ucsG2GmgBW","tlshash":"6864f7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","first_seen":"2026-09-14T18:38:17.348998Z","last_seen":"2026-09-17T00:01:10.141881Z","times_seen":212,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":31,"receive":11,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arclight.vimeo.com/add/player-stats?beacon=1\u0026session-id=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311","fqdn":"arclight.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"34.120.202.204","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:52.622Z","timestamp":1789585312622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arclight.vimeo.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:06:46 GMT","end":"Thu, 29 Oct 2026 10:59:59 GMT"},"fingerprint":{"sha1":"C2:C7:21:93:C1:E2:A0:4C:B6:CB:73:B6:B9:A9:81:7F:BC:51:EB:EF","sha256":"5F:3E:F4:A0:F3:8D:3C:C6:60:40:C3:19:B0:28:18:55:72:12:DA:52:44:75:24:5F:44:6F:93:2C:A2:10:73:52"}}},"request":{"raw":"POST /add/player-stats?beacon=1\u0026session-id=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311 HTTP/1.1\r\nHost: arclight.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2465\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nCookie: __cf_bm=uCcNeBdKIthObNgfi1qCq5Sf8FuM59tHNaqJLyNq840-1789585311.125691-1.0.1.1-hzVAa1Ihc7ww6NWJzmokIA01qsPrBQj2omEqsUr5xbPgxkQbtr5SIf.wA.A4WeQhJPEyGX9BOfAThcHQRgJmP7k0KvJk7FiGll30.MObOQid8rmJevO.0z25H3K9pESv; vuid=pl779178303.933827040; COOKIE_ID_PICOX_ID=3ae0c2fa-77c5-49c4-b208-927a7bb82965\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2465,"data":"[{\"autoplay\":true,\"buffer_count\":0,\"total_buffer_duration\":0,\"buffer_ratio\":0,\"current_buffer_occupancy\":6.03,\"min_buffer_occupancy\":null,\"max_buffer_occupancy\":null,\"average_buffer_occupancy\":null,\"client_time\":1701,\"is_buffering\":false,\"looping\":true,\"minutes_watched\":0,\"muted\":true,\"network_state\":2,\"playback_rate\":1,\"player_width\":1064,\"player_height\":599,\"session_playback_duration\":0,\"video_time\":0,\"video_height\":1080,\"video_width\":1920,\"volume\":1,\"analytics_session_id\":2714417788,\"background\":true,\"clip_id\":1028851046,\"context\":\"embed.main\",\"device_pixel_ratio\":1,\"drm\":false,\"embed\":true,\"has_sd_drm_fallback\":false,\"is_mod\":false,\"is_spatial\":false,\"owner_id\":166541506,\"picox_ancestor_origins\":\"https://saga.so\",\"product\":\"vimeo-vod\",\"referrer\":\"https://saga.so/\",\"session_id\":\"688bb8966f077a9c61ce091e2ce2c7527791359c1789585311\",\"version\":\"4.46.112\",\"version_backend\":\"6fa488d\",\"viewer_id\":0,\"viewer_team_id\":0,\"viewer_team_origin_user_id\":0,\"vuid\":\"pl779178303.933827040\",\"fps\":60,\"account_type\":\"plus\",\"app_id\":\"58479\",\"privacy\":\"anybody\",\"audio_bitrate\":0,\"audio_provenance\":null,\"auto\":true,\"average_speed\":0,\"cdn\":\"akfire_interconnect_quic\",\"delivery\":\"dash\",\"display\":null,\"drm_cdm\":\"\",\"drm_mode\":\"default\",\"dropped_frame_percent\":0,\"event_time\":1789585311,\"fullscreen\":false,\"is_visible\":true,\"picture_in_picture\":false,\"highest_available_profile\":\"5ff7441f-4973-4241-8c2e-976ef4a572b0\",\"highest_profile\":null,\"max_speed\":0,\"mime\":\"application/vnd.vimeo.dash+json\",\"min_speed\":0,\"most_used_profile\":\"5ff7441f-4973-4241-8c2e-976ef4a572b0\",\"profile_id\":\"5ff7441f-4973-4241-8c2e-976ef4a572b0\",\"codec\":\"AVC\",\"audio_codec\":\"\",\"quality\":\"1080p\",\"quality_downswitch_count\":0,\"quality_upswitch_count\":0,\"separate_av\":true,\"target_profile_id\":\"5ff7441f-4973-4241-8c2e-976ef4a572b0\",\"video_bitrate\":1204,\"video_duration\":46.8,\"picox_mode\":\"standalone\",\"picox_init_ok\":true,\"picox_init_fail_reason\":null,\"picox_idb_ok\":true,\"ab_tests\":[{\"test\":\"disable_netinfo_startup\",\"group\":\"variant\",\"data\":\"{\\\"seed_speed\\\":5}\"},{\"test\":\"prune_renditions_540p\",\"group\":\"control\"},{\"test\":\"scrub_playback_strategy\",\"group\":\"variant\"},{\"test\":\"starting_stream_bitrate\",\"group\":\"control\"},{\"test\":\"startup_disable_upshifts\",\"group\":\"control\"},{\"test\":\"startup_timeout_downshift\",\"group\":\"variant\",\"data\":\"{\\\"timeout_ms\\\":3000}\"}],\"previous_audio_bitrate\":0,\"previous_video_bitrate\":0,\"previous_profile_id\":\"null\",\"reason\":7,\"cache_hit\":1,\"name\":\"video-stream-change\"}]"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://player.vimeo.com\r\ndate: Wed, 16 Sep 2026 19:01:52 GMT\r\ncontent-length: 0\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3610,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T23:51:47.12966Z","times_seen":18504645,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vimeo.com/flarepoint/Hqb0y2qg","fqdn":"vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:02:02.694Z","timestamp":1789585322694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 12:27:17 GMT","end":"Wed, 02 Dec 2026 13:26:58 GMT"},"fingerprint":{"sha1":"22:90:8C:24:09:75:D0:BD:92:C0:C4:CA:0A:B5:7F:01:F3:21:F3:B6","sha256":"0A:3E:75:E9:A0:0F:D6:CC:C4:12:38:DA:F7:82:0C:80:CB:BA:10:C5:03:5C:EF:D1:C9:B6:90:FE:ED:F5:4B:DC"}}},"request":{"raw":"OPTIONS /flarepoint/Hqb0y2qg HTTP/1.1\r\nHost: vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-pico-auth\r\nReferer: https://player.vimeo.com/\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:02:02 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\naccess-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 600\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://player.vimeo.com\r\naccess-control-allow-headers: content-type,x-pico-auth\r\nx-envoy-upstream-service-time: 7\r\nvia: 1.1 google, 1.1 varnish\r\naccept-ranges: bytes\r\nx-served-by: cache-bma-essb1270077-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1789585323.720456,VS0,VE153\r\nvary: Origin, Accept-Encoding,x-http-method-override\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\nset-cookie: __cf_bm=IUkYwm2QTZKWxfjA4Sh_PZZ3GecHh1.lyRUVz6xlaw0-1789585322.6996036-1.0.1.1-L9r7VHKRGsOk6pFgv3WuFz5nREns0zrYTexko76sbikpzo2Wi_En_EzqhBdrJkChX5By5IH1Ci9OWvEmeg1oZus6EDiJ.Ew4sdDE72RzjpMiz_WNhMk0Qn7iPQM8pquO; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Wed, 16 Sep 2026 19:32:02 GMT\r\ncf-ray: a3c21f8ad9b2a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"IUkYwm2QTZKWxfjA4Sh_PZZ3GecHh1.lyRUVz6xlaw0-1789585322.6996036-1.0.1.1-L9r7VHKRGsOk6pFgv3WuFz5nREns0zrYTexko76sbikpzo2Wi_En_EzqhBdrJkChX5By5IH1Ci9OWvEmeg1oZus6EDiJ.Ew4sdDE72RzjpMiz_WNhMk0Qn7iPQM8pquO","quoted":false,"path":"/","domain":"vimeo.com","expires":"2026-09-16T19:32:02Z","raw_expires":"Wed, 16 Sep 2026 19:32:02 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=IUkYwm2QTZKWxfjA4Sh_PZZ3GecHh1.lyRUVz6xlaw0-1789585322.6996036-1.0.1.1-L9r7VHKRGsOk6pFgv3WuFz5nREns0zrYTexko76sbikpzo2Wi_En_EzqhBdrJkChX5By5IH1Ci9OWvEmeg1oZus6EDiJ.Ew4sdDE72RzjpMiz_WNhMk0Qn7iPQM8pquO; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Wed, 16 Sep 2026 19:32:02 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2,"size_decoded":1091,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-09-16T23:53:12.327051Z","times_seen":381489,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/_astro/tab-docs.Dk3XDZys.svg","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.121Z","timestamp":1789585311121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /_astro/tab-docs.Dk3XDZys.svg HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"766b76c89c2cb6a8dae2ce3a5e0385bc-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M2NSHHCW0YCJNCTMBF24FZ8B\r\ncontent-length: 337\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1045,"size_decoded":804,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"595693f9cfe482809359e752dc5fbbd1","sha1":"b366d435fbfe90a4dea1d1319379356184d8231a","sha256":"863f2a7ed937a63a12d223bcf495bacddaa0c3f1040376deb3f2ffac743f3c6f","sha512":"23d7287d31b14ae2c36c6cdeadd93f71c18918b2ce940b9522b02319a58fbab210d97cb289d2330bed82c7050d6069ce544ff112aef0387b03f38315f96588fb","ssdeep":"","tlshash":"7f117b4523184c3cf8378d24d725fdb551668a537a843250cd3a25330a2a29d7c7fdda","first_seen":"2026-09-16T18:55:25.451758Z","last_seen":"2026-09-16T19:02:40.508385Z","times_seen":2,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/apple-touch-icon.png","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.779Z","timestamp":1789585311779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nCookie: ph_phc_X8oFnLQuwpz4SDQQmOyZohDgfJ7PzOhDdkQe26oLp27_posthog=%7B%22%24device_id%22%3A%2201a0ab98-c63d-7a5b-96ee-2cca47d4ea73%22%2C%22distinct_id%22%3A%2201a0ab98-c63d-7a5b-96ee-2cca47d4ea73%22%2C%22%24sesid%22%3A%5B1789585311300%2C%2201a0ab98-c659-7149-9fe5-c469472a3697%22%2C1789585311300%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fsaga.so%2F%22%7D%2C%22%24user_state%22%3A%22anonymous%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-type: image/png\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"afe61c533883e866bcf7d33af03e241a-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M2NSHJ1E1K9WY22VCTN1WBQ6\r\ncontent-length: 9440\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":9440,"size_decoded":9855,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"d69c5dae63c5cc99eaf8635cfc1b9540","sha1":"4585c8db6fa50847c4d4f5c7aaa132256df17ac6","sha256":"55abc108e117834562fd272597d5d652f73966659ff4fef432104d79972a34d7","sha512":"890b7bbb90a825c71cf392e5786bc2fb2fa27b95365506e7516511cf7f24d9d6f82e22e231b77f297b460fb19ddbaffedb51b144b48d573b8c3bda3c3e02843f","ssdeep":"192:d/cqH82x7+xJoB0hS5nygpCr74fqIV8UWM3lyh72OADta1k:dQ2oxmB0hScgpCr7sq0/1VyhSOWta1k","tlshash":"0812ae0b03eb97f77ef6510026134f412a36d47520131af4b473c7bac89e55628dd8ea","first_seen":"2025-12-07T02:57:50.638919Z","last_seen":"2026-09-16T19:02:40.508932Z","times_seen":3,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/1949129604-5399eefd9320324d6842556ac0517a99933e0dc6741ed4bcad539a1eee704040-d?mw=80\u0026q=85","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.192.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:52.391Z","timestamp":1789585312391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Jun 2026 08:20:06 GMT","end":"Mon, 28 Dec 2026 07:20:06 GMT"},"fingerprint":{"sha1":"9D:ED:76:FD:60:04:EF:FE:92:4B:1F:3B:1D:DE:3C:0E:77:9E:BD:98","sha256":"AD:B2:D2:F7:0E:85:41:A3:BE:F2:5B:0D:16:F5:63:31:78:76:24:17:2E:F2:B7:E0:B7:84:A9:2D:AA:4D:5C:2B"}}},"request":{"raw":"GET /video/1949129604-5399eefd9320324d6842556ac0517a99933e0dc6741ed4bcad539a1eee704040-d?mw=80\u0026q=85 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"13c7d42c64cb6a97f981cf4e65df3591\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 1960632\r\ndate: Wed, 16 Sep 2026 19:01:52 GMT\r\nx-served-by: cache-dfw-kdfw8210109-DFW, cache-bma-essb1270056-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 147, 0\r\nx-timer: S1789585312.396712,VS0,VE1\r\nvary: Accept\r\ncontent-length: 791\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":791,"size_decoded":1367,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"13c7d42c64cb6a97f981cf4e65df3591","sha1":"6c8243f3a64823726b8d1547d56d88cac5465d76","sha256":"a3e27a506e799767c4977bcc3ddcff57248f51c823af1c0eb243edeff0eb7b4b","sha512":"8e5169fbf549814dbbe98cacc6ccb675bbda2f0e0435ba4cc7c9ee05f5f1a9c12da00e7087bdb46b2b4e9c756e32b7439ab9adcbf60a28a8787ff9dbb2ff0e61","ssdeep":"","tlshash":"a7012074a3e259d5c50452b405391b132945d2a1a7e77916fdaa7b1618481f3cc31fa4","first_seen":"2026-09-16T18:55:25.495747Z","last_seen":"2026-09-16T19:02:40.509396Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vimeo.com/flarepoint/orion/v3/identity/settings","fqdn":"vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:52.392Z","timestamp":1789585312392,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 12:27:17 GMT","end":"Wed, 02 Dec 2026 13:26:58 GMT"},"fingerprint":{"sha1":"22:90:8C:24:09:75:D0:BD:92:C0:C4:CA:0A:B5:7F:01:F3:21:F3:B6","sha256":"0A:3E:75:E9:A0:0F:D6:CC:C4:12:38:DA:F7:82:0C:80:CB:BA:10:C5:03:5C:EF:D1:C9:B6:90:FE:ED:F5:4B:DC"}}},"request":{"raw":"POST /flarepoint/orion/v3/identity/settings HTTP/1.1\r\nHost: vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://player.vimeo.com/\r\nContent-Type: application/json\r\nbsp-id: vimeo_player\r\nX-Set-Orion: true\r\nContent-Length: 246\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":246,"data":"{\"is_logged_in\":false,\"local_storage_id\":\"24276d62-2a20-48b6-99d1-778700394757\",\"device_type\":\"desktop\",\"vimeo_user_id\":null,\"vuid\":null,\"client_environment\":\"production\",\"team_owner_id\":null,\"actor_id\":null,\"tier\":\"none\",\"bsp_id\":\"vimeo_player\"}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 16 Sep 2026 19:01:52 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvia: 1.1 google, 1.1 varnish\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\ncross-origin-opener-policy: same-origin\r\nx-permitted-cross-domain-policies: none\r\naccept-ranges: bytes\r\nx-served-by: cache-bma-essb1270044-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1789585313.622097,VS0,VE157\r\nvary: Accept-Encoding,x-http-method-override\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=wn5xa09ixICiIC2xrxnmVT01SOKpmdyaWu8tD8XEPN4-1789585312.6113572-1.0.1.1-jMJ_m8CqxzG1a0tLxWq6AAMNDgRbNY7i49e43bntzj8Fs7DaAmeTZNqKO6koChto1xt2OODZk7vMOqGHfS3Wb1AfZeCA_lb8xy7dKsHpl8dvULKxvojxe.H9zTfM6BwE; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Wed, 16 Sep 2026 19:31:52 GMT\r\ncf-ray: a3c21f4bcbe31a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"wn5xa09ixICiIC2xrxnmVT01SOKpmdyaWu8tD8XEPN4-1789585312.6113572-1.0.1.1-jMJ_m8CqxzG1a0tLxWq6AAMNDgRbNY7i49e43bntzj8Fs7DaAmeTZNqKO6koChto1xt2OODZk7vMOqGHfS3Wb1AfZeCA_lb8xy7dKsHpl8dvULKxvojxe.H9zTfM6BwE","quoted":false,"path":"/","domain":"vimeo.com","expires":"2026-09-16T19:31:52Z","raw_expires":"Wed, 16 Sep 2026 19:31:52 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=wn5xa09ixICiIC2xrxnmVT01SOKpmdyaWu8tD8XEPN4-1789585312.6113572-1.0.1.1-jMJ_m8CqxzG1a0tLxWq6AAMNDgRbNY7i49e43bntzj8Fs7DaAmeTZNqKO6koChto1xt2OODZk7vMOqGHfS3Wb1AfZeCA_lb8xy7dKsHpl8dvULKxvojxe.H9zTfM6BwE; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Wed, 16 Sep 2026 19:31:52 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":969,"size_decoded":1417,"mime_type":"application/json","magic":"JSON text data","md5":"4797bc90e9f2e5595bf0a111864700d4","sha1":"d4ea8f17c088636699d52fa922954a9130b5633c","sha256":"da696e1c2c6f2d6d2a4071fe6ef7f772b6b57f823801e64f457e95d64055bf63","sha512":"71e48372daa9920416e92992575e5b495af986f3758d45f98022c4aa69c329cdcff71bc00681f33a83b71683e021a6c2f3839af491b38fe99ec096ec4e32b140","ssdeep":"","tlshash":"5d119b305c0dc8ad7caa43c3e8a4dd0339b81093c9c46ac6e655b52c26cf6c5317f047","first_seen":"2026-06-07T19:37:35.056138Z","last_seen":"2026-09-16T21:54:28.641475Z","times_seen":6635,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vod-adaptive-ak.vimeocdn.com/exp=1789588911~acl=%2F949b47e9-9bec-4756-a347-ecc0ec1a64a5%2Fpsid%3D688bb8966f077a9c61ce091e2ce2c7527791359c1789585311%2F%2A~hmac=545ab22d4c62e7fa4f88deb279d799acbf91ca3f3a339dc866bf2d15f46591fb/949b47e9-9bec-4756-a347-ecc0ec1a64a5/psid=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311/v2/range/prot/cmFuZ2U9MzMyNjMxMC0zODYyMzQz/avf/12e04dda-199f-490b-b2ed-5a0a76d3c1d0.mp4?pathsig=8c953e4f~1ZZRTWPCQIdRHQ-YhX4zVUGucdoQpWcSju1GSWBDkzk\u0026r=dXMtZWFzdDE%3D\u0026range=3326310-3862343","fqdn":"vod-adaptive-ak.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"23.33.119.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:59.254Z","timestamp":1789585319254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vod-adaptive-ak.vimeocdn.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:42:10 GMT","end":"Sun, 25 Oct 2026 08:42:09 GMT"},"fingerprint":{"sha1":"41:4A:14:24:63:A8:41:24:2E:80:CA:20:90:D3:DD:EE:DF:46:6B:21","sha256":"13:66:FC:DA:A3:66:F9:A9:F2:C7:F1:1E:B2:BD:3C:BD:78:C7:A8:57:92:32:B8:54:42:08:AD:C4:A1:77:93:93"}}},"request":{"raw":"GET /exp=1789588911~acl=%2F949b47e9-9bec-4756-a347-ecc0ec1a64a5%2Fpsid%3D688bb8966f077a9c61ce091e2ce2c7527791359c1789585311%2F%2A~hmac=545ab22d4c62e7fa4f88deb279d799acbf91ca3f3a339dc866bf2d15f46591fb/949b47e9-9bec-4756-a347-ecc0ec1a64a5/psid=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311/v2/range/prot/cmFuZ2U9MzMyNjMxMC0zODYyMzQz/avf/12e04dda-199f-490b-b2ed-5a0a76d3c1d0.mp4?pathsig=8c953e4f~1ZZRTWPCQIdRHQ-YhX4zVUGucdoQpWcSju1GSWBDkzk\u0026r=dXMtZWFzdDE%3D\u0026range=3326310-3862343 HTTP/1.1\r\nHost: vod-adaptive-ak.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-length: 536034\r\nlast-modified: Tue, 12 Nov 2024 16:00:42 GMT\r\nserver: parcel\r\norigin-retrieved-hour: 1733148000\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nx-vim-cachebc: ,PE:h\r\naka-c-hit: cache-hit\r\ndate: Wed, 16 Sep 2026 19:01:59 GMT\r\nakamai-request-bc: [a=23.33.119.135,b=41930256,c=g,n=NO__OSLO,o=20940],[c=p,n=NO__OSLO,o=20940]\r\nakamai-mon-iucid-del: 1594261\r\ncontent-type: video/mp4\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nakamai-grn: 0.87772117.1789585319.27fce10\r\naccess-control-expose-headers: Akamai-GRN, Akamai-Request-BC\r\naccess-control-allow-headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":536034,"size_decoded":536839,"mime_type":"video/mp4","magic":"data","md5":"a3e985217a72a8a39d914ec614688299","sha1":"8cf64f7a1c40a5de46d932b2a090f863a27e5302","sha256":"b3eeff77815e65ec311ca1e4c3cb852bb89920b1ac7de90562beacbddec9ea00","sha512":"4f1c1f343309b5ef360ed51f1f5a6d31d9ec98ec39de72089205f77ae946ed86565fa5031ae675c6c732fcfda9a80584f1b621ff1cdd8da16b2b690fcfa1d104","ssdeep":"12288:6YsAYCI9p9SbSBpfz8Mo0XKllP2ZiHDRWT8AvIpMeVT8:6Y4h795Bpfz8Hpj+ZyITrvgA","tlshash":"6ab4220517e47933dc7faa7bd85623856d50e3232e02ebcbb36d26728d8d98c4da50d2","first_seen":"2026-09-16T18:55:25.528936Z","last_seen":"2026-09-16T19:02:40.510415Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vod-adaptive-ak.vimeocdn.com/exp=1789588911~acl=%2F949b47e9-9bec-4756-a347-ecc0ec1a64a5%2Fpsid%3D688bb8966f077a9c61ce091e2ce2c7527791359c1789585311%2F%2A~hmac=545ab22d4c62e7fa4f88deb279d799acbf91ca3f3a339dc866bf2d15f46591fb/949b47e9-9bec-4756-a347-ecc0ec1a64a5/psid=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311/v2/range/prot/cmFuZ2U9Mzg2MjM0NC01MzM5Mjkz/avf/12e04dda-199f-490b-b2ed-5a0a76d3c1d0.mp4?pathsig=8c953e4f~39yQJFmLv2250smhqwcnIKgwVe0B_8ixtTaW6toeiQU\u0026r=dXMtZWFzdDE%3D\u0026range=3862344-5339293","fqdn":"vod-adaptive-ak.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"23.33.119.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:02:05.301Z","timestamp":1789585325301,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vod-adaptive-ak.vimeocdn.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:42:10 GMT","end":"Sun, 25 Oct 2026 08:42:09 GMT"},"fingerprint":{"sha1":"41:4A:14:24:63:A8:41:24:2E:80:CA:20:90:D3:DD:EE:DF:46:6B:21","sha256":"13:66:FC:DA:A3:66:F9:A9:F2:C7:F1:1E:B2:BD:3C:BD:78:C7:A8:57:92:32:B8:54:42:08:AD:C4:A1:77:93:93"}}},"request":{"raw":"GET /exp=1789588911~acl=%2F949b47e9-9bec-4756-a347-ecc0ec1a64a5%2Fpsid%3D688bb8966f077a9c61ce091e2ce2c7527791359c1789585311%2F%2A~hmac=545ab22d4c62e7fa4f88deb279d799acbf91ca3f3a339dc866bf2d15f46591fb/949b47e9-9bec-4756-a347-ecc0ec1a64a5/psid=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311/v2/range/prot/cmFuZ2U9Mzg2MjM0NC01MzM5Mjkz/avf/12e04dda-199f-490b-b2ed-5a0a76d3c1d0.mp4?pathsig=8c953e4f~39yQJFmLv2250smhqwcnIKgwVe0B_8ixtTaW6toeiQU\u0026r=dXMtZWFzdDE%3D\u0026range=3862344-5339293 HTTP/1.1\r\nHost: vod-adaptive-ak.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-length: 1476950\r\nlast-modified: Tue, 12 Nov 2024 16:00:42 GMT\r\nserver: parcel\r\norigin-retrieved-hour: 1733148000\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nx-vim-cachebc: ,TD2:m\r\ndate: Wed, 16 Sep 2026 19:02:05 GMT\r\nakamai-request-bc: [a=23.33.119.135,b=41930566,c=g,n=NO__OSLO,o=20940],[c=p,n=NO__OSLO,o=20940]\r\nakamai-mon-iucid-del: 1594261\r\ncontent-type: video/mp4\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nakamai-grn: 0.87772117.1789585325.27fcf46\r\naccess-control-expose-headers: Akamai-GRN, Akamai-Request-BC\r\naccess-control-allow-headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1476950,"size_decoded":1477735,"mime_type":"video/mp4","magic":"data","md5":"85751dce3051eff56270112125aa8735","sha1":"e252f6a7dacbc69b21f94a524bcd8dd02cd8afc1","sha256":"cae64cea8ba0679010b44e1c711c9a795a00c55240a210dfb87b5e57431cbde9","sha512":"8f5d98921bbe3b4b95390aadde0f90a91baa66f2f91e9fa9be4bd54c9f28dde45eca37a1a5ec3d24474bacc2209a2ba58d74258fdd1734d1cf1f12c092e5c237","ssdeep":"24576:sSjE9g/fw3lgvQcAgNnldeTHXLOVA5uPYJATYLPHLNpNK:skE9gQ1gBAen6T3LOVA5sYJF7NK","tlshash":"1d25338683e42f91dd7f6b77469613836d71ce6a2e115fcf2a927a000f6e28c1dd4b90","first_seen":"2026-09-16T18:55:25.532172Z","last_seen":"2026-09-16T19:02:40.511069Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arclight.vimeo.com/add/player-stats?beacon=1\u0026session-id=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311","fqdn":"arclight.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"34.120.202.204","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:52.390Z","timestamp":1789585312390,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arclight.vimeo.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:06:46 GMT","end":"Thu, 29 Oct 2026 10:59:59 GMT"},"fingerprint":{"sha1":"C2:C7:21:93:C1:E2:A0:4C:B6:CB:73:B6:B9:A9:81:7F:BC:51:EB:EF","sha256":"5F:3E:F4:A0:F3:8D:3C:C6:60:40:C3:19:B0:28:18:55:72:12:DA:52:44:75:24:5F:44:6F:93:2C:A2:10:73:52"}}},"request":{"raw":"POST /add/player-stats?beacon=1\u0026session-id=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311 HTTP/1.1\r\nHost: arclight.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2227\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nCookie: __cf_bm=uCcNeBdKIthObNgfi1qCq5Sf8FuM59tHNaqJLyNq840-1789585311.125691-1.0.1.1-hzVAa1Ihc7ww6NWJzmokIA01qsPrBQj2omEqsUr5xbPgxkQbtr5SIf.wA.A4WeQhJPEyGX9BOfAThcHQRgJmP7k0KvJk7FiGll30.MObOQid8rmJevO.0z25H3K9pESv\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2227,"data":"[{\"autoplay\":true,\"buffer_count\":0,\"total_buffer_duration\":0,\"buffer_ratio\":0,\"current_buffer_occupancy\":0,\"min_buffer_occupancy\":null,\"max_buffer_occupancy\":null,\"average_buffer_occupancy\":null,\"client_time\":1281,\"is_buffering\":false,\"looping\":true,\"minutes_watched\":0,\"muted\":true,\"network_state\":3,\"playback_rate\":1,\"player_width\":1055.9833984375,\"player_height\":594,\"session_playback_duration\":0,\"video_time\":0,\"video_height\":0,\"video_width\":0,\"volume\":1,\"analytics_session_id\":2714417788,\"background\":true,\"clip_id\":1028851046,\"context\":\"embed.main\",\"device_pixel_ratio\":1,\"drm\":false,\"embed\":true,\"has_sd_drm_fallback\":false,\"is_mod\":false,\"is_spatial\":false,\"owner_id\":166541506,\"picox_ancestor_origins\":\"https://saga.so\",\"product\":\"vimeo-vod\",\"referrer\":\"https://saga.so/\",\"session_id\":\"688bb8966f077a9c61ce091e2ce2c7527791359c1789585311\",\"version\":\"4.46.112\",\"version_backend\":\"6fa488d\",\"viewer_id\":0,\"viewer_team_id\":0,\"viewer_team_origin_user_id\":0,\"vuid\":null,\"fps\":60,\"account_type\":\"plus\",\"app_id\":\"58479\",\"privacy\":\"anybody\",\"audio_bitrate\":0,\"audio_provenance\":null,\"auto\":true,\"average_speed\":0,\"cdn\":\"akfire_interconnect_quic\",\"delivery\":\"dash\",\"display\":null,\"drm_cdm\":\"\",\"drm_mode\":\"default\",\"dropped_frame_percent\":0,\"event_time\":1789585311,\"fullscreen\":false,\"is_visible\":true,\"picture_in_picture\":false,\"highest_available_profile\":\"5ff7441f-4973-4241-8c2e-976ef4a572b0\",\"highest_profile\":null,\"max_speed\":0,\"mime\":\"application/vnd.vimeo.dash+json\",\"min_speed\":0,\"most_used_profile\":null,\"profile_id\":null,\"codec\":\"\",\"audio_codec\":\"\",\"quality\":null,\"quality_downswitch_count\":0,\"quality_upswitch_count\":0,\"separate_av\":true,\"target_profile_id\":null,\"video_bitrate\":0,\"video_duration\":46,\"picox_mode\":\"standalone\",\"picox_init_ok\":null,\"picox_init_fail_reason\":null,\"picox_idb_ok\":null,\"ab_tests\":[{\"test\":\"disable_netinfo_startup\",\"group\":\"variant\",\"data\":\"{\\\"seed_speed\\\":5}\"},{\"test\":\"prune_renditions_540p\",\"group\":\"control\"},{\"test\":\"scrub_playback_strategy\",\"group\":\"variant\"},{\"test\":\"starting_stream_bitrate\",\"group\":\"control\"},{\"test\":\"startup_disable_upshifts\",\"group\":\"control\"},{\"test\":\"startup_timeout_downshift\",\"group\":\"variant\",\"data\":\"{\\\"timeout_ms\\\":3000}\"}],\"name\":\"video-start-attempt\"}]"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://player.vimeo.com\r\ndate: Wed, 16 Sep 2026 19:01:52 GMT\r\ncontent-length: 0\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3282,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T23:51:47.12966Z","times_seen":18504645,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":12,"send":0,"wait":136,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vod-adaptive-ak.vimeocdn.com/exp=1789588911~acl=%2F949b47e9-9bec-4756-a347-ecc0ec1a64a5%2Fpsid%3D688bb8966f077a9c61ce091e2ce2c7527791359c1789585311%2F%2A~hmac=545ab22d4c62e7fa4f88deb279d799acbf91ca3f3a339dc866bf2d15f46591fb/949b47e9-9bec-4756-a347-ecc0ec1a64a5/psid=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311/v2/range/prot/cmFuZ2U9NTMzOTI5NC02MzcwMDc3/avf/12e04dda-199f-490b-b2ed-5a0a76d3c1d0.mp4?pathsig=8c953e4f~dkPePV9QBeGZOwTkkxYfi4VvYwcCooWr3EhupIXy19s\u0026r=dXMtZWFzdDE%3D\u0026range=5339294-6370077","fqdn":"vod-adaptive-ak.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"23.33.119.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:02:10.885Z","timestamp":1789585330885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vod-adaptive-ak.vimeocdn.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:42:10 GMT","end":"Sun, 25 Oct 2026 08:42:09 GMT"},"fingerprint":{"sha1":"41:4A:14:24:63:A8:41:24:2E:80:CA:20:90:D3:DD:EE:DF:46:6B:21","sha256":"13:66:FC:DA:A3:66:F9:A9:F2:C7:F1:1E:B2:BD:3C:BD:78:C7:A8:57:92:32:B8:54:42:08:AD:C4:A1:77:93:93"}}},"request":{"raw":"GET /exp=1789588911~acl=%2F949b47e9-9bec-4756-a347-ecc0ec1a64a5%2Fpsid%3D688bb8966f077a9c61ce091e2ce2c7527791359c1789585311%2F%2A~hmac=545ab22d4c62e7fa4f88deb279d799acbf91ca3f3a339dc866bf2d15f46591fb/949b47e9-9bec-4756-a347-ecc0ec1a64a5/psid=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311/v2/range/prot/cmFuZ2U9NTMzOTI5NC02MzcwMDc3/avf/12e04dda-199f-490b-b2ed-5a0a76d3c1d0.mp4?pathsig=8c953e4f~dkPePV9QBeGZOwTkkxYfi4VvYwcCooWr3EhupIXy19s\u0026r=dXMtZWFzdDE%3D\u0026range=5339294-6370077 HTTP/1.1\r\nHost: vod-adaptive-ak.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-length: 1030784\r\nlast-modified: Tue, 12 Nov 2024 16:00:42 GMT\r\nserver: parcel\r\norigin-retrieved-hour: 1764770400\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\ndate: Wed, 16 Sep 2026 19:02:10 GMT\r\nakamai-request-bc: [a=23.33.119.135,b=41930793,c=g,n=NO__OSLO,o=20940],[c=p,n=NO__OSLO,o=20940]\r\nakamai-mon-iucid-del: 1594261\r\ncontent-type: video/mp4\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nakamai-grn: 0.87772117.1789585330.27fd029\r\naccess-control-expose-headers: Akamai-GRN, Akamai-Request-BC\r\naccess-control-allow-headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1030784,"size_decoded":1031546,"mime_type":"video/mp4","magic":"data","md5":"9f664c17d298eff7b611feef912ddb3f","sha1":"982e4eaa656c38f1194778dae9e1d023df211582","sha256":"dfc9f5392d82a25175a3d2c0d874401e6f0f55c0ea294ba34d8ad0dbe60fb0a1","sha512":"69b7ee29903207f24f3274ce2d135b17693af3f7ed7aab011e63842f6d64092df7a143d0328dbf2d75955815846211abc97a73719b41b896e28896c97c0758bb","ssdeep":"24576:BxYpR69igGjAVryYi+jH2hbdgizFkWR8MA2FL:DYqqjWrW+WhBtL","tlshash":"35252390dbe01eb3de7e02bf494db656fc90d6194824c7cb6254349c6ec9b5e8d036e2","first_seen":"2026-09-16T18:55:25.48098Z","last_seen":"2026-09-16T19:02:40.51172Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vod-adaptive-ak.vimeocdn.com/exp=1789588911~acl=%2F949b47e9-9bec-4756-a347-ecc0ec1a64a5%2Fpsid%3D688bb8966f077a9c61ce091e2ce2c7527791359c1789585311%2F%2A~hmac=545ab22d4c62e7fa4f88deb279d799acbf91ca3f3a339dc866bf2d15f46591fb/949b47e9-9bec-4756-a347-ecc0ec1a64a5/psid=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311/v2/range/prot/cmFuZ2U9NjM3MDA3OC03MDQzODY3/avf/12e04dda-199f-490b-b2ed-5a0a76d3c1d0.mp4?pathsig=8c953e4f~flXrYkJD41ER0cX0zP2m6Ai9qim689YxDmOeHvC60bI\u0026r=dXMtZWFzdDE%3D\u0026range=6370078-7043867","fqdn":"vod-adaptive-ak.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"23.33.119.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:02:16.937Z","timestamp":1789585336937,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vod-adaptive-ak.vimeocdn.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:42:10 GMT","end":"Sun, 25 Oct 2026 08:42:09 GMT"},"fingerprint":{"sha1":"41:4A:14:24:63:A8:41:24:2E:80:CA:20:90:D3:DD:EE:DF:46:6B:21","sha256":"13:66:FC:DA:A3:66:F9:A9:F2:C7:F1:1E:B2:BD:3C:BD:78:C7:A8:57:92:32:B8:54:42:08:AD:C4:A1:77:93:93"}}},"request":{"raw":"GET /exp=1789588911~acl=%2F949b47e9-9bec-4756-a347-ecc0ec1a64a5%2Fpsid%3D688bb8966f077a9c61ce091e2ce2c7527791359c1789585311%2F%2A~hmac=545ab22d4c62e7fa4f88deb279d799acbf91ca3f3a339dc866bf2d15f46591fb/949b47e9-9bec-4756-a347-ecc0ec1a64a5/psid=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311/v2/range/prot/cmFuZ2U9NjM3MDA3OC03MDQzODY3/avf/12e04dda-199f-490b-b2ed-5a0a76d3c1d0.mp4?pathsig=8c953e4f~flXrYkJD41ER0cX0zP2m6Ai9qim689YxDmOeHvC60bI\u0026r=dXMtZWFzdDE%3D\u0026range=6370078-7043867 HTTP/1.1\r\nHost: vod-adaptive-ak.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-length: 673790\r\nlast-modified: Tue, 12 Nov 2024 16:00:42 GMT\r\nserver: parcel\r\norigin-retrieved-hour: 1733148000\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nx-vim-cachebc: ,CW:m,TD2:m\r\ndate: Wed, 16 Sep 2026 19:02:16 GMT\r\nakamai-request-bc: [a=23.33.119.135,b=41931109,c=g,n=NO__OSLO,o=20940],[c=p,n=NO__OSLO,o=20940]\r\nakamai-mon-iucid-del: 1594261\r\ncontent-type: video/mp4\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nakamai-grn: 0.87772117.1789585336.27fd165\r\naccess-control-expose-headers: Akamai-GRN, Akamai-Request-BC\r\naccess-control-allow-headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":673790,"size_decoded":674579,"mime_type":"video/mp4","magic":"data","md5":"64e79944791d4ba0aa69337e835c7ad8","sha1":"67ba0e72171997cb8d738eb36b06a05ee3b7ad13","sha256":"dff4b9eaffc5322945f258a13b4e0f35dcc0eb345460a1a568d0dbbc669c116b","sha512":"c9adb4bb4919dd0eb5cfcef22a0a4caab96634afeaa00b04c47733ad692f68c549f9ec20b0923938fe1791fb389e72ec28366f6e700b136d034506b19e4a1f30","ssdeep":"12288:VycV/5Jhl2ndp6S6h1Ff2wj0EG4/U73GaFGWto3sJWhaNTM7EBTrh:Vy0Vl2ndp6Th1FIii3GaRoBUwE59","tlshash":"43e42394afe05e37ec3c69b7604e3bd58c69ea710d56c7cf936429764d3620c2a20376","first_seen":"2026-09-16T18:55:25.534991Z","last_seen":"2026-09-16T19:02:40.513683Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arclight.vimeo.com/add/player-stats?beacon=1\u0026session-id=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311","fqdn":"arclight.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"34.120.202.204","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:52.475Z","timestamp":1789585312475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arclight.vimeo.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:06:46 GMT","end":"Thu, 29 Oct 2026 10:59:59 GMT"},"fingerprint":{"sha1":"C2:C7:21:93:C1:E2:A0:4C:B6:CB:73:B6:B9:A9:81:7F:BC:51:EB:EF","sha256":"5F:3E:F4:A0:F3:8D:3C:C6:60:40:C3:19:B0:28:18:55:72:12:DA:52:44:75:24:5F:44:6F:93:2C:A2:10:73:52"}}},"request":{"raw":"POST /add/player-stats?beacon=1\u0026session-id=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311 HTTP/1.1\r\nHost: arclight.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2248\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nCookie: __cf_bm=uCcNeBdKIthObNgfi1qCq5Sf8FuM59tHNaqJLyNq840-1789585311.125691-1.0.1.1-hzVAa1Ihc7ww6NWJzmokIA01qsPrBQj2omEqsUr5xbPgxkQbtr5SIf.wA.A4WeQhJPEyGX9BOfAThcHQRgJmP7k0KvJk7FiGll30.MObOQid8rmJevO.0z25H3K9pESv; vuid=pl779178303.933827040\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2248,"data":"[{\"autoplay\":true,\"buffer_count\":0,\"total_buffer_duration\":0,\"buffer_ratio\":0,\"current_buffer_occupancy\":0,\"min_buffer_occupancy\":null,\"max_buffer_occupancy\":null,\"average_buffer_occupancy\":null,\"client_time\":1556,\"is_buffering\":false,\"looping\":true,\"minutes_watched\":0,\"muted\":true,\"network_state\":0,\"playback_rate\":1,\"player_width\":1055.9833984375,\"player_height\":594,\"session_playback_duration\":0,\"video_time\":0,\"video_height\":0,\"video_width\":0,\"volume\":1,\"analytics_session_id\":2714417788,\"background\":true,\"clip_id\":1028851046,\"context\":\"embed.main\",\"device_pixel_ratio\":1,\"drm\":false,\"embed\":true,\"has_sd_drm_fallback\":false,\"is_mod\":false,\"is_spatial\":false,\"owner_id\":166541506,\"picox_ancestor_origins\":\"https://saga.so\",\"product\":\"vimeo-vod\",\"referrer\":\"https://saga.so/\",\"session_id\":\"688bb8966f077a9c61ce091e2ce2c7527791359c1789585311\",\"version\":\"4.46.112\",\"version_backend\":\"6fa488d\",\"viewer_id\":0,\"viewer_team_id\":0,\"viewer_team_origin_user_id\":0,\"vuid\":\"pl779178303.933827040\",\"fps\":60,\"account_type\":\"plus\",\"app_id\":\"58479\",\"privacy\":\"anybody\",\"audio_bitrate\":0,\"audio_provenance\":null,\"auto\":true,\"average_speed\":0,\"cdn\":\"akfire_interconnect_quic\",\"delivery\":\"dash\",\"display\":null,\"drm_cdm\":\"\",\"drm_mode\":\"default\",\"dropped_frame_percent\":0,\"event_time\":1789585311,\"fullscreen\":false,\"is_visible\":true,\"picture_in_picture\":false,\"highest_available_profile\":\"5ff7441f-4973-4241-8c2e-976ef4a572b0\",\"highest_profile\":null,\"max_speed\":0,\"mime\":\"application/vnd.vimeo.dash+json\",\"min_speed\":0,\"most_used_profile\":null,\"profile_id\":null,\"codec\":\"\",\"audio_codec\":\"\",\"quality\":null,\"quality_downswitch_count\":0,\"quality_upswitch_count\":0,\"separate_av\":true,\"target_profile_id\":null,\"video_bitrate\":0,\"video_duration\":46,\"picox_mode\":\"standalone\",\"picox_init_ok\":true,\"picox_init_fail_reason\":null,\"picox_idb_ok\":true,\"ab_tests\":[{\"test\":\"disable_netinfo_startup\",\"group\":\"variant\",\"data\":\"{\\\"seed_speed\\\":5}\"},{\"test\":\"prune_renditions_540p\",\"group\":\"control\"},{\"test\":\"scrub_playback_strategy\",\"group\":\"variant\"},{\"test\":\"starting_stream_bitrate\",\"group\":\"control\"},{\"test\":\"startup_disable_upshifts\",\"group\":\"control\"},{\"test\":\"startup_timeout_downshift\",\"group\":\"variant\",\"data\":\"{\\\"timeout_ms\\\":3000}\"}],\"name\":\"video-manifest-loaded\"}]"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://player.vimeo.com\r\ndate: Wed, 16 Sep 2026 19:01:52 GMT\r\ncontent-length: 0\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":3331,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T23:51:47.12966Z","times_seen":18504645,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":1,"dns":0,"connect":0,"send":1,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e.saga.so/static/1.433.3/surveys.js","fqdn":"e.saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"3.174.2.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.729Z","timestamp":1789585311729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.saga.so","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 09 Jan 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"12:C2:DA:B7:DB:4F:69:B1:E3:6A:77:CA:F9:87:8C:15:4E:CD:B2:F6","sha256":"29:D4:23:4C:EE:A1:83:61:B8:14:B9:E0:BB:14:3F:DA:03:95:1C:D3:CD:F8:B9:2F:4E:1E:09:C7:F2:2C:2B:E4"}}},"request":{"raw":"GET /static/1.433.3/surveys.js HTTP/1.1\r\nHost: e.saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://saga.so\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Tue, 15 Sep 2026 02:32:20 GMT\r\nx-cache-status: HIT\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\netag: W/\"8c132fedb7bbebf06dfb04291b2ee0de\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: MISS\r\nx-amz-version-id: fa_UJqkdwPZl42x1iEp0W3QF15LUrXye\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-server-side-encryption: AES256\r\nlast-modified: Mon, 14 Sep 2026 20:01:01 GMT\r\ncf-ray: a3b43869fd351e6c-FRA\r\nvia: 1.1 193a402ffd948b9e8339796d3c0c8282.cloudfront.net (CloudFront), 1.1 02e58bd7a9a3f2c207778470b70a5570.cloudfront.net (CloudFront)\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: IAD55-P5, ARN56-P3\r\nx-amz-cf-id: MaNPrGiMXdwpQ9QETtHc0_kyzUfLANHp8YO_Nhtcbv0cSl7f3gFLCA==\r\nage: 147579\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":103956,"size_decoded":35098,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8c132fedb7bbebf06dfb04291b2ee0de","sha1":"c4e7dffdc8bd62e3b28330079aa1aa8210630fde","sha256":"9719b92698fc9da98e2054c27e8c540db6d375791d68c686d48f1fb8584886a9","sha512":"3b85d1f89acb96bb1ea2025c41facb3381ebec56d0d539036a6038cf983ac7bdb68b85b5d2a6cb0dff9885e6eb8995a1001914c00d3a1f2fa544e7d8ac8ddac4","ssdeep":"1536:S5qVEiGsHh4xkNFIhHDCCNC4DscAOWnLWiitDQa0bhx8VwbHkeN:08Ei//CDCCo810bEVwbki","tlshash":"3aa35b95f741f06942fb84a950bb4853e33c3a06fa4d8858b12b4cd83cd6589a39ff79","first_seen":"2026-09-10T16:33:32.701534Z","last_seen":"2026-09-16T22:29:33.460039Z","times_seen":677,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"e.saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"e.saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/favicon-16x16.png","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.780Z","timestamp":1789585311780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nCookie: ph_phc_X8oFnLQuwpz4SDQQmOyZohDgfJ7PzOhDdkQe26oLp27_posthog=%7B%22%24device_id%22%3A%2201a0ab98-c63d-7a5b-96ee-2cca47d4ea73%22%2C%22distinct_id%22%3A%2201a0ab98-c63d-7a5b-96ee-2cca47d4ea73%22%2C%22%24sesid%22%3A%5B1789585311300%2C%2201a0ab98-c659-7149-9fe5-c469472a3697%22%2C1789585311300%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fsaga.so%2F%22%7D%2C%22%24user_state%22%3A%22anonymous%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-type: image/png\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"59350788ecdd33f9032c42f9d4b9e53f-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M2NSHJ1F0Y2T3PXE6DE6X7R9\r\ncontent-length: 1241\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":1241,"size_decoded":1656,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"b5e1411a620a798b8da77931169344f0","sha1":"ba46f51c3267e0b34c2d8ab4ea5cd1e836e60196","sha256":"27a501d7690f45d9d6ac9cc5e7814a4b9b4275cc67f24f06578c48242a4b32da","sha512":"868688969f343f1cd4e0e7bc1b71d1352ef2c2eec17abfba5d0a38edafaa7ca342a7ff614722f37b8cf505842353657fa79de6ae9b68b675217ae9f4121b1748","ssdeep":"","tlshash":"4521a7d6cc78e1c5c8c447560d16bb00ae39c80e53e3bc0bf63dd9c4240362d1aa5f50","first_seen":"2025-12-07T02:57:50.618251Z","last_seen":"2026-09-16T19:02:40.516434Z","times_seen":3,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.112/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.192.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:51.802Z","timestamp":1789585311802,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Jun 2026 08:20:06 GMT","end":"Mon, 28 Dec 2026 07:20:06 GMT"},"fingerprint":{"sha1":"9D:ED:76:FD:60:04:EF:FE:92:4B:1F:3B:1D:DE:3C:0E:77:9E:BD:98","sha256":"AD:B2:D2:F7:0E:85:41:A3:BE:F2:5B:0D:16:F5:63:31:78:76:24:17:2E:F2:B7:E0:B7:84:A9:2D:AA:4D:5C:2B"}}},"request":{"raw":"GET /p/4.46.112/js/player.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\nage: 174786\r\nx-served-by: cache-iad-kcgs7200150-IAD, cache-bma-essb1270071-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 40, 34341\r\nx-timer: S1789585312.841632,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 227994\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":930981,"size_decoded":228571,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65145)","md5":"af853e723b5e4a93a3c0dbe5eb7f18ed","sha1":"a759e1598b38242d096284ac1dcc2f9d64fc86a0","sha256":"22c974a55edf05a5149649d3ce2c14f1755b0df37f94aeea087178dffc4d911e","sha512":"b760f7beb247510c90e6e2e8a75d4a4bd5ab72dd7667b697649cc29fd2e6ceacc67fd314dbb1270a2f1e257e67aa5e485a4f5e12fa78649089e1d791387d189f","ssdeep":"12288:TUBG36ZNyED69/oykyexHrC+HTpfESz/Dm6M6QzK8oxGHMfAG+y4Byu83ciyV2kg:UN/D6q5HrC+HTpfJ/7cvSlWGbP","tlshash":"39156cc672d6f43585d685a5a07b0203b33e169db80d868cf03eadcc2a9d545b2b7fb4","first_seen":"2026-09-14T18:38:17.375096Z","last_seen":"2026-09-17T00:01:10.094505Z","times_seen":213,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":11,"receive":25,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/1949129604-5399eefd9320324d6842556ac0517a99933e0dc6741ed4bcad539a1eee704040-d?mw=1100\u0026mh=619","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.192.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:52.386Z","timestamp":1789585312386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Jun 2026 08:20:06 GMT","end":"Mon, 28 Dec 2026 07:20:06 GMT"},"fingerprint":{"sha1":"9D:ED:76:FD:60:04:EF:FE:92:4B:1F:3B:1D:DE:3C:0E:77:9E:BD:98","sha256":"AD:B2:D2:F7:0E:85:41:A3:BE:F2:5B:0D:16:F5:63:31:78:76:24:17:2E:F2:B7:E0:B7:84:A9:2D:AA:4D:5C:2B"}}},"request":{"raw":"GET /video/1949129604-5399eefd9320324d6842556ac0517a99933e0dc6741ed4bcad539a1eee704040-d?mw=1100\u0026mh=619 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"e9417189f5a9ee433a6fb7e3d445531e\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 176021\r\ndate: Wed, 16 Sep 2026 19:01:52 GMT\r\nx-served-by: cache-dfw-kdal2120108-DFW, cache-bma-essb1270056-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1, 0\r\nx-timer: S1789585312.391651,VS0,VE3\r\nvary: Accept\r\ncontent-length: 24280\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":24280,"size_decoded":24855,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e9417189f5a9ee433a6fb7e3d445531e","sha1":"4bf4e36d65a3b4a47d9a05362f6bc1d26ce7ee9f","sha256":"159ec68cab3049aa7b31505c1809dcaff5c0ca9992d20bf4b90ade2000ebbad6","sha512":"cf60129f0a7fcdc0d36cd8456505512945108469e253c64efa28a98be02e45c228570a4e4e74bd481e8e0dacbf4918c7e0977e7f09256a875ac6688cfe342b3e","ssdeep":"384:4/iXdqLzha1beP9OBu1n1XSac5WpgyzUsSOeKy5lPQ/o4g69O72B:yiN8zw1be8Bu59Sac5MwsplyQA4g682B","tlshash":"f4b2021e262405e9d25977305cdeb28f6549e6b6e268331ccc4b3fbf63430a28d1c5e8","first_seen":"2026-09-16T18:55:25.461067Z","last_seen":"2026-09-16T19:02:40.517951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e.saga.so/array/phc_X8oFnLQuwpz4SDQQmOyZohDgfJ7PzOhDdkQe26oLp27/config.js","fqdn":"e.saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"3.174.2.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.617Z","timestamp":1789585311617,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.saga.so","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 09 Jan 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"12:C2:DA:B7:DB:4F:69:B1:E3:6A:77:CA:F9:87:8C:15:4E:CD:B2:F6","sha256":"29:D4:23:4C:EE:A1:83:61:B8:14:B9:E0:BB:14:3F:DA:03:95:1C:D3:CD:F8:B9:2F:4E:1E:09:C7:F2:2C:2B:E4"}}},"request":{"raw":"GET /array/phc_X8oFnLQuwpz4SDQQmOyZohDgfJ7PzOhDdkQe26oLp27/config.js HTTP/1.1\r\nHost: e.saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://saga.so\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Wed, 16 Sep 2026 19:00:19 GMT\r\ncf-cache-status: EXPIRED\r\ncf-ray: a3c21d024dc4dbfb-FRA\r\ncache-control: public, max-age=300\r\naccess-control-allow-origin: https://saga.so\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 1\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Wed, 16 Sep 2026 19:00:19 GMT\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 02e58bd7a9a3f2c207778470b70a5570.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P3\r\nx-amz-cf-id: eZuobaV8AYA8bG6hYiKEUaDDPIU_aUYtL-MuM5gpRv1eEfZ_0roRjw==\r\nage: 92\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":742,"size_decoded":1149,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (543)","md5":"858f4cf20e80a60ea6dc2dd51c1ecabd","sha1":"15339153ebf2adbb65c1d05ee4ecf045653714ea","sha256":"443bf8538afc9763ae0de2f91da7c56dfb45e43cdc20e3ef944df6a2e08aaf3d","sha512":"5605ceade4da3f47fd4c4123ac03ccd47d68c212793f8f70d8e86c6fee06551d7b8dc6f2b18a83da3bb8475e88b63d899cc297bdb3ca0343e9ffd56c2cf68bfb","ssdeep":"","tlshash":"a0019c4dba90007984826354b7d7254b9fbb01273214251cf8d849013aef8cf8653b83","first_seen":"2026-09-16T18:55:25.447151Z","last_seen":"2026-09-16T19:02:40.518691Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"e.saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"e.saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/fonts/epilogue/epilogue-regular-latin.woff2","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.102Z","timestamp":1789585311102,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /fonts/epilogue/epilogue-regular-latin.woff2 HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://saga.so/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=604800\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-type: font/woff2\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"083eaa6a1e61d3307ed46459843bdffc-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M2NSHHCAG5ES75KTS189YT64\r\ncontent-length: 35700\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":35700,"size_decoded":36106,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35700, version 1.0","md5":"43d9a5b1cc3dc2aa56c235553d160cb8","sha1":"93e11135d38d55f60ef771a6f803a7feda804552","sha256":"943ab208b058dbb0a8b257c02d6d9cfe5932a72c4deea8c77d192111c7c14519","sha512":"cca929151ae1a6783b0b52a104e7cb64eb6491b39b10d780c9f275a3e125b0437a23099911aec0d397d028158e8658372c4de3b2da8baa7632647ba3a222d498","ssdeep":"768:YpMKar0+L+pJG0e9KgvEoAhTPiRpl5cJXat2NAOrJc+sQ+MyelLoaSEY87:YpEg+LIJReXsXhgplLt2NfcNFULoaSy","tlshash":"a2f202e54d73252bb4abc3a69392d13e5be7b50fa46da8c88c184fb0df2259c13453c9","first_seen":"2025-09-05T07:34:26.336027Z","last_seen":"2026-09-16T19:02:40.520189Z","times_seen":2365,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.107Z","timestamp":1789585311107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 12:27:17 GMT","end":"Wed, 02 Dec 2026 13:26:58 GMT"},"fingerprint":{"sha1":"22:90:8C:24:09:75:D0:BD:92:C0:C4:CA:0A:B5:7F:01:F3:21:F3:B6","sha256":"0A:3E:75:E9:A0:0F:D6:CC:C4:12:38:DA:F7:82:0C:80:CB:BA:10:C5:03:5C:EF:D1:C9:B6:90:FE:ED:F5:4B:DC"}}},"request":{"raw":"GET /video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479 HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: a3c21f428dc656b7-OSL\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=uCcNeBdKIthObNgfi1qCq5Sf8FuM59tHNaqJLyNq840-1789585311.125691-1.0.1.1-hzVAa1Ihc7ww6NWJzmokIA01qsPrBQj2omEqsUr5xbPgxkQbtr5SIf.wA.A4WeQhJPEyGX9BOfAThcHQRgJmP7k0KvJk7FiGll30.MObOQid8rmJevO.0z25H3K9pESv; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Wed, 16 Sep 2026 19:31:51 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nlink: \u003chttps://lensflare.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://arclight.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://i.vimeocdn.com\u003e; rel=preconnect; crossorigin, \u003chttps://f.vimeocdn.com\u003e; rel=preconnect; crossorigin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer, Accept-Encoding\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' resource: https://vimeo.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://browser-intake-datadoghq.com https://src.litix.io https://www.gstatic.com https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.video https://embedder-sdk.wirewax.tv https://*.vimeo.work; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://edge-player5.wirewax.com https://edge-player5.wirewax.video; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm.vhx.com/v2/fairplay/cert https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://browser-intake-datadoghq.com https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.paychex.com https://*.hivestreaming.com https://vimeo.magisto.com https://stage.vimeo.magisto.com https://stage-proxy.vimeo.magisto.com https://interactive.create.vimeo.com https://*.wirewax.com https://*.wirewax.video https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://player-telemetry.vimeo.com https://lensflare.vimeo.com https://arclight.vimeo.com https://orion.bendingspoons.com https://pico.bendingspoons.com https://*.vimeo.work; font-src data: https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://branding.cdn.magisto.com https://d2by6sxflmuwyq.cloudfront.net https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://duysrfiajusdh.cloudfront.net https://d263mgllkjh2k2.cloudfront.net https://storage.googleapis.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://studio-media.wirewax.video https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://maps.googleapis.com android-webview-video-poster: https://*.vimeo.work; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://captions.vimeo.com https://captions-eu.vimeo.com; frame-src 'self' https://*; worker-src blob:\r\ncross-origin-resource-policy: cross-origin\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-7d9dd9c4-6qj9k\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-7d9dd9c4-6qj9k\r\nx-link-match: 104\r\nx-player-backend: g\r\nx-served-by: cache-iad-kiad7000129-IAD, cache-bma-essb1270034-BMA\r\nx-timer: S1789585311.150152,VS0,VE202\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"uCcNeBdKIthObNgfi1qCq5Sf8FuM59tHNaqJLyNq840-1789585311.125691-1.0.1.1-hzVAa1Ihc7ww6NWJzmokIA01qsPrBQj2omEqsUr5xbPgxkQbtr5SIf.wA.A4WeQhJPEyGX9BOfAThcHQRgJmP7k0KvJk7FiGll30.MObOQid8rmJevO.0z25H3K9pESv","quoted":false,"path":"/","domain":"vimeo.com","expires":"2026-09-16T19:31:51Z","raw_expires":"Wed, 16 Sep 2026 19:31:51 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=uCcNeBdKIthObNgfi1qCq5Sf8FuM59tHNaqJLyNq840-1789585311.125691-1.0.1.1-hzVAa1Ihc7ww6NWJzmokIA01qsPrBQj2omEqsUr5xbPgxkQbtr5SIf.wA.A4WeQhJPEyGX9BOfAThcHQRgJmP7k0KvJk7FiGll30.MObOQid8rmJevO.0z25H3K9pESv; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Wed, 16 Sep 2026 19:31:51 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":21808,"size_decoded":11545,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13670)","md5":"e40981e63527d886b38d97978c7af165","sha1":"7b8adaf73d506195ed16835f94815f5eb4ab47a9","sha256":"97a679f70d53236f2bf0fe6d7689262b31509b3038164cd6b383d7007bf015d4","sha512":"809c4928410c404e90ed0df2e808a6cd965d32d94a38fe5ebff79a36a8101cc589c42b84d370837f7a0dae81e4fdbdc66b420473c78be9d3f0f873383181cbec","ssdeep":"384:PTEdeGjQTWt+tXuK+StNCtNJTUT0WGJp/fqfstjoNfhqffbiQR8xCTDVDPWSPqON:Q05+AwRE0WS/fVoNfhqfjf8x6tWSCOdL","tlshash":"f3a23a3ba5c09439879855c91eabbb0839e91047ff49ca84f09eaf5c13af9c357072d5","first_seen":"2026-09-16T19:02:40.521005Z","last_seen":"2026-09-16T19:02:40.521005Z","times_seen":1,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":3,"send":0,"wait":302,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/.netlify/images?url=_astro%2Ftab-notes.czoNjWhO.webp\u0026w=1320\u0026h=792\u0026q=90\u0026dpl=6aa6f0071c11540007a13f55","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.142Z","timestamp":1789585311142,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /.netlify/images?url=_astro%2Ftab-notes.czoNjWhO.webp\u0026w=1320\u0026h=792\u0026q=90\u0026dpl=6aa6f0071c11540007a13f55 HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-security-policy: \r\ncontent-type: image/webp\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"20159ba7003b66be30ed93a03c58b819fe1b7ee1d52ff8ede4ddcba0dbc85893\"\r\nnetlify-vary: query=crop|fit|fm|format|h|height|position|q|quality|timestamp|url|w|width,header=Netlify-Image-Accept\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M2NSHHDHZ0ECJ3P0ZZ5HQB2E\r\ncontent-length: 35020\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35020,"size_decoded":35589,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cddab202cd7f38de4247fce2f8ffee87","sha1":"e4b2f0b8dafdf89038c4517957ff06f63bcda4d2","sha256":"44a3dcf47886e4d09f671e562c16ba83e658888df81ec0cb39df2974e4f08094","sha512":"63623a50c9d1a194fb10af608aad41e69c8e5a9d82736bb2bebd0a7a9f634e4318c8e4336ff6edc64e86251554d64e79136390da36443f03dd5fe4764a118649","ssdeep":"768:+FTbFR1y6UB8r8AITUff/h3h/s2EU/RmzTyIgXv:+5FR1qBu8wPh3NaTi/","tlshash":"3af2d051fa088397c1f3a4be6df2e01e6a21ca362d9883535cd702f5ddca692635d4ac","first_seen":"2026-09-16T18:55:25.545921Z","last_seen":"2026-09-16T19:02:40.522512Z","times_seen":2,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vimeo.com/flarepoint/orion/v3/identity/settings","fqdn":"vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:52.398Z","timestamp":1789585312398,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 12:27:17 GMT","end":"Wed, 02 Dec 2026 13:26:58 GMT"},"fingerprint":{"sha1":"22:90:8C:24:09:75:D0:BD:92:C0:C4:CA:0A:B5:7F:01:F3:21:F3:B6","sha256":"0A:3E:75:E9:A0:0F:D6:CC:C4:12:38:DA:F7:82:0C:80:CB:BA:10:C5:03:5C:EF:D1:C9:B6:90:FE:ED:F5:4B:DC"}}},"request":{"raw":"OPTIONS /flarepoint/orion/v3/identity/settings HTTP/1.1\r\nHost: vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: bsp-id,content-type,x-set-orion\r\nReferer: https://player.vimeo.com/\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 16 Sep 2026 19:01:52 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 600\r\naccess-control-allow-headers: bsp-id,content-type,x-set-orion\r\nvia: 1.1 google, 1.1 varnish\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\ncross-origin-opener-policy: same-origin\r\nx-permitted-cross-domain-policies: none\r\naccept-ranges: bytes\r\nx-served-by: cache-bma-essb1270037-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1789585312.420335,VS0,VE149\r\nvary: Accept-Encoding,x-http-method-override\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=tEtp9PwZc0aelWaNOExt9ULPXomt0rRvLDvqY3ZhBWU-1789585312.4097903-1.0.1.1-gYaSuuz7wWsyEYbjno2GsvUypqEHBwrAX36JrzauewufYI.OHXQ2ZnWUD94cbNJANh5Djnt6vMA8djn2T2C8p1rXUMLmzoO65qdmpldjqg1x9JFb90AgycHgAfWQd6zN; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Wed, 16 Sep 2026 19:31:52 GMT\r\ncf-ray: a3c21f4a8f981a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"tEtp9PwZc0aelWaNOExt9ULPXomt0rRvLDvqY3ZhBWU-1789585312.4097903-1.0.1.1-gYaSuuz7wWsyEYbjno2GsvUypqEHBwrAX36JrzauewufYI.OHXQ2ZnWUD94cbNJANh5Djnt6vMA8djn2T2C8p1rXUMLmzoO65qdmpldjqg1x9JFb90AgycHgAfWQd6zN","quoted":false,"path":"/","domain":"vimeo.com","expires":"2026-09-16T19:31:52Z","raw_expires":"Wed, 16 Sep 2026 19:31:52 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=tEtp9PwZc0aelWaNOExt9ULPXomt0rRvLDvqY3ZhBWU-1789585312.4097903-1.0.1.1-gYaSuuz7wWsyEYbjno2GsvUypqEHBwrAX36JrzauewufYI.OHXQ2ZnWUD94cbNJANh5Djnt6vMA8djn2T2C8p1rXUMLmzoO65qdmpldjqg1x9JFb90AgycHgAfWQd6zN; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Wed, 16 Sep 2026 19:31:52 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":1156,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-09-16T23:53:12.327051Z","times_seen":381489,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":168,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arclight.vimeo.com/add/player-stats?beacon=1\u0026session-id=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311","fqdn":"arclight.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"34.120.202.204","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:52.647Z","timestamp":1789585312647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arclight.vimeo.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:06:46 GMT","end":"Thu, 29 Oct 2026 10:59:59 GMT"},"fingerprint":{"sha1":"C2:C7:21:93:C1:E2:A0:4C:B6:CB:73:B6:B9:A9:81:7F:BC:51:EB:EF","sha256":"5F:3E:F4:A0:F3:8D:3C:C6:60:40:C3:19:B0:28:18:55:72:12:DA:52:44:75:24:5F:44:6F:93:2C:A2:10:73:52"}}},"request":{"raw":"POST /add/player-stats?beacon=1\u0026session-id=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311 HTTP/1.1\r\nHost: arclight.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3061\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nCookie: __cf_bm=uCcNeBdKIthObNgfi1qCq5Sf8FuM59tHNaqJLyNq840-1789585311.125691-1.0.1.1-hzVAa1Ihc7ww6NWJzmokIA01qsPrBQj2omEqsUr5xbPgxkQbtr5SIf.wA.A4WeQhJPEyGX9BOfAThcHQRgJmP7k0KvJk7FiGll30.MObOQid8rmJevO.0z25H3K9pESv; vuid=pl779178303.933827040; COOKIE_ID_PICOX_ID=3ae0c2fa-77c5-49c4-b208-927a7bb82965\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3061,"data":"[{\"autoplay\":true,\"buffer_count\":0,\"total_buffer_duration\":0,\"buffer_ratio\":0,\"current_buffer_occupancy\":6.03,\"min_buffer_occupancy\":null,\"max_buffer_occupancy\":null,\"average_buffer_occupancy\":null,\"client_time\":1735,\"is_buffering\":false,\"looping\":true,\"minutes_watched\":0,\"muted\":true,\"network_state\":2,\"playback_rate\":1,\"player_width\":1064,\"player_height\":599,\"session_playback_duration\":0,\"video_time\":0.000049,\"video_height\":1080,\"video_width\":1920,\"volume\":1,\"analytics_session_id\":2714417788,\"background\":true,\"clip_id\":1028851046,\"context\":\"embed.main\",\"device_pixel_ratio\":1,\"drm\":false,\"embed\":true,\"has_sd_drm_fallback\":false,\"is_mod\":false,\"is_spatial\":false,\"owner_id\":166541506,\"picox_ancestor_origins\":\"https://saga.so\",\"product\":\"vimeo-vod\",\"referrer\":\"https://saga.so/\",\"session_id\":\"688bb8966f077a9c61ce091e2ce2c7527791359c1789585311\",\"version\":\"4.46.112\",\"version_backend\":\"6fa488d\",\"viewer_id\":0,\"viewer_team_id\":0,\"viewer_team_origin_user_id\":0,\"vuid\":\"pl779178303.933827040\",\"fps\":60,\"account_type\":\"plus\",\"app_id\":\"58479\",\"privacy\":\"anybody\",\"audio_bitrate\":0,\"audio_provenance\":null,\"auto\":true,\"average_speed\":86564.963,\"cdn\":\"akfire_interconnect_quic\",\"delivery\":\"dash\",\"display\":null,\"drm_cdm\":\"\",\"drm_mode\":\"default\",\"dropped_frame_percent\":null,\"event_time\":1789585311,\"fullscreen\":false,\"is_visible\":true,\"picture_in_picture\":false,\"highest_available_profile\":\"5ff7441f-4973-4241-8c2e-976ef4a572b0\",\"highest_profile\":null,\"max_speed\":86564.963,\"mime\":\"application/vnd.vimeo.dash+json\",\"min_speed\":86564.963,\"most_used_profile\":\"5ff7441f-4973-4241-8c2e-976ef4a572b0\",\"profile_id\":\"5ff7441f-4973-4241-8c2e-976ef4a572b0\",\"codec\":\"AVC\",\"audio_codec\":\"\",\"quality\":\"1080p\",\"quality_downswitch_count\":0,\"quality_upswitch_count\":0,\"separate_av\":true,\"target_profile_id\":\"5ff7441f-4973-4241-8c2e-976ef4a572b0\",\"video_bitrate\":1204,\"video_duration\":46.8,\"picox_mode\":\"standalone\",\"picox_init_ok\":true,\"picox_init_fail_reason\":null,\"picox_idb_ok\":true,\"ab_tests\":[{\"test\":\"disable_netinfo_startup\",\"group\":\"variant\",\"data\":\"{\\\"seed_speed\\\":5}\"},{\"test\":\"prune_renditions_540p\",\"group\":\"control\"},{\"test\":\"scrub_playback_strategy\",\"group\":\"variant\"},{\"test\":\"starting_stream_bitrate\",\"group\":\"control\"},{\"test\":\"startup_disable_upshifts\",\"group\":\"control\"},{\"test\":\"startup_timeout_downshift\",\"group\":\"variant\",\"data\":\"{\\\"timeout_ms\\\":3000}\"}],\"startup_duration\":0.45,\"akamai_reference_id\":\"0.87772117.1789585312.27fcd0f\",\"manifest_load_durations\":[{\"url\":\"https://vod-adaptive-ak.vimeocdn.com/exp=1789588911~acl=%2F949b47e9-9bec-4756-a347-ecc0ec1a64a5%2Fpsid%3D688bb8966f077a9c61ce091e2ce2c7527791359c1789585311%2F%2A~hmac=545ab22d4c62e7fa4f88deb279d799acbf91ca3f3a339dc866bf2d15f46591fb/949b47e9-9bec-4756-a347-ecc0ec1a64a5/psid=688bb8966f077a9c61ce091e2ce2c7527791359c1789585311/v2/playlist/av/primary/prot/cXNyPTE/playlist.json?omit=av1-hevc\u0026pathsig=8c953e4f~Kl4QaYquD3LAAH_Op1PHeuCzeJ7er9LB4wuJBfQkenc\u0026qsr=1\u0026r=dXM%3D\u0026rh=3HXVtd\",\"status\":200,\"duration\":272}],\"successful_segment_count\":1,\"failed_segment_count\":0,\"name\":\"video-start-time\"}]"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://player.vimeo.com\r\ndate: Wed, 16 Sep 2026 19:01:52 GMT\r\ncontent-length: 0\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":4206,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T23:51:47.12966Z","times_seen":18504645,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vimeo.com/flarepoint/Hqb0y2qg","fqdn":"vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://player.vimeo.com/video/1028851046?autoplay=1\u0026muted=1\u0026background=1\u0026loop=1\u0026h=99f72901ef\u0026badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-09-16T19:01:53.283Z","timestamp":1789585313283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 12:27:17 GMT","end":"Wed, 02 Dec 2026 13:26:58 GMT"},"fingerprint":{"sha1":"22:90:8C:24:09:75:D0:BD:92:C0:C4:CA:0A:B5:7F:01:F3:21:F3:B6","sha256":"0A:3E:75:E9:A0:0F:D6:CC:C4:12:38:DA:F7:82:0C:80:CB:BA:10:C5:03:5C:EF:D1:C9:B6:90:FE:ED:F5:4B:DC"}}},"request":{"raw":"OPTIONS /flarepoint/Hqb0y2qg HTTP/1.1\r\nHost: vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-pico-auth\r\nReferer: https://player.vimeo.com/\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 16 Sep 2026 19:01:53 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\naccess-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 600\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://player.vimeo.com\r\naccess-control-allow-headers: content-type,x-pico-auth\r\nx-envoy-upstream-service-time: 2\r\nvia: 1.1 google, 1.1 varnish\r\naccept-ranges: bytes\r\nx-served-by: cache-bma-essb1270077-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1789585313.298758,VS0,VE174\r\nvary: Origin, Accept-Encoding,x-http-method-override\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\nset-cookie: __cf_bm=GC0x4kQC2t31V30UJ6y33aU07cVwkLzBJstjiXGM5a4-1789585313.2885613-1.0.1.1-oNSQOvZllkPnnq18ey.cWyTkt2I7Jyz5CTEuK564KX3xvg_7_40JMqMQdIHRL1ckMruj1zye7ojvYaaiA6rpWBG6P8aUTO2.SDjYe5LXSgm6bhEJYJImntHY2B5KYpgt; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Wed, 16 Sep 2026 19:31:53 GMT\r\ncf-ray: a3c21f500a8aa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"GC0x4kQC2t31V30UJ6y33aU07cVwkLzBJstjiXGM5a4-1789585313.2885613-1.0.1.1-oNSQOvZllkPnnq18ey.cWyTkt2I7Jyz5CTEuK564KX3xvg_7_40JMqMQdIHRL1ckMruj1zye7ojvYaaiA6rpWBG6P8aUTO2.SDjYe5LXSgm6bhEJYJImntHY2B5KYpgt","quoted":false,"path":"/","domain":"vimeo.com","expires":"2026-09-16T19:31:53Z","raw_expires":"Wed, 16 Sep 2026 19:31:53 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=GC0x4kQC2t31V30UJ6y33aU07cVwkLzBJstjiXGM5a4-1789585313.2885613-1.0.1.1-oNSQOvZllkPnnq18ey.cWyTkt2I7Jyz5CTEuK564KX3xvg_7_40JMqMQdIHRL1ckMruj1zye7ojvYaaiA6rpWBG6P8aUTO2.SDjYe5LXSgm6bhEJYJImntHY2B5KYpgt; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Wed, 16 Sep 2026 19:31:53 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":1091,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-09-16T23:53:12.327051Z","times_seen":381489,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r.wdfl.co/rw.js","fqdn":"r.wdfl.co","domain":"wdfl.co","tld":"co"},"ip":{"addr":"65.9.46.44","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.104Z","timestamp":1789585311104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"r.wdfl.co","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 01 Jun 2026 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6D:6A:5F:3D:D7:41:A4:EE:B2:A9:5E:F8:20:06:8F:D3:87:83:C3:31","sha256":"15:F7:7E:B0:AA:07:99:6A:48:37:9B:55:35:47:9B:10:D7:1F:32:6A:D3:22:E2:BB:48:86:91:86:0B:86:30:45"}}},"request":{"raw":"GET /rw.js HTTP/1.1\r\nHost: r.wdfl.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 15 Sep 2026 08:50:25 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\ndate: Wed, 16 Sep 2026 18:50:26 GMT\r\ncache-control: max-age=3600\r\netag: W/\"06d623224879b6f691d4f44dcb10efee\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d0f4e1c001bf7988ba949b35340fcf18.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: PDtG_HB6Bzeq437zyu8OWVzvDVyWc6zaZyh0wT9x1nicIaoclRiyYg==\r\nage: 685\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":11460,"size_decoded":4724,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11391)","md5":"06d623224879b6f691d4f44dcb10efee","sha1":"7f03892a26c216b8238932e57fff8b6cb4520cd0","sha256":"1afb62188dd85ef871df7d22b7727324c3b3333d33accbe51bd9f023b372fff8","sha512":"4685f218dc5087b2c04788211d7ca885c665e4e627c21682d79b1ccde8556f7b86c0a74a4e2d966d620972aa1e1d0c949084393d800dc01225328cd3ef937dc7","ssdeep":"192:fH9rZDzJ75AI4L7SOSVuX3825vcsMOIFEYR0C1GyA07vYY2sZ8WJT/RkCVSP:fNZzJ7eIyOOSGHvcjhFEC0C1GyA07zZU","tlshash":"f63296d170dba8b207d5045a55be1317f3990cb6393c8498f5287cee3e59d83823eba9","first_seen":"2026-09-15T09:04:29.057326Z","last_seen":"2026-09-16T23:04:02.987949Z","times_seen":18,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":43,"connect":9,"send":0,"wait":11,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/quote-icon.svg","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.125Z","timestamp":1789585311125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /quote-icon.svg HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-type: image/svg+xml\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"2e8190ac1190280608122f28282af3fe-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M2NSHHD0FV7W4T1VSHMKC9TS\r\ncontent-length: 920\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":920,"size_decoded":1338,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"29d797a2cc27571d0442c599c91c5f51","sha1":"6b39fe1e65720849ffb07e0ee1dc34e4209fc3f7","sha256":"467d9c4e63dd6570eaf5fc3a39427546f65786f9f859b53c24be8cdd60ffe9d5","sha512":"a0e27bb1fc1e5d94f97e1d9ddeb114f4f5b3256420c98270fce1c5bf4b2219e3acc1692737aef420c38bc504be91078b897aa428b521ba230983fbb9fe6bf122","ssdeep":"","tlshash":"9f11d0750d5903f8e44297f4f327b59a2561a085144a84f7cfc66292f11fc555c359f1","first_seen":"2026-09-16T18:55:25.483449Z","last_seen":"2026-09-16T19:02:40.523858Z","times_seen":2,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/.netlify/images?url=_astro%2Fsaga-users-avatars.B6fyWL5J.webp\u0026w=74\u0026h=28\u0026q=100\u0026dpl=6aa6f0071c11540007a13f55","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.135Z","timestamp":1789585311135,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /.netlify/images?url=_astro%2Fsaga-users-avatars.B6fyWL5J.webp\u0026w=74\u0026h=28\u0026q=100\u0026dpl=6aa6f0071c11540007a13f55 HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-security-policy: \r\ncontent-type: image/webp\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"83e9cf10f200b0b4594572f9fb9f0c9419c11ef4f456cd1373b46bab7f2f7a00\"\r\nnetlify-vary: query=crop|fit|fm|format|h|height|position|q|quality|timestamp|url|w|width,header=Netlify-Image-Accept\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M2NSHHDHCWB30G6M005SX908\r\ncontent-length: 2908\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":2908,"size_decoded":3476,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5208c06945a98ddfd5f2ddd37b64cadd","sha1":"24b2b771e2f578cfc9999b9bf4e8eb472f6fa03e","sha256":"8e6649be663c7269964a40b0da4217d8650721eb57424857c2e711b153799892","sha512":"3b9ed03ad5e4e8a4a114f1add6d0fdac073e45fd79c0f22d5dd40a381832fa18288f231d71da6ebf78aeff172bee42e29921bd8cfbc126257e32632d6f78fc94","ssdeep":"","tlshash":"94512952b7005b1ac0363bfc98e00f61e2a73b568b96520a8145c77aed515dbecacbc2","first_seen":"2026-09-16T18:55:25.487672Z","last_seen":"2026-09-16T19:02:40.524557Z","times_seen":2,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/_astro/logo-slack.H44ioA73.svg","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.136Z","timestamp":1789585311136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /_astro/logo-slack.H44ioA73.svg HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"56273cdd3e71beae2ca0209c37bc0674-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M2NSHHDHEEA76KSEZ6Z2AT88\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3885,"size_decoded":1887,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6642d7f7b295e290e89e86923fe73f91","sha1":"6c965ca399b636c60a35b87515504611a1e6527e","sha256":"de9d0c1a3531d24f11227ec47557e472d8b4e834b5f19e70e4fb5e29265aa496","sha512":"b9faa32fb0762dcd085a72d87160d1dea5ffe5b5b3a31ebb81efd75579cb17c9fa4cbc3e529c0447700952e71ed4594e921450f614611b2848322380083450ea","ssdeep":"","tlshash":"3281a8e6a2b893f1ed1097b8d63991f6b4532cec3267c14d43746668fd6119a48cd8c1","first_seen":"2026-09-16T18:55:25.454403Z","last_seen":"2026-09-16T19:02:40.525436Z","times_seen":2,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saga.so/_astro/logo-leboncoin.DtLNfSWd.svg","fqdn":"saga.so","domain":"saga.so","tld":"so"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://saga.so/","date":"2026-09-16T19:01:51.137Z","timestamp":1789585311137,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saga.so","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 03:34:28 GMT","end":"Tue, 01 Dec 2026 03:34:27 GMT"},"fingerprint":{"sha1":"7D:C0:EB:9C:46:F6:47:7A:22:F4:2E:19:03:B4:83:38:E1:64:F2:1E","sha256":"48:02:C8:33:57:67:31:DF:7B:1D:CB:D3:A9:D2:00:01:E3:0B:6C:55:E7:19:51:0B:CA:C4:19:5F:B4:29:37:61"}}},"request":{"raw":"GET /_astro/logo-leboncoin.DtLNfSWd.svg HTTP/1.1\r\nHost: saga.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saga.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 16 Sep 2026 19:01:51 GMT\r\netag: \"557d0e90f8fc84d2a7659bf7a22f6028-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M2NSHHDHF2WG705PE5GRB1TF\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":4145,"size_decoded":2118,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"15cec22042f63d45be925a8a304ec245","sha1":"853f9ae689ff67b3d06d0bcc52e3a3994a353d4a","sha256":"5fbd214a18c1fbcaaeaa56a0e70cbf291016af58363b34bfe096e0597d5207ea","sha512":"204508beca381015e25ac0e8086f10d3fbf6d84c86241d3ffb4924c92341a453a57140fa371da08b202b0d4be61bf4a8bfee1dd0fa3309b1121b0e518af6755c","ssdeep":"96:2UV8QQ1me+hdryw7g3+IhLXaEp7YIgw8YMg55wsBIho86:2US11mRvymg3+LYXZn","tlshash":"a08195e521d4a2e89104abe4cd274479fa7d69fe2781de70c3be9e50e02536dce44cc8","first_seen":"2026-09-16T18:55:25.50657Z","last_seen":"2026-09-16T19:02:40.526225Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"saga.so","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"saga.so","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}