{"report_id":"f427eceb-a8b6-40fc-8435-b53502324a8e","version":0,"status":"done","tags":[],"date":"2026-09-13T03:04:40Z","url":{"schema":"http","addr":"ultraban.com","fqdn":"ultraban.com","domain":"ultraban.com","tld":"com"},"ip":{"addr":"76.223.91.20","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"expireddomains.com/domain/ultraban.com","fqdn":"expireddomains.com","domain":"expireddomains.com","tld":"com"},"title":"ultraban.com for sale — memorable .com domain | ED.com","dom":{"size":41795,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1184)","md5":"9fc879e2009e45175943c145f74d5c6c","sha1":"6f8bd3cf7d9606687a076f88230cee439f8a880c","sha256":"819daaa5e74fcf91a3f7972161f8a5a9eaaa85a1e497e3e46d3281393b200585","sha512":"5945f396d22bece3b70c14110592a8c8131d0569b6b6886314eedec9bed80726b8693985716d61a584a8128b9b4b9d65cd3ad5a0d0f59933eac2d1b1553f3aaf","ssdeep":"384:K+sc9tl1Pt92LLFJYdSpcnl2SoV1DyequAr7yw0Z7rEeEHkh7HNRKtnx/m:KNc9tzP+Lxpol2HV1EwEeyc3KFx/m","tlshash":"e813b63112e8193d619783aafb65b72aa655d207d21bc258b2bd03b10f87cd6cd336dc","dom_hash":"domhashbd579108e67a2b40f54dacee4ef907e6","first_seen":"2026-09-13T03:04:43.867783Z","last_seen":"2026-09-13T03:04:43.867783Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ultraban.com","fqdn":"ultraban.com","domain":"ultraban.com","tld":"com"},"ip":{"addr":"76.223.91.20","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-18T03:04:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"invoke.giantpanda.media","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"expireddomains.com","ip":{"addr":"104.26.14.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1999-11-10","domain_rank":1540,"first_seen":"2025-05-30T06:25:49.49318Z","last_seen":"2026-09-12T09:29:17.927588Z","alert_count":0,"request_count":9,"received_data":410432,"sent_data":4983,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"ultraban.com","ip":{"addr":"195.201.128.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-09-13","domain_rank":0,"first_seen":"2026-09-13T03:04:40.606346Z","last_seen":"2026-09-13T03:04:40.606346Z","alert_count":0,"request_count":1,"received_data":253,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"invoke.giantpanda.media","ip":{"addr":"104.21.2.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-04T10:10:01.176086Z","last_seen":"2026-09-10T04:06:45.912537Z","alert_count":1,"request_count":1,"received_data":18187,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"new.expireddomains.com","ip":{"addr":"104.26.14.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1999-11-10","domain_rank":0,"first_seen":"2026-08-04T10:10:01.178519Z","last_seen":"2026-09-10T04:06:44.655964Z","alert_count":0,"request_count":1,"received_data":17117,"sent_data":579,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"expireddomains.com/domain/ultraban.com","fqdn":"expireddomains.com","domain":"expireddomains.com","tld":"com"},"ip":{"addr":"104.26.14.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-09-13T04:08:23.330147Z","times_seen":200965,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invoke.giantpanda.media/bb50b5b7.js","fqdn":"invoke.giantpanda.media","domain":"giantpanda.media","tld":"media"},"ip":{"addr":"104.21.2.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3229e73657769ee9a08e224a1679319","sha1":"f2ee357492c24579c21de9dd38f953e892608071","sha256":"5661e5bf8961147eec9c3e09baaedd6c47d656712d68adcd90257caeba3de6d4","sha512":"40890c01159d0403e72d6fadce322b0d5ccb97bf28c67d0e03e21a14364835d55b509fc1abca75cd8c3cae672178025c07abd33d1ce38499019579c4b1959925","ssdeep":"192:Y+KADdNCW+hpfnn6OgCsxSt2o/QGAE6RmHmF9Czmc5D1cJR47NvF+LGnaqNEZSwd:Y+pd6nx1sMsGAt2x5BADiEgw++","tlshash":"d572c8486d82a03468b3933bab9f563efb25961305039b0275bcd1590ff2a61539defc","size":17528,"data":"","first_seen":"2026-08-04T21:20:49.226022Z","last_seen":"2026-09-13T03:04:43.873854Z","times_seen":608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"909630ff0251007962fd33ac7432fa02","sha1":"3561ac0065ae1a2e55c00ed66db1b86fd6de91aa","sha256":"5f6a0dfe98e8a9b27181ebb9cfc664d3d371269cd186a4001f6208060c1d1151","sha512":"550e96433930ac9b60229f8b54a85b4a02757b58af2d468e143f855f873c06e9ab603c4adf20948de418fef77e39e88b3bd405043cff9a1c98741c5af05741e3","ssdeep":"","tlshash":"07d023995d75cc3051d4014f30fde3a43570319067117504c2cdcc1f6e22dd354b195c","size":217,"data":"","first_seen":"2026-09-13T03:04:43.876509Z","last_seen":"2026-09-13T03:04:43.876509Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expireddomains.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"expireddomains.com","domain":"expireddomains.com","tld":"com"},"ip":{"addr":"104.26.14.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9033131ab2a1391c4be35213f67b1fd8","sha1":"c26f2c1182691247f5c8d875640a0c441bb07850","sha256":"1961d1929d3b2df268621a5584cf257ed064619ce34f1e774c5a7152253f3b2d","sha512":"4cf8679b29073f73532112d281a48a0a6b2555013cab759f0352334c32382be94f541bff2ce512ee79d6b255f1081b65469ba573306a9ae3b5a071f92d5d0ce9","ssdeep":"384:U0RkNEG4aSZ5XDE/oV8q/vjIGS50yhECU+AZgp3P6v/fF1ts:DR+vRv/uG9SD/+AvXts","tlshash":"f592988b7cc9b8941785eca8902f31dbf26e1da0085c6dc6c220c9ed7e66768f597d1c","size":19398,"data":"","first_seen":"2026-09-13T02:25:37.107638Z","last_seen":"2026-09-13T03:04:43.874915Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"expireddomains.com/cdn-cgi/challenge-platform/h/g/jsd/oneshot/330e41bb475c/0.5677630750935815:1789265116:ZPPUMvoo4vrp4X-c4Hzm28KN4z6aH4AN4lS-ZLbOsq8/a3a3ec500a4a8deb","fqdn":"expireddomains.com","domain":"expireddomains.com","tld":"com"},"ip":{"addr":"104.26.14.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://expireddomains.com/domain/ultraban.com","date":"2026-09-13T03:04:12.327Z","timestamp":1789268652327,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"expireddomains.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 08:29:59 GMT","end":"Wed, 30 Sep 2026 09:29:48 GMT"},"fingerprint":{"sha1":"01:5E:F2:F1:82:FB:C0:20:F9:85:F7:A3:EB:CC:FB:88:66:5E:1D:63","sha256":"46:10:2C:6E:23:F3:48:54:C7:A9:6F:CE:DA:8C:BA:E2:65:DD:45:B5:B8:1C:11:67:C1:A4:82:0D:F0:1B:46:DC"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/330e41bb475c/0.5677630750935815:1789265116:ZPPUMvoo4vrp4X-c4Hzm28KN4z6aH4AN4lS-ZLbOsq8/a3a3ec500a4a8deb HTTP/1.1\r\nHost: expireddomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13838\r\nOrigin: https://expireddomains.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://expireddomains.com/domain/ultraban.com\r\nCookie: PHPSESSID=2hvrasleeusl5ojj3ddhlf26s9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13838,"data":"r4AbxK$CJryntSrjB0dE6RWLNC-BUPNLfbHBpe+P+jnQTAOhqEFhyvdHROyEAmvoWUhZnmaTgVqJEe1DyLlYqRfA+LxRu6hdsev9exEZrcZm10SregSQhFhhROYCMI0WI-CTfSDy4eqJXCScWZYD+M45ow1PIJJ8joDaFEhq1Qa9Bw9cof-BhU2+s9JlbcthA1JvH4VADXXK+PPD+tc56o-DthcDptHQVfJ4DrLrKWBBVlbs5K-Tc-GoBKGO6c2kniLQLXoh8CcrOLJT7yw7kjZi-O4dMbj6Nxpc0ZCZWsPwwBCeXln37aCZlZeYisvy1KGWpSXjJvgQe7e$t3rZEnhmdlgZu1mGKOtV49NNRnsGieNiHO56peaBxC5-joYwfv4dem$qJpK5M2SfXQyH+IuAP93SmvPQNaSLOxKmVk8bO17fG7V2-o70nDiHJOW$EQUJeOhQgQcnRaoP3rvjGPRSDgxREXkFL-i$WFI0GrAdU+kk84iXvFiX$HSNrTOMkLxidXg-rNheNvD79NxLsubsV$2JdvRxeGQ9RwIqsX+vGij5cxjcik8mxRG$Ga-NVIXQOIrB41W9Fo1EsUU6iRKNFeTo$vIuuXnxX+dDlKcfvfWaXaCMEcnJlT$Shl03+4gkk0eSv9kxn$HVlZtMBpv-lNjwiSlRr6ba92Pd7pEYn3WIJlBcV1hkoYq7RrxUcfgXkl+VcPptptMeQuPspbIue+hxtxibJ3pXKIqYdVtmQ8bte1am3+WEG0K0o+fFIGKIGIH8CTxN34I2M9Tf-Gj2v680$ZY+S0BwVGj2oeQ+8vB5PPuScK0UDSH8pu7IEtybWre7LqvkrR$klChGhDrdpQhgEEI+PbbDDitiqbt$rSP8myl9GGNRJxkJvS3g1sW6KaV7TpmaIqfU$nPvjBvJ0aN9E4YVqcBjwgai3vuLsyAeQoCnCaJCjLE4gcLXfJWN0ri-CuoBSboM-4Pb1WLuuVdPDpnrg6xn2aaaWS$hLwetUxSo1M220VTtjLr1I+1qJ1MoqmmQxX99WOPNcoa5v-YTUSqLJl4f-rrpV9-O3XxYBODiE3XHDr11qsTaaw+RmJIP92-ENi$ceosQxoLLuaUTDO5-VDgQaEuZgv$nlalOBVaCNkhkse6Ns7WRP8IW5gtDOZ0PPj-af0e56DyAlOlEfoiM0l1pusi6gHyrmC6IK76NdQRFGk$hGVn+N2kJAVKbNrGYCPH-CHPyiolkDTbc69otHX01lCaHv3oeIuVg8Jfc-KuIWV+e0UQvM2EFn8V9Zp9HkTy5XKt8p0WSItsFJmpP7LFDV10W-yy9-5hUnkY-JKefwChJ9g40syjc$eACdKOQLJCY+9MHwrp1Ra2cl0kgGRvmdAbxu3Vx8Q+++hCMd2lKu6f4$S1m-U9t4B7Z0N0-ZGI3ubJB92amOORoeW2xa$20lm6OZpT4faHZlZgfJ75G-TrkSb0IRGSXylQvRhUGWOJhlc3yc5libO6curjQveo-y+c7FFvTWNV-VxNu-3RGURNgTLxdxbgKMUqji8mn8VLaJNhOQN-o1YB5fmtocfF4vh-wvKY1SdfaCdy9Z2t2H7kqmqcQ2ihEemaK52vyNCOgk-uDdlh+D1A3ZCDS7eRKAEReX0TFmmjbIFlHQgylVkeLtTIy+8-wA4iwLF-mTeB83SeG-o4riZstpqXAF33vAFO+Eet8jyJPOyUDc3Z5R8FhFy1n4GaD2fVdIty$V9AopFYl$E7Q-Ls9xYQ+JXen-qh+ebrxJ2wF906EQnOaABD3Yg1TRbYHnOy2LwYkI+2vs2MX1iWD8ToIE1$eURHdTbQxrbgB7XubmQ+EnXs$qiXB8YlImLEwOLhmros781iYccFAknaByyFgw0RO9eH4JGmaEI4fFH3ANNoDyqiA-Q1GJAA5UxVaicgF3AA6RZtrABDd+bSiqCcb7G0ofZcy-jw+k4kl2XYjNwAoeGp4mRVvAtX1BOXWHPWXnyAS2g-I50NqZ0+tn89EoETGnhw0aZsUBCPKLG1R+LmHr+w9WSGq3NDngjVh2i+SjivwIqI6GWbbs7C+0qqB3ZDksA2CbNm+9glTfjuL-kLVNJg10SKYwU9JRgIeoyhbtU+BcVeD+Hy+hX1BhRQAoHygNXtEe3d3EcHZZaVok$yiAb$jvS0qhEmrUgE-S8ismQ+dwx9-VuthCQFDj4sb53mpMlsdZ-NnLL3cjCLg$wor5e6l9aJ6qDapFbuJJ62eH1A10ILk33jvAjLa3AUHicYQyG2c+CxpqP6hnv1hehI6Qm4K0wQTZSMgXV1NDaLdKa-Vo-OGqU$cKfkQAv5nAssyFjAlGVZfKoXdwVSkjAiJLYYyCuc3i7ncGXeQCWUDspNQIhgJSC8FsHhDmMItqsOydWxqHjEOb20F$C++5cpET53Dc$cjETVOJorv30m2xbekDLZnCLEx9lZpbxW5kUWEI6iBigtPbK$O1mwf+ZadQ7EqD$NLb6WDAPvxWuMwtjYrwlc7AQxEe+ka3T+A6Gb6j51O7$WSc$XwiyaZ1C9Dxwe5GJJ2BLOD6L3T+EYiGuQki9Q9D$9ritiuHsM1+wf0E0NG5khlIaJDEtWqfXwdZnTjvqLvC-kQ2$iCUNt076SImRjqya6c-1iHcXG7KDSk1mgaWo4yn+FRfD97y1+5eH13PmyUj7Byk7IdZbLQNxJREo5yO5pNJPH8mktNhhj3gY+G76X+YIXfiQwxqHJ3RiTICGQUsYtZFwpwkjrsK4H$CvTJb0-f$OwLVR+5OkqM6WZaW1NPgBZVPX9sPYMaQaMqaFfnfEPiExnaY$Log0wpTCtFkq-xQcNhUK6Wr4Xac92QSQyXsg1pwyXS7SJSgpbQWpjSr6bwLBcD58ZWkc-kZdYe754vTsv+BCp3juBdtHSZ2f7L12MVU8iDyiS00ZC9Bj8njN9O4uFWw9pdJkANkJ05xBKg+SHlReULGhc11fW4SvuhYgGqv0LTf4RZ1kYb2i4NfOtR-hfX4PWufWuVpqXTQCFUYDA65CApl3QsM9scIrSyryA1NL3149uZ8YHmGAbacfd4w9ks7348twUb4D601aoessyU8y78e1mF5xvWgS7wxntQBBAc-B5yxXdh5BaBfOP020jYasJB3ac83AVQ0FF+63eoqK+G8pHBlZRN$KSGFWuUBP8ji4thpOroul+1p+OPUp8ZnWixTy1ehpRhgpfXIqpNyrCn$1K$3qR6NbT-Ip32Gp8+TSdAuZ$YZLT2Uo393f0yHF9Z-WqW60qIEjWC4p98ZejaoPVyD8vcmPjBc1rK3KG$vL01$R9ea1uO6C0M0jII$xEU7V$bs9mUeL7$C$sVC6-PIUO79OE+uP+xf+15rEsuZwmjES24xMPODWbtinh6xbGGu+DZTDQCOSZXD9wmSh3RE--S8taQq-+hQs2pSJIADvhViN$tQFyyDlFweYdvcJmxobYGp+XSnWhOqbfpq4mlGs+fpLJIeISxrXQqYnZmby4ppD0ek+WkkjKgAXKlj$yO5gWNf8CUU0wjUqEkWmkmZXeQpM1sGkry0XwGVQVtc3kF3VdCX+Fpi-DsbcimDT9Mj83XwhC3vaqL2kdkTqmAG1GV2DGUkbBJHLMkVUeoJ6vBYF-mSFZdF3jF58rM$CsUH$pTfMd5b6aREP6DQ3hdZZSjjU04SVAkkKn4nKgAoISisU$AwQkh+9-WEJ41381gXfe5MA+YU3JGHxaSBVM4yYKXkn4-N+QVHHnCsdp1Bx9io6XSsn66s2SyNF2eL-yGJvbBWt39Q2W790OtGhElJ$+PPp8EE9dS4Lk43vXrUEdG1TbBh1kTN$xfci9dPl037$e55$-JSePubSPcB4ccn$wB+MKPJ93sbGqOGF$QnaM7tK+ABBJy5$3Kp6+4HHW8AT6-AJrpb-KdSsKKvZIfBAgaUG0SNCpDgl1U37OKJ$AwOOy9RrQXhKMqnaG3lx7pNsqVGaDYURqhADOn5J9aug7XRY$vMy2ugPolT$76tR9wxlvcVccynDIpWfhsOeoEREDtyKsf5KPWI5cs3qdjj-sugeivXqP3DlGC9A7yCZxluwoHaglJwrULneBRouTKiLJKerJIIrGY$rYtYgACXhreWY8AYENm93T9l78WjDhUSPpk69uhbs8S02pJasm9Pfa8odwWdjdNd9MPT1kB7BAK0NDf1qxo-brLor7-xfZOxehX9bCU8Knp7ndRwq4SlA4UjZxu8Q-LNpkdAqKPsFjcNp1xorCd4dv-51dbNBIaJ24FU68W2$58QkbcOQAkVL$J7$RtiqpIsZtRif8HrSnZ6KOP8NiBgEPLS4CS+gEAi7GZgrvXgZHY4QPqOiZWYMM1hQOOiAwo5LIlOtDSBPbI-02jkxEb58lvdNqHnr46XJBh+Sms6HZClSP0RxI8mrkXwVMaLU8p2wMDDcD2l7Mx-Ee51m$efEanbJwZCKSR+Ac8037PbbekqcicD7iQmNRJMbDl9v0+t+hr5dhjN96292HZ0NI9nrkxESqs5Pd9Ofxbiu49wbsj5yhSUDWPmlpG$mAhv9eBI8lbFkmew-L6h45AMYmJIQiykXaVLqxUeu4Sr7L9AvybSQms6PSB7IT$tlffTh2pBNhRE4pOhY+Ue6KexHKRPxV88OEnhusBKpxlEsAXp3AMjMltABqNZ5OPU-Twqaw-+h28tKaPmwDpKbd0MGIJEletkfaM0$0+PJFWlph+pYSUJWE1ljcbo-qmHmLsWo3Iy9qCtCXx8N5GuN5DbCp6B-eTmI+-CkgL0kY4BPcwLGAYWRIdpdsad+1eWgVR+1uEfPXET4Z7Et4ZtW7xmVEXBMYZYo+BPgd+cOc8+cYo9dmoudCB3E0KTqq0BtbbIucA9OHrXEMZIOgdnUEblpdwskKDf+ByRvv8GW0mZqV3MEmS5xkFb$ZKsPCJSUQc-odrnkWr$FULD216d+5ebBbB4lOIDZ$GPak2Q$8uNGhE3-DheJNg48G8Rkmm9DcMXVZZpkr2Gko4qRuINW+oRyhyWmURRtlo$XIYu6EBir9kyxchjtRDOUc-cKy7PJigdI4nMje8C43KKHAYaqQIKU3jp2gqd-1RQjbICufCy1qq8v4ctP6iC06YK$wYRemHBGMTnKMQqmcn8fDZGt05E2q8uH9nNwc+4t08pK1Dm$hypSUr3JSF7RrxD5O+d88k2ABphCgT7q7b6nC$yUZp+4RGhA8n5O7APvyqPr6xS-dfFYn0nbCkP18iRr3stnZiiT2HVSaj317Z1yVG-waVkoya7jw5ydtZF9wZl7H4ycif+f+HAHw63jUnn7xdY98yxonvcSoETQ8xUmoxMBsC9nOoL46orJGNqcDUZKdv6olw+wPm85RUP4NiqXPMdN-UEc9RR8s9g9DGFD6McYuNne0nkmM28VuH8DWrjfH5CyguvcYGFn9+FrW1L$ds2p-Xmrt2Eqn6WfgllqFnFlIasxXJcxkG9wFtZhNsOrD2fD+m-8GJ5VwKNCjpQqh6oLLYsobdBCZft+8ThhUN3rejrBB93gO8+PGejhXKPiEXpl0luVaamHtLOJO3WRnxAjtp37l2Q24O1M-K+LtpLFwQinMqScvPUMp4y3UHS4o1X3YuMl$c8BHRI+Au9kOe-r2bTYZCs1cKyB2FysX+JXE-FoHkt01ORdkRrOl6KMuADVGCYqVFhLCjZcebhdo2V8Seqt0+4gaklOng6tGhrh009dLUjVNXCvwLJWCAQuEY4Ug22iLNj87aQs3OSJMgnlZuBlRQwO67RY6WUmwFBhW3vq1Ot5eD5NUGOK8tMj3N2yuE+-qhC11mjeBuWlTKIn0nVNBRnmo3G768El3JdwH6kkDYVOntsqU-cY$xF5vsANnf+4KnNiWuVi0f1-BOLg6U-FK3B+mSa8vlZgLmp3LXTj92pJlY+-gtkZ7aKbeOX4W4GQaZ$AbSn8ceXUZGEfLVIRa6Id4Zj2S7uvDoXC1uFvlMCTKUqFyuooMN5Y4iqjbWIQgeD$R9rD+JkfGGc8IIXJylPRQodSI4DS$oDOjLJBsb88mf-F3Q2eUp3b5sCYUyKTC+fbE3YEr9nJDaCtG1JjPJecTr3e9N9JK72usPIOXW5xkeNaAomjRy-NZfqC-NITCRJDFiWnFloMxF4Ko6Dbt2Nqi31ehoR1GOvXgfcJuFxuQw7LXSyGBy$nULme7lT4hnSMww+kdIJ9ZWmhMFGMtR$$Ud7uq-ggjXw6H$U3--pMGuPeQDy$tsRVTUMlU0VVI9F5CGQ7YKBupkiqo7QZk+U0j7GWIsCFgfFQ12NLmYbISqpwC4pppnjetUl6$VDZ-NGZ6boI-pjI51wZIAS8pqAibQMNLuCE5o8$c2ivwImacGLY3d5Ubtg$iBPB3NZWAbGL0aolKMtITbiSVwnbU1-yxc2mneY5GeaXVHPLCiT7kGafYoc3yqkfdadTu+7K4eU3vgqVlwnCKPecE5EsfR0WVVFPahfs2tAG$$gLT8RAspkd-iJkfrFdKOA0W91RdMepStGgjBk8LTOJ5cJCuc3lkt+yO-QLiMmlkjG6+R4g4IZDQcQy8wMXXmklD3EycEvlpS89pgCSBXG53M+ZSO5msa3O1UN9q7qCYVIha3qecTYedY46h-KvlnN7RDU1niWFuopPmr9LIh+jr7-bfstVNVqNvTNguJuh55E8SdDhnu4Q$rJZnqloYMolucZ+qQ83gVjKOmHO7$hEkjiCMXOEB4VNIy-f+5P7Z9pFsdogYZebvn9$yxD9b9t$99CkTAYueuD+5syLOWpeTFJxIf7PkxI-HsKsWby$AF4wHF2JPeJJ2gbjAAG5iTNpl6I995QykW0BoBQvEhvP9ePSi8jiORBagiEwajkpB03OX$K-qT-seIxet5knQ2N-mE7GO3Ip+1UnIHovBfxX4TaAttPC0xuFoamTS95Mf3L$JwLhuNB1Ql61cdc90B0uTu2t-Emjvcxp2gl+s57x9IOsaKDHueOItNPGKkuvfcQmgkUa8mDKooKvG3i02eMnkVY9XwkCTPNvLI4fBjLrA7GNtkbnKMR5XNyDn75rSVlkSVojRjiWY$O0v9mYCKJDbpl$$86Id6umVcXwZZ$LUEtR2+tJjpXnmp-ltvL9wdShic2KcB-RXtwXoaL2t5FI6YHfh1hdWWeX2dU89HhqHa8x1er7tOV2CKT3DGAAoW6MZF+64URc4p2VKuEDETrIBYjPOF2rA7cNpKJxZdi+UZcd+UMSWfe9GKXMVxtujTa6OFf8D-9q-NvhoYFnysoL2ZvWoqrMGvgNY9okilF64MbAJO715WT4VNRVRdeTT8apBb2$j9bR6muil1J0lpHjbaWS5X-WGhMXpHPnNmwK2vuvS-Zx-OFfHokfmZYAPN1nLcfcGTlLf$GrJPm5usUYyHGojurfHK9WpBnMfYxJa45OFGAUiiIIFFUWL1uSnRdYmqOPLabsaRVGyDEfoNw4fdHE+1V6Rm6tpHECCLryiSoHJeKFSasCLJIjeP0wGNY4VSi37SMPjrTKp+9U294BIaDalppG9ZgW8Wi9T91oKbCge14XikNS2U3vQ1ybJYiYZ1B-Mie5sEM7SgjOT+JYnDy8jvUPCmBvlXPldoUUup3ZGm77m0yrB-l0+4H7h2QFPiIYL6Ywl5ke9$CmvLo4ENEaHgYPVRUyVX0QPZ43574$9QkaN$U0Ne0mFGhEWEfQyKJip6OaBqhdl7UOWyeAvDlbFeNLjsJI37lQvAVHkkDjtCGI45$tTOlOWZZVY0gfUK355CRbC6fEwENFAUCFyRkEwo0CmnrUE-lT8oPrPlq$PFf4ieGfvLfcd8ZiZT-pVu$2BuimkpXdZUUo6DlYYVBjjMCxAGphvAUJOMfgx+c7TVowjibSLEfkNtQ50mRyWqL+bTvXC4Z6Sx9xUM2-tWJ+XyQGLP-4i4LXPI5nHadZ5$D3BUqj70yx6fJ+JhHW8CuqC6Td94IXIhX6Tdv8Hfq9QAZI2N-9Smc7AQfiEYEenKjJYn0iql2Ljga0Ep2Iaf$q2a4Q4WuVm$Bm53gUDXsK+pEtE5C2G-gFSuoiixxI4WNp81rQPjltXQVoPnQeQKLdiVPUyL3yFc7QQ0690q0k2DJhEqoFWf7TdKdW0pmTfoxdrks2r2jGIFe60PLibR2L2tCR66PyjVRr-ZeV4KrxoMx5yNMQowoFQmHuHT$FiUuwfkm8CBV+$rEVNVYMtckXh7jBVxl7rSEFkGM4OfM7k5RB1x4$DTNaxBq1tT7qZs60$8YciGpEnqxuvjP7iJ6pHuY+9RvGV56eYJAEUBuZqb-xNr7r7$+4ancDXL8PYgynrcILBtiyCxka$yAVq263$Dx8Me$IaOyAmnU8P6n7x7vcXQLBLJqcLTWoE1j4M80$bkq5FoXLNs1oEXJlw3uEYXa0N58tWY2gRiaC2nJaa9IDkiMAkEy2810Pnuw3JdN9s$SKcdj0DkRISKSWjgwqNMIAU14Dph1Krc9Y+VgS6A3gWKqeC-8X1Zjt1jgtJyZV$Tpj7RCFH6OKAdQ+sOmanqaXFkIeiShy2$-yjYYVeIQJl1mvlnsPRkGhZeAxdZCu1cNTRO4eDJUSKbn06kI3lMjdhBZIEeBAbcX8M$Ukoj4iV1vgMvIgj3DY2feZr4vUYImFo0F6Q$PbXMXgIZaTZbwbnt+o2-kbBcAhtuv88kPbIcaDYZlJqDThZWiYy85Ti2jZXmDFrJGbi1lYwv9GvCmO3GofIndGh+Mg9dug8aQVOq40hXRFJ5Yi5k5dJ$RFN4iDVH9EKImsbjwQYZVO-km5dkaw6YQASCa2ZNHkloSRpcDZ3g2KCrQQP-ouZQAfU-xPBguyAiOPcgc5uAIKa0W6XWXu$8Seu3Nr+O73O2jG8Hvfyu+dlytyCWfHTy8ILkCmWR$dL9umDpay2+kfwingEAJVIpaxNwpaA3LdPMRGQgUEgUbjlLgdsBmlSJ36VHd4QkJNSL2QFHVSMWve6qbF-HDM21mIhjNKHE25HMriAbUIn+k0hMTfubTJCK$Mm7P9AyoRuYq21LZ6TZ6OpJHHRVeKItkpdwPMySebva8pLHrvGdEd+0BT--OSvmMjV$mFDfqMNVP3dpwedRPtMvNwX6MIg8K6bkA2PBH0GevMUsFQtyyt-iYq+x$0j98Y7FvEjPxIbNixGIc1X1CqwvIZ$mTowmyJZoIjNjHkAbNd9796Ii2plLXl1umgeW58actIN$g3sb4REUKX7O4iWdTl6CUS0oF5jLrMAxgLphRTtIQrwq5yYqdfSikA4ZdCAIFKpUJEIm8$VRf+PqAeZdBtiFdTey4mNxf9PoXljSblVtYafnpnI7o$$a1Zq1pGi+Nqln4pL6YbPDPHtux2BNIC7GBOr0-AOmwlmWJmfgKIPLCDau94pupPBCr+wVuhK5RFQOns2gMFD$lVXT8xhLIio+qRxwahcSRt5oy8K5Sc9WtjnfwiGYYViJbI3BI-A2dqo$ND$Ab2PAej$rLTaPN3-NEde03r16W5V6nbntWWYDpjYryXty3YWUDLuX4NtKi9uq2Zs-uRguybp-hKZ6vNSPMV4BfitPIU7EW8f7Nhmok16BSPaIGHyhvAgEUIAtP9f7k68BAcf5l53B9fNx5-0jD-HArLL1B4oLxmRFELcUNqnUe0rslr7G-bqDattuvMjW7qkw8Ssuur9EHlBAEk02LW$R2AKm$eClgOgQ7ntuc6NwsGG3ZWKXC4eyoTgGq+PvLt$RJ8wIX5QDUKiBBDisdYMGjxWWupWiJXwRhyYqLWQjk4iucuhUdKsVcQX2x7HhpTNlw9j$Ax3nTNWb9JVoyKfbmGjbu5o2GN1h7JFBGndcXytRYtRYkA9GqRFY4WUQaXNTFevrWLf3HRN5d3+RircRhJNwt2oJaHW6ZPx7te8ukR1ZG3PW$+eUmRA9-SN+mZU2tsu4-cvnZa7fJTZJJ9YLCq7i-mwDO9pcQr1EjYPXY21wnhmbwY96BOQU55dHtvDy25kmG4BRUP8wFhBsaujTAtlsL6SkTlCn31m3YZJpvPifR6yHlTTx-l9okRdYUfdKaxkegVd09qKte85Ac3yg1ZD$nrfs3Exmje53aM7RHoAQx+mNDZQlOvGMIGLl9+m$rerbCb0JLYi$L4WPSF9wdGWhfUZxCwJi5uBBfYRUKFKxe2xZAG4TA4+j7lEM68BZC1cEDUHfp12FitOPcrUx6fdYc3yJGb7qfSl52HhAWthllRrB0-XRwMNPq0-vFho-bRuuTj1X8bIVn4RncK3sVhnuTOKYXiEot1UOeTxA0Y3+I2ddOk0ZqMPqOhPVytiZqaopUOX7iixrXZMwwSbj7Z4-xlePBhNj3QeZBSRnc0qvYhnjCs8Z0XS3knu9bogsRw9nI$IcqiFhX0hXsJGueojDwdYlm561Ebj-yOND01EI3IUTopQGaydaZ7a$FF5YqSgFh$$LuQy7e6YlG$jc-GAIf2b-$WmGk$+yoqYvlsdUQy8LkFR4ouqKodQh-4eoYUY7SjLJl8FMlAmakavybaUCMHKxIi1Jffdo+Yvj45M$ut2OEBdcmafkKX0cErFWiNTwcnr513+$WynD0DsYr92-5Qa-aQSsjd0T$c778mMSHKlrMdMF-Cl9BW39QHhyOFHP1u6NgnrlfBsLBhbQj3lFLg1u$ABG4o5lRAheIh2yRQOcK8MFj1BxDRdaYdM3kSxIfYSwD-Ib20k9tjT+HGbyZjRuIWxDUX38-N3EeYZf-yGq5ShEIQTkUXOa92PHyTROKq0d+SRrdjTMwIeRmGOlfZ9iaUrwJEkI0uSDnL+icscZ88L8y6Fr9bCC4DE2QkXH60dHH6TPjGJm7PlULNnfK00RLgIN2UZyWPSV4KiX-oN5mJUdeSxjPfRIiL5iwiCEwK4gtyMT0ZOW16LSiT518+eE4TggK7R6oCiWfjf8KuTF3QHWE+Ro14CBnIyMst6BBuGpW09FVUUb9+pX+awHh0PMX$RsM9H7IbU8Gqh3vSUsegC4yVpB0pNXAo6CmAtheh$QuhX3wZkqtaMd8ZvCk$ErNChHm2ARES6IFPtcSfFK3Rk7eVlJ6SgRPss1vm$AQNSeFpfRYqx2WGrqV69sPx0w256Cjl7VwB4E6ZCOLnlosoYGIjegMLOnHNM5PSHu7d9cqccCfxtZ3hh+dEoorFv$VHAHeCoQB$I0ru6LEN-KQpMWS5lDc6r0xHRHn78bcE-bZklSbxPuMSTT8ZXCw7lmYL3N0S2Jw4-9omTh4jPn$JlLANcwDlYCpfYpRohs8iW9W2+vTxyAC$4+$OP2XXFZFVXiUgSjPQfyd29r5Z9prqGYEtL$pmjXuKcuOS7bPqFyvOkUmfpgSYJYM0IZ8KUUSyPLBXihCON1pu1QLSwB9YcyjRJ23Zaoi38Zay5sRu1ehChoh8r$Y+QrCHAOpt6-D761L+eNW9DbNtngM3ARus1vPHSQoZsTto5Ba6dFNvnA6InhBPkfcfj6Aih91eX+95+96kX$K+2e3+fK69Ldr0PN+uLTl4keW+sI7HofpfxatoeCU87LFFwikgZY2tO8OOkeYrbpdiPH4C0XVp4eFb4teLMoi$9TJcp-GhspGwutQTUu$atQZPeHTeWFMN0ZX+tFE1EP+amxb1JZYA7jAIjlhaI23HD6G4V6M52ZJIqAwCn+Ev7lx1wIyCelfAKFukdj0XPc7xdIHOrD5C$lpy5L3-XQ35qMUGpJSd5-EAZMlvW+SiLHX7JLhRYCLbGcNPaTyYS-iw-xQM1XXLqmDEQgosHxvmdTA3oINc9pNXlIb5PleA2GRkqamhLoMvn$dGlMUYl9fw-D23WxE$NVNj-ejxbg5FYZNWEJVGBySQrPHr2PsaKkQhWCuIgjb1dx95QTKojOnUK89Y$4DqOjYNRqsKIwiqSQxINoHWtR7-O568EHAF-aLGFo3iCn$8Ckv+HuS3q+lNaj381S8os7PJ1kFHthPADnCdoi2AncPWqPJMrPSP5keXtjaDeSs3qk4xE+w1aqOYSvA4rRSK1B1mEb$iw36xHr7bTY5Rt7NM8su8af0f5ysFfP7I7qLBcjLZ0PxKJqEEsmdECCe$uHpsY8qFHcPkW1f8UfYWCPg-XI4twowJOlJlRJaR9PXrfxTvbmfpcLBrVLgnuG-WQfwh3OxI62CCF4PH6AqesX3+Z4nFyDZwSPUX0Uum7lWvjS4FYtRG73J-jj6j3FlBXFL+ldaanAKN3ULjOR9K8pw8IyK918WV9j72q51M3Fv8Bk67Vk0OuaW0fTPcpd+UHRVbXuGZMC4qsgwiv-sHtdCX5-CAY3hps9R4uqo0STMqSQcKeXSNQfQoBD78WwTOqg9e4XqdoGeGvPo8nZqfDeM0FxG88lcjM1b+EnnVnpqHhWoywEwoMKAeC+3hou3WWhhIhKdp8wiTXTrZeHEYOFkhLZQjWPK91Kfl+RrTomA7P+ZN3acsmwn9U0X14mQiWgJ0OiZvZ4QIssFk--7ps8Vnab-hjUGXnj0MvP3C4$MC7NT1MOWcnmME3TEXemP2w4suKaKnhbhuRnvcdkE9w8l8GMNQA1aMXs470WQkUJXyNy+$qsUyIJ$d$OumnLEbFa$A07gub5-Ae0LF7e7t$qPkCtLijgBSAah+gnCDTDvV8ntbrlvG+Avck7bbMoRV28d5fBBuX3WVs$0vuOf9VtRsUoyI9Fqb9b8VDCphQFauiZc$CqFpieceFVSp8ZlK8+c0$vUevSF0r-DSSAQNY5jW36GDy6xa9m9oyjKqQSLZNsPFUNo3ujhmX4-MmBBp9hwcHc6pBotadXN5m+jX9mNh3XiVqg8cPJjctdJ7uQXMGkUmLpqI7cyVMLuhHsqcNSHm8AfZfWq1BqZJxf7i5e$NDtYFZTIE9w5lN91OrjFH2ro5e70H+LKrBwdn-eyEM1TfSYOwZ9i$WthE4Cx2Xh0Iqo9vuyCa+saVqQro+nPAUtxDjkf-E$x8IuRr3YET-T5EnKsE4oXEpW+pfrP$n5OXxJO43Gy$UbgNtMgQLBiEmZH4XQ5rRN3kxdH3QuYhlw6CwX07x379JthG7-Ivtj5sjp-K3OmbKQj6nrLfADGAxtq7jBTo37uJNygPEZui5kxQ59rpWVn2CXboCNVHL+t6kVG+7tUeVbOFpN5QA5ZbtlCGKGsBgTqZAlQUA84mYFtfZQ5rskKLjpDfYCr3rYK$G5txeodPZHQL4ulMP+GtEcvyB-ZY8gTOO364Jrki9ZnnaBoMLdUbUUsE6dI0oopjHMTcQe$rwlMFyw0wvxSx3ilqj4fjGn+AaFYi99XugGcfht3gb5u$ymdfPsd5GHbyNFXMSkxgtk+-tIQ64J3i7p+2HOU$oly6V4oyDb7LAnTcFpOGBfiNECxPFKwc+Qqkl1WFHIqh4y0MtFEWtxEIPeN9C+sjp97rgkiiCV4pBiS3KkRJFuc1T$mpyhH1GYWDQDbjjKSCbBh1PaBdATK3XaHNlpA$WLId4NVPVofl4k9UqoqeRVaHL6D1FrDU76Q4u51QDtiIDPkdSxGUkJ7lL$N7$Cq4jKnDx5Tw2CWP4VxscrAkuBymZDA0Ype3+JjHGtC0uU-Fccgj3ZBYJpYt5479pRlOGqUe55t$$vHysvDupASh3fyMj56KrRT8yxk9GRZCp1ZpSINIGj3sGm4PSwsxU0edLYGWDn32pmtWul6EyJhGnj90H-XAG4ymJ+91cmasQmov-lBo$hQsxE0lq+-QwpocLZsV0NsDw$nxvEVWv$nWDwqtQS7hVxhE58FDUMVFFBWHWO1vvL3D7wsNpu+ntgjim2yk-84I70Gl"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 13 Sep 2026 03:04:12 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: AYz+FnnDn1LMdXsedsc6vpm9cp9g8q8KAPxp63u398z4cjknpa7IbgExW6xN2gnAEfs5tUYIKSvZUau7npoxdgW25ibJMWJISUHZwBssrmagVJlXFczk6mYK2K+vm2XAQG5/qZXMCrBj3on8EqiomH80QeL95FO1HRMHnEgjPR2LCiukZjI4NKhLW6OYGD0o04OMGLWyZsMfpavkCRr/LvYNHIJnb0VzL9SeRzWJrmvP58cj9XG2Y3Ziv0166i9tdV2RBtcSQ0gSTeMzci1Y3g==$eloVqmOEcv7P1vROxgo2PQ==\r\nset-cookie: cf_clearance=3E0ACUaOIhsbehIS7V94B7VR21tmary.Yda02QqRpJ0-1789268652-1.2.1.1-LHLlCW1jqvsbRZVj4FjE22A59D1U3V6yq1UyZOwswyiUQHsuNUV7.9AsYcHkfpoFXvsmtKeq0jtwVVXfF_zLogLRZcs.nipBl9S5qJ8GwIy4YKOPuiuWUuhJfvlEyjpIBYlG3mbnuDoSDO_NWolZN7nMhlyzmzYkO9CWee1lRKDOCuc3qNN9z63tTAHJQDg1OOWshI1CGr2_WUpLmub8RjSTXCpTmlOApP5G6l1VHos0sFSpcZSkahC6YuvhERJ60pzUWEZEj5dGKP0yeOzaLndgD4R0QyeNN71iEQMt05LqQ9dTzyC6RDbDv870n1vYWkadYzGugNsuWWB8yq0oXndC5UFwkvMrRWOX0iDHfE5lsEvasU8hGrxKilRQAw4F5xke8znsnJQJuLuThLrH.Jwde3DVN2zN6Mo8RZljEsI; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=expireddomains.com; Expires=Mon, 13 Sep 2027 03:04:12 GMT\r\ntiming-allow-origin: https://expireddomains.com\r\nserver: cloudflare\r\ncf-ray: a3a3ec550ffe8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"cf_clearance","value":"3E0ACUaOIhsbehIS7V94B7VR21tmary.Yda02QqRpJ0-1789268652-1.2.1.1-LHLlCW1jqvsbRZVj4FjE22A59D1U3V6yq1UyZOwswyiUQHsuNUV7.9AsYcHkfpoFXvsmtKeq0jtwVVXfF_zLogLRZcs.nipBl9S5qJ8GwIy4YKOPuiuWUuhJfvlEyjpIBYlG3mbnuDoSDO_NWolZN7nMhlyzmzYkO9CWee1lRKDOCuc3qNN9z63tTAHJQDg1OOWshI1CGr2_WUpLmub8RjSTXCpTmlOApP5G6l1VHos0sFSpcZSkahC6YuvhERJ60pzUWEZEj5dGKP0yeOzaLndgD4R0QyeNN71iEQMt05LqQ9dTzyC6RDbDv870n1vYWkadYzGugNsuWWB8yq0oXndC5UFwkvMrRWOX0iDHfE5lsEvasU8hGrxKilRQAw4F5xke8znsnJQJuLuThLrH.Jwde3DVN2zN6Mo8RZljEsI","quoted":false,"path":"/","domain":"expireddomains.com","expires":"2027-09-13T03:04:12Z","raw_expires":"Mon, 13 Sep 2027 03:04:12 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"cf_clearance=3E0ACUaOIhsbehIS7V94B7VR21tmary.Yda02QqRpJ0-1789268652-1.2.1.1-LHLlCW1jqvsbRZVj4FjE22A59D1U3V6yq1UyZOwswyiUQHsuNUV7.9AsYcHkfpoFXvsmtKeq0jtwVVXfF_zLogLRZcs.nipBl9S5qJ8GwIy4YKOPuiuWUuhJfvlEyjpIBYlG3mbnuDoSDO_NWolZN7nMhlyzmzYkO9CWee1lRKDOCuc3qNN9z63tTAHJQDg1OOWshI1CGr2_WUpLmub8RjSTXCpTmlOApP5G6l1VHos0sFSpcZSkahC6YuvhERJ60pzUWEZEj5dGKP0yeOzaLndgD4R0QyeNN71iEQMt05LqQ9dTzyC6RDbDv870n1vYWkadYzGugNsuWWB8yq0oXndC5UFwkvMrRWOX0iDHfE5lsEvasU8hGrxKilRQAw4F5xke8znsnJQJuLuThLrH.Jwde3DVN2zN6Mo8RZljEsI; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=expireddomains.com; Expires=Mon, 13 Sep 2027 03:04:12 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15785,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T04:24:29.959044Z","times_seen":18436735,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ultraban.com/","fqdn":"ultraban.com","domain":"ultraban.com","tld":"com"},"ip":{"addr":"195.201.128.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-13T03:04:11.264Z","timestamp":1789268651264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ultraban.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 00:54:30 GMT","end":"Sun, 29 Nov 2026 00:54:29 GMT"},"fingerprint":{"sha1":"6B:29:7F:B1:FC:C4:C4:2A:32:63:11:BA:C5:4E:55:1C:8D:FF:6B:5E","sha256":"46:4D:DC:41:37:16:18:8B:53:1D:37:45:4F:DA:12:54:31:D5:EF:20:2D:CB:22:92:36:D7:CE:9B:BE:30:B8:C6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ultraban.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: openresty\r\ndate: Sun, 13 Sep 2026 03:04:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 71\r\nedge: 26036-de-102\r\nlocation: https://expireddomains.com/domain/ultraban.com\r\nx-powered-by: RedirHub\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T04:24:29.959044Z","times_seen":18436735,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":79,"connect":34,"send":0,"wait":35,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expireddomains.com/fonts/dm-serif-display-400.woff2","fqdn":"expireddomains.com","domain":"expireddomains.com","tld":"com"},"ip":{"addr":"104.26.14.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://expireddomains.com/domain/ultraban.com","date":"2026-09-13T03:04:11.896Z","timestamp":1789268651896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"expireddomains.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 08:29:59 GMT","end":"Wed, 30 Sep 2026 09:29:48 GMT"},"fingerprint":{"sha1":"01:5E:F2:F1:82:FB:C0:20:F9:85:F7:A3:EB:CC:FB:88:66:5E:1D:63","sha256":"46:10:2C:6E:23:F3:48:54:C7:A9:6F:CE:DA:8C:BA:E2:65:DD:45:B5:B8:1C:11:67:C1:A4:82:0D:F0:1B:46:DC"}}},"request":{"raw":"GET /fonts/dm-serif-display-400.woff2 HTTP/1.1\r\nHost: expireddomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://expireddomains.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2hvrasleeusl5ojj3ddhlf26s9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 13 Sep 2026 03:04:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 24744\r\nserver: cloudflare\r\nlast-modified: Sat, 08 Aug 2026 17:54:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a776d59-60a8\"\r\nexpires: Wed, 11 Aug 2027 13:59:29 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nage: 2811882\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2BbeYJbaQceF1GZJ6Wb2naAvnYRUwRPenraDdHGVaXIibf2Pojca6JHNMxMgrxCIVqG8jABU1spg7ULQ6Jq05WTvyWLcKAeoCsbjLAjyq3s6iPZmNR2LpRMTPINJRJKZT2Rz8g%3D%3D\"}]}\r\ncf-ray: a3a3ec525cd08deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24744,"size_decoded":25560,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24744, version 1.0","md5":"c27d5a47c09ebe91c013817e32b69043","sha1":"3d2a435525b8b356551cce6d09a86282a4e598d8","sha256":"fdf61e20fd2c0108e0ea28da4daca0035205b4b7fc031a3974b865b704de160a","sha512":"869245b6bd6a148eb79f10b5c2b56f622ff00a1ecaf0e16d687fb33a7d3b36397e27a4b88a1d53cbfb4f75ec5100d5f0cce31f6939114f24f0bcf651a190894a","ssdeep":"768:rJdlGwx37Ri555B9zR+J5uYlG/PwCEp24tZdD09wJ7:l6m37Ri3BRw5u2KwjJtiwF","tlshash":"55b2f18502a4e449cf1ce95b0795bebe6b1209776c069b30e533948851fd360b27d5af","first_seen":"2025-09-11T21:26:17.489332Z","last_seen":"2026-09-13T03:04:43.870218Z","times_seen":6110,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expireddomains.com/css/lander.css","fqdn":"expireddomains.com","domain":"expireddomains.com","tld":"com"},"ip":{"addr":"104.26.14.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://expireddomains.com/domain/ultraban.com","date":"2026-09-13T03:04:11.898Z","timestamp":1789268651898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"expireddomains.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 08:29:59 GMT","end":"Wed, 30 Sep 2026 09:29:48 GMT"},"fingerprint":{"sha1":"01:5E:F2:F1:82:FB:C0:20:F9:85:F7:A3:EB:CC:FB:88:66:5E:1D:63","sha256":"46:10:2C:6E:23:F3:48:54:C7:A9:6F:CE:DA:8C:BA:E2:65:DD:45:B5:B8:1C:11:67:C1:A4:82:0D:F0:1B:46:DC"}}},"request":{"raw":"GET /css/lander.css HTTP/1.1\r\nHost: expireddomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://expireddomains.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2hvrasleeusl5ojj3ddhlf26s9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 13 Sep 2026 03:04:11 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 23 Jul 2026 06:53:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nexpires: Fri, 23 Jul 2027 06:55:46 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jP7VdsIku9N%2FD%2B1SesAIldaq7qWvIV6A2fnqOVelBt9zK4ZPtyH1xDQispneiUJhYA5%2F9Xc2SCwrxZHNTuVKLfPBN9plih0GXDNdiCKccGlUjRiXkAa1GemcgtvRvsOsUG7GhA%3D%3D\"}]}\r\nage: 4478905\r\ncf-cache-status: HIT\r\netag: W/\"6a61ba6f-43fe1\"\r\ncontent-encoding: br\r\ncf-ray: a3a3ec525cd28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278497,"size_decoded":36799,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (14859)","md5":"990d27aa1c88c3a8c89e504927208391","sha1":"7c01d68bc4d731b465a98a0964d4319e0bce9a54","sha256":"429974db10c0d1de4ce5c8c34fbce84ff092a686d79d6b38b8b3f1e223cd0903","sha512":"2c0e743e33473c0b9a18b95d93dbde3f3e8e57f759cdf558152f375b18a77b23a805866964bf0fbd1dc243a1956c440c9a294174c807000332ccf6c9a180fdba","ssdeep":"6144:AzeNGwIVQPGXWZVSggYvSBhlSF/Zgma1XIouZKnJv5FNjwsqMe2agW/ywd0+xgnL:AzJuZKJvHNjwsqMe2agW/ywd0lnh3nUA","tlshash":"d9440e18b6b1967a3c3371b957dfa14c723ae087c81dcf9ab9dc52218f863f59c52a40","first_seen":"2026-08-04T10:10:05.880627Z","last_seen":"2026-09-13T03:04:43.870828Z","times_seen":613,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expireddomains.com/domain/ultraban.com/virtua","fqdn":"expireddomains.com","domain":"expireddomains.com","tld":"com"},"ip":{"addr":"104.26.14.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expireddomains.com/domain/ultraban.com","date":"2026-09-13T03:04:12.138Z","timestamp":1789268652138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"expireddomains.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 08:29:59 GMT","end":"Wed, 30 Sep 2026 09:29:48 GMT"},"fingerprint":{"sha1":"01:5E:F2:F1:82:FB:C0:20:F9:85:F7:A3:EB:CC:FB:88:66:5E:1D:63","sha256":"46:10:2C:6E:23:F3:48:54:C7:A9:6F:CE:DA:8C:BA:E2:65:DD:45:B5:B8:1C:11:67:C1:A4:82:0D:F0:1B:46:DC"}}},"request":{"raw":"GET /domain/ultraban.com/virtua HTTP/1.1\r\nHost: expireddomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://expireddomains.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2hvrasleeusl5ojj3ddhlf26s9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 13 Sep 2026 03:04:12 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bC3hVW1CShzt5Ka2My%2BjcshE%2Bju2slA2quSpZcD9TN%2BchJLIVNQa%2B1ZPSYaIyDifFbzX4CrvZmN2DZUdLMssMkrCwSC9nOEBdXge3QQrEatB8Jtm29tE17tEyMhmG9o%2FmynKDg%3D%3D\"}]}\r\ncf-ray: a3a3ec53de838deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":954,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-09-13T03:22:48.115299Z","times_seen":99058,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expireddomains.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"expireddomains.com","domain":"expireddomains.com","tld":"com"},"ip":{"addr":"104.26.14.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expireddomains.com/domain/ultraban.com","date":"2026-09-13T03:04:12.177Z","timestamp":1789268652177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"expireddomains.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 08:29:59 GMT","end":"Wed, 30 Sep 2026 09:29:48 GMT"},"fingerprint":{"sha1":"01:5E:F2:F1:82:FB:C0:20:F9:85:F7:A3:EB:CC:FB:88:66:5E:1D:63","sha256":"46:10:2C:6E:23:F3:48:54:C7:A9:6F:CE:DA:8C:BA:E2:65:DD:45:B5:B8:1C:11:67:C1:A4:82:0D:F0:1B:46:DC"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: expireddomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2hvrasleeusl5ojj3ddhlf26s9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Sun, 13 Sep 2026 03:04:12 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/330e41bb475c/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: a3a3ec541ef38deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T04:24:29.959044Z","times_seen":18436735,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expireddomains.com/domain/ultraban.com","fqdn":"expireddomains.com","domain":"expireddomains.com","tld":"com"},"ip":{"addr":"104.26.14.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-13T03:04:11.502Z","timestamp":1789268651502,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"expireddomains.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 08:29:59 GMT","end":"Wed, 30 Sep 2026 09:29:48 GMT"},"fingerprint":{"sha1":"01:5E:F2:F1:82:FB:C0:20:F9:85:F7:A3:EB:CC:FB:88:66:5E:1D:63","sha256":"46:10:2C:6E:23:F3:48:54:C7:A9:6F:CE:DA:8C:BA:E2:65:DD:45:B5:B8:1C:11:67:C1:A4:82:0D:F0:1B:46:DC"}}},"request":{"raw":"GET /domain/ultraban.com HTTP/1.1\r\nHost: expireddomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 13 Sep 2026 03:04:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=2hvrasleeusl5ojj3ddhlf26s9; path=/; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ANkWrq5sBjEONmPosnYsPL9bFO%2BO8RNjyOIWlF3emUwqa8%2F5ntXFH4YhxlCV6sFDnCgbUJZhID%2FA4Q2zWAW96v4r4A4pEd7kqesgKRhNY0XpqD84%2F8WgNMman2dwdPhSPI3Ouw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-ray: a3a3ec500a4a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"2hvrasleeusl5ojj3ddhlf26s9","quoted":false,"path":"/","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"PHPSESSID=2hvrasleeusl5ojj3ddhlf26s9; path=/; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41547,"size_decoded":10752,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1184)","md5":"81f77f0a604c4a9bf7b0a48bf634070a","sha1":"97db5a40dd9bbe21a329401e5e89325f2d7dacbc","sha256":"662a0335b10bfb81ca815e17b191fe8de1bdd6585df3013c8a8864442d8c6a91","sha512":"eb1d575cc720661fb7b9ed4a4a4a5ecaef502a6c0b934abb7741dd668f612033a02eb991e28bd335c067d864443b46adf5f73aa03af4ef9d06f796e711e3d72f","ssdeep":"384:QflUtl1Pt92LLFJYdSpcnl2SoV1DyequAJ7yw027rEezHkhCHNRKrSnx/k:QflUtzP+Lxpol2HV1E5EeLv3KrQx/k","tlshash":"0e13b63112e8193d619783aafb65b72aa655d207d21bc258b2bd03b10f87cd6cd336dc","first_seen":"2026-09-13T03:04:43.872019Z","last_seen":"2026-09-13T03:04:43.872019Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":10,"connect":9,"send":0,"wait":155,"receive":-1,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expireddomains.com/fonts/fira-sans-400.woff2","fqdn":"expireddomains.com","domain":"expireddomains.com","tld":"com"},"ip":{"addr":"104.26.14.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://expireddomains.com/domain/ultraban.com","date":"2026-09-13T03:04:11.895Z","timestamp":1789268651895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"expireddomains.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 08:29:59 GMT","end":"Wed, 30 Sep 2026 09:29:48 GMT"},"fingerprint":{"sha1":"01:5E:F2:F1:82:FB:C0:20:F9:85:F7:A3:EB:CC:FB:88:66:5E:1D:63","sha256":"46:10:2C:6E:23:F3:48:54:C7:A9:6F:CE:DA:8C:BA:E2:65:DD:45:B5:B8:1C:11:67:C1:A4:82:0D:F0:1B:46:DC"}}},"request":{"raw":"GET /fonts/fira-sans-400.woff2 HTTP/1.1\r\nHost: expireddomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://expireddomains.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2hvrasleeusl5ojj3ddhlf26s9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 13 Sep 2026 03:04:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23872\r\nserver: cloudflare\r\nlast-modified: Sat, 08 Aug 2026 17:54:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a776d59-5d40\"\r\nexpires: Wed, 11 Aug 2027 13:59:29 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nage: 2811882\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LEyWRECx9qojqCxPpUYFW2jUcsMWpDmOH6IC4ntGlzqoZdB8qXQatGNudzE%2B0aD7R5XvxXXc9U8xhTmXWacNJAfQNiwX6qVErsqOH9rlZFM3vnWYOEzsiqocc3Gi8QOVO6wBzw%3D%3D\"}]}\r\ncf-ray: a3a3ec525cce8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23872,"size_decoded":24688,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23872, version 1.0","md5":"d26e1b11589f2c2744eadc0ac2ffae94","sha1":"4e1f0a8ef07782f138d7336b3cc430241268c442","sha256":"3e38d8c01fe97529fbf0a086bf958d724b723ca7fc8be77b4ba5745f6259b6ca","sha512":"da2576aa68565be3b9cba3aa385d346478cf51dcf7b0014bddb5e5b078716e1a5e76e2af239190386559af5ba4ed698e2a411ee19d4a7ed0816a363b02204ef9","ssdeep":"384:DUqVLiC4FUoceXZvdFbdOlzImvufqOFJlnCpqFOjFNJeDzwT4qsq6IICM:pinSo1RdFdOlzImoFap4UNYDu4qsq6I6","tlshash":"04b2e17ddb928543a4b129f19b027cdda153058efa655d673f163961953f22ac8008cb","first_seen":"2025-09-11T19:19:23.887858Z","last_seen":"2026-09-13T03:04:43.873327Z","times_seen":8426,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invoke.giantpanda.media/bb50b5b7.js","fqdn":"invoke.giantpanda.media","domain":"giantpanda.media","tld":"media"},"ip":{"addr":"104.21.2.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expireddomains.com/domain/ultraban.com","date":"2026-09-13T03:04:12.123Z","timestamp":1789268652123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giantpanda.media","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 04:39:16 GMT","end":"Sun, 22 Nov 2026 04:39:15 GMT"},"fingerprint":{"sha1":"B1:E6:FB:45:69:D8:7D:7F:7B:B7:D0:13:4A:98:C9:A8:89:6E:D9:89","sha256":"32:63:3A:1F:78:20:54:09:A2:D4:F4:7A:3D:DA:17:F9:32:5F:E2:A0:96:DF:15:F8:8C:67:FD:01:F8:AB:46:F9"}}},"request":{"raw":"GET /bb50b5b7.js HTTP/1.1\r\nHost: invoke.giantpanda.media\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://expireddomains.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 13 Sep 2026 03:04:12 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pWi2mUHN3YvJgLxESN4IkPhCyDAvFfuFShIN9SuYjL1WjrFi9Qa8Z7QTVZiAeDGy2kQqnz9BwgWsqAsHPn7z56C%2B2fiQEugfAuXF9fbmdiN3veprIXD8ZG5cWoPolS0cNyFauAwYWTtDog%3D%3D\"}]}\r\netag: W/\"6e2790525e678dfed011f927cc8d97f4\"\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a3a3ec544f1d0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17530,"size_decoded":6580,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"d3229e73657769ee9a08e224a1679319","sha1":"f2ee357492c24579c21de9dd38f953e892608071","sha256":"5661e5bf8961147eec9c3e09baaedd6c47d656712d68adcd90257caeba3de6d4","sha512":"40890c01159d0403e72d6fadce322b0d5ccb97bf28c67d0e03e21a14364835d55b509fc1abca75cd8c3cae672178025c07abd33d1ce38499019579c4b1959925","ssdeep":"192:Y+KADdNCW+hpfnn6OgCsxSt2o/QGAE6RmHmF9Czmc5D1cJR47NvF+LGnaqNEZSwd:Y+pd6nx1sMsGAt2x5BADiEgw++","tlshash":"d572c8486d82a03468b3933bab9f563efb25961305039b0275bcd1590ff2a61539defc","first_seen":"2026-08-04T21:20:49.226022Z","last_seen":"2026-09-13T03:04:43.873854Z","times_seen":608,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":61,"connect":1,"send":0,"wait":36,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"invoke.giantpanda.media","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.expireddomains.com/__l5e/assets-v1/45c7a17d-697e-4ba8-94be-57e5b2785836/ed-logo-wordmark.png","fqdn":"new.expireddomains.com","domain":"expireddomains.com","tld":"com"},"ip":{"addr":"104.26.14.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expireddomains.com/domain/ultraban.com","date":"2026-09-13T03:04:12.125Z","timestamp":1789268652125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"new.expireddomains.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 15:41:52 GMT","end":"Thu, 19 Nov 2026 16:41:46 GMT"},"fingerprint":{"sha1":"04:6C:D2:79:C8:FC:3A:D8:FF:5E:8D:35:5B:7F:C9:19:6E:6C:DF:DB","sha256":"08:16:44:92:D0:0E:CC:1B:72:2E:BB:23:22:4F:8E:A4:29:9F:E2:AF:46:DE:51:63:32:3F:4D:7F:BA:19:BE:54"}}},"request":{"raw":"GET /__l5e/assets-v1/45c7a17d-697e-4ba8-94be-57e5b2785836/ed-logo-wordmark.png HTTP/1.1\r\nHost: new.expireddomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://expireddomains.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 13 Sep 2026 03:04:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15982\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"fdf1a781b828f0350b8d97c57d0bad98\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vvjeCRnkxdCyYBZ%2B4%2BDU0M8ElNwFkrTG6jDuLaOX5PSu5n5FOJy5I128BfZTZKzFh0dkqeNnSq6jzpPU9N3Gda5YjvV9qW068fVhWTausxzC5uhsX%2FHaUeQpAjtqmgikwtY6XpCLsXg%3D\"}]}\r\nserver: cloudflare\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=25676\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: h2pri,imgq:85\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept, accept-encoding\r\nage: 1769258\r\ncf-cache-status: HIT\r\ncf-ray: a3a3ec53eb442efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15982,"size_decoded":17117,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7c2cad88dbac10b392e93010768f2edc","sha1":"fd0184d869caf3dd48a9e4e76ea143c318838048","sha256":"56a3fce2d1e06f8b428ba1dde3cd56ea8e7c1fe0e647ed1a061b27f1465083b9","sha512":"8f93e9cc00fb08e61e140070e62c6c117890fccc6592ca55716ef557d5685e9ca9bc0550afb4a3c837a3566184cc1b005b6a05f5fd93a7fbd5e267ce114602c9","ssdeep":"384:PAstU8T5LhQ8bKnKx/gorX1oV4IUCQ0dPXBjWd47:5JFhbmiSnpXpWe7","tlshash":"4f72d1249acfcafba3372ad510d4f66941b86f775cc3aab45236205710fbc411f0a563","first_seen":"2026-08-04T21:20:49.227021Z","last_seen":"2026-09-13T03:04:43.87439Z","times_seen":582,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":3,"connect":4,"send":0,"wait":12,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expireddomains.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/330e41bb475c/main.js?","fqdn":"expireddomains.com","domain":"expireddomains.com","tld":"com"},"ip":{"addr":"104.26.14.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expireddomains.com/domain/ultraban.com","date":"2026-09-13T03:04:12.197Z","timestamp":1789268652197,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"expireddomains.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 08:29:59 GMT","end":"Wed, 30 Sep 2026 09:29:48 GMT"},"fingerprint":{"sha1":"01:5E:F2:F1:82:FB:C0:20:F9:85:F7:A3:EB:CC:FB:88:66:5E:1D:63","sha256":"46:10:2C:6E:23:F3:48:54:C7:A9:6F:CE:DA:8C:BA:E2:65:DD:45:B5:B8:1C:11:67:C1:A4:82:0D:F0:1B:46:DC"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/330e41bb475c/main.js? HTTP/1.1\r\nHost: expireddomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2hvrasleeusl5ojj3ddhlf26s9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 13 Sep 2026 03:04:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3a3ec543f138deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19398,"size_decoded":9382,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (19398), with no line terminators","md5":"9033131ab2a1391c4be35213f67b1fd8","sha1":"c26f2c1182691247f5c8d875640a0c441bb07850","sha256":"1961d1929d3b2df268621a5584cf257ed064619ce34f1e774c5a7152253f3b2d","sha512":"4cf8679b29073f73532112d281a48a0a6b2555013cab759f0352334c32382be94f541bff2ce512ee79d6b255f1081b65469ba573306a9ae3b5a071f92d5d0ce9","ssdeep":"384:U0RkNEG4aSZ5XDE/oV8q/vjIGS50yhECU+AZgp3P6v/fF1ts:DR+vRv/uG9SD/+AvXts","tlshash":"f592988b7cc9b8941785eca8902f31dbf26e1da0085c6dc6c220c9ed7e66768f597d1c","first_seen":"2026-09-13T02:25:37.107638Z","last_seen":"2026-09-13T03:04:43.874915Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expireddomains.com/favicon.ico","fqdn":"expireddomains.com","domain":"expireddomains.com","tld":"com"},"ip":{"addr":"104.26.14.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expireddomains.com/domain/ultraban.com","date":"2026-09-13T03:04:12.271Z","timestamp":1789268652271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"expireddomains.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 08:29:59 GMT","end":"Wed, 30 Sep 2026 09:29:48 GMT"},"fingerprint":{"sha1":"01:5E:F2:F1:82:FB:C0:20:F9:85:F7:A3:EB:CC:FB:88:66:5E:1D:63","sha256":"46:10:2C:6E:23:F3:48:54:C7:A9:6F:CE:DA:8C:BA:E2:65:DD:45:B5:B8:1C:11:67:C1:A4:82:0D:F0:1B:46:DC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: expireddomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://expireddomains.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2hvrasleeusl5ojj3ddhlf26s9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 13 Sep 2026 03:04:12 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Tue, 06 May 2025 05:29:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nexpires: Thu, 15 Jul 2027 14:24:30 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eMkw2nker1nhp23P%2BHOf6WuN1JUkipFO%2By61Fj5sR%2FJJfWC7Sxe9nq7kniAPFcZMzKq8iJdklG9WY58A6SkCK1S4IQMzHYZCGDpF7BqE3LZi3vWt2rYKJsU2NfoG%2FHQ2gKN8Ow%3D%3D\"}]}\r\nage: 5143181\r\ncf-cache-status: HIT\r\netag: W/\"68199e2f-3aee\"\r\ncontent-encoding: br\r\ncf-ray: a3a3ec54bf8e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":5472,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"b128653b4971371f5e1b1caeec22a91d","sha1":"e30ec5358326f2772c3ed0f644372b91eecd9f24","sha256":"327c36e3bb622a3fc59dccf55b73ea5ae0250858894d32f3a668cda6d9139f02","sha512":"bb5febe6ac17b9fed31fc19a949de85525bd40472f4433e3e95d765cc773265c54017fb8b18d7753322fa266abe630a1bf0485c5771c51eb0585e2e565eb3d4d","ssdeep":"384:jTAqNZno8BIry7hFKUvK+WrIuRUtt/Z/uRWTvnf7Ck9N2q69BC1IrY8DZ1MNd:/AqNZno8BIry7hFKUvK+WrfRUttR/uRU","tlshash":"636261a3724fe854e045423e4e6689c55283bf73edf17a80b0c9b77f137b18b0662a06","first_seen":"2025-10-09T10:14:02.281247Z","last_seen":"2026-09-13T03:04:43.875466Z","times_seen":634,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}