{"report_id":"f95dd6f0-93f5-49c8-bc02-23d85021eb70","version":6,"status":"done","tags":[],"date":"2026-03-05T06:03:31Z","url":{"schema":"http","addr":"933883com-cpnm9.933883a2.buzz/","fqdn":"933883com-cpnm9.933883a2.buzz","domain":"933883a2.buzz","tld":"buzz"},"ip":{"addr":"103.224.182.189","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"title":"Mamma.com Search - Trust Mamma to provide the best search results","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"933883com-cpnm9.933883a2.buzz/","fqdn":"933883com-cpnm9.933883a2.buzz","domain":"933883a2.buzz","tld":"buzz"},"ip":{"addr":"103.224.182.189","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-09T06:03:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":9}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-05T06:03:10Z","timestamp":1772690590,"ip_dst":{"addr":"Client IP","port":37230,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"50.16.211.97","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2026-03-05T06:03:10.301516+0000\",\"flow_id\":197699972247280,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"50.16.211.97\",\"src_port\":443,\"dest_ip\":\"172.18.0.47\",\"dest_port\":37230,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.sd559908.js.rsocdomains.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"52:B6:98:6D:01:6C:36:05:DE:97:BF:E1:AA:7D:D0:67\",\"fingerprint\":\"ea:71:3d:ec:fb:1b:e3:ce:69:f9:00:4f:34:6e:df:3a:95:11:14:5a\",\"sni\":\"obs.sd559908.js.rsocdomains.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-01-14T00:00:00\",\"notafter\":\"2026-04-14T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"80d47c47e3ce91bc3bd0a026dbd1664d\",\"string\":\"771,49196,5-65281-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3933,\"start\":\"2026-03-05T06:03:10.012016+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"933883com-cpnm9.933883a2.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":2,"received_data":98310,"sent_data":1116,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dynadot.rsocdomains.com","ip":{"addr":"103.224.182.66","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"2025-10-30","domain_rank":0,"first_seen":"2026-01-30T09:17:15.422663Z","last_seen":"2026-02-27T09:52:47.146339Z","alert_count":6,"request_count":3,"received_data":42138,"sent_data":1796,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-01T22:20:53.525798Z","alert_count":0,"request_count":2,"received_data":794639,"sent_data":893,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-03-01T22:26:39.665209Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":704,"comment":"","tags":null,"fingerprints":null},{"fqdn":"obs.sd559908.js.rsocdomains.com","ip":{"addr":"50.16.211.97","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2025-10-30","domain_rank":0,"first_seen":"2025-11-29T06:04:21.715008Z","last_seen":"2026-03-01T05:29:02.402802Z","alert_count":9,"request_count":3,"received_data":4475,"sent_data":7830,"comment":"","tags":null,"fingerprints":null},{"fqdn":"t.contentsquare.net","ip":{"addr":"3.164.230.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-02-16","domain_rank":18964,"first_seen":"2017-11-15T12:53:17Z","last_seen":"2026-03-05T01:37:56.832904Z","alert_count":0,"request_count":2,"received_data":458137,"sent_data":901,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"933883com-cpnm9.933883a2.buzz","ip":{"addr":"103.224.182.189","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"2025-02-22","domain_rank":0,"first_seen":"2026-03-05T06:03:35.818142Z","last_seen":"2026-03-05T06:03:35.818142Z","alert_count":1,"request_count":1,"received_data":3029,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":47154,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pro.fontawesome.com","ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":56192,"first_seen":"2018-03-17T18:03:41Z","last_seen":"2026-03-04T23:06:30.109218Z","alert_count":0,"request_count":2,"received_data":348419,"sent_data":1026,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-03-01T22:26:33.479606Z","alert_count":0,"request_count":1,"received_data":132082,"sent_data":426,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-03-01T22:48:56.265504Z","alert_count":0,"request_count":3,"received_data":841278,"sent_data":1304,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"expired.mamma.com","ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"1996-07-31","domain_rank":0,"first_seen":"2025-12-17T02:37:38.466476Z","last_seen":"2026-02-27T06:01:37.205045Z","alert_count":0,"request_count":19,"received_data":7914934,"sent_data":21913,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI:1.14.0","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Contentsquare","description":"Contentsquare is an enterprise-level UX optimisation platform.","website":"https://contentsquare.com","common_platform_enumeration":"","icon":"Contentsquare.svg","categories":["Analytics","A/B Testing"]}]},{"fqdn":"ep1.adtrafficquality.google","ip":{"addr":"142.250.178.98","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-11-17","domain_rank":3093,"first_seen":"2024-07-24T04:17:49Z","last_seen":"2026-03-01T23:21:39.541229Z","alert_count":0,"request_count":1,"received_data":11215,"sent_data":535,"comment":"","tags":null,"fingerprints":null},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-03-01T22:34:33.541148Z","alert_count":0,"request_count":2,"received_data":1682,"sent_data":2084,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ob.sd559908.js.rsocdomains.com","ip":{"addr":"65.9.46.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-10-30","domain_rank":0,"first_seen":"2025-11-29T06:04:21.718439Z","last_seen":"2026-03-01T05:29:02.428054Z","alert_count":3,"request_count":1,"received_data":121557,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]},{"fqdn":"ep2.adtrafficquality.google","ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-11-17","domain_rank":3229,"first_seen":"2024-08-13T12:56:28Z","last_seen":"2026-03-02T01:08:58.591122Z","alert_count":0,"request_count":2,"received_data":37507,"sent_data":992,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=933883a2.buzz","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.66","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6559111e4eae643ce013ce0821e91a02","sha1":"fa1086c9aa2cb2d14f5c13bceefe21511bcdae5a","sha256":"d72255f7e5ea4dfdf9821df800356367d0bc7df07ecd103bb660018cb1e4f400","sha512":"a6e3e096076dc152b69e95709dad8925c9c2799c23ad226b9ce7b6ee78936bea7300b66c92821ea0728ce7433d4f53787f27f5e7101f97e4d882be0a461fc051","ssdeep":"","tlshash":"407000000380020020c80233a200882af228003c00030200c008888800a808002080c2","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-04T13:49:31.963909Z","times_seen":332237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obs.sd559908.js.rsocdomains.com/ct?id=93106\u0026url=https%3A%2F%2Fdynadot.rsocdomains.com%2Fexpired%3Fd%3D933883a2.buzz\u0026sf=0\u0026tpi=\u0026ch=933883a2.buzz\u0026uvid=\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1772690589998\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=74001702111956921902702809681128068719876186121192616016712021216205150926882239016176961885\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=W1siZWYiLDMyMDBdLFsiYWJuY2giLDE3XSxbLTUsIi0iXSxbLTE4LCJbMSwwLDAsMF0iXSxbLTI0LCJbXSJdLFstNTksIi0iXSxbLTYyLCI1OCJdLFstNjQsIi0iXSxbLTc0LCItIl0sWy0xLCJMaW51eCB4ODZfNjQiXSxbLTMzLCItIl0sWy01MSwiLSJdLFstNTYsImxhbmRzY2FwZS1wcmltYXJ5Il0sWy02OSwiV2luMzJ8fHw0OHwtfC0iXSxbLTE0LCItIl0sWy0yOSwiLSJdLFstNDksIi0iXSxbLTU3LCJTM2xSVFUxSlNnTVdGbFpiRjBwZERBd0FBQWtCRjFOS0YwdEtWbHBkVmxSWVVGZEtGMXBXVkJaUUZnd0JEQWdCWEY4T1dsOWZDVm9CRFFvS1dBb01XQXBZRFZnSkQxaGFERjFkRjFOS0F3Z0RBUTRMQVFBVkRnZ0FGazBYWEVGSlZrdE5TaFlGZVZGTlRVbEtBeFlXVmxzWFNsME1EQUFBQ1FFWFUwb1hTMHBXV2wxV1ZGaFFWMG9YV2xaVUZsQVdEQUVNQ0FGY1h3NWFYMThKV2dFTkNncFlDZ3hZQ2xnTldBa1BXRm9NWFYwWFUwb0RDQU1CRGcwQkRoVktYRTF0VUZSY1ZreE5HVkZZVjExVlhFc1REZ2dBRmswWFhFRkpWa3ROU2hZRmVWRk5UVWxLQXhZV1Zsc1hTbDBNREFBQUNRRVhVMG9YUzBwV1dsMVdWRmhRVnc9PSJdLFstNjgsIi0iXSxbLTcwLCItIl0sWy0xMCwiLSJdLFstMjIsIltcIm5cIixcIm5cIl0iXSxbLTQxLCItIl0sWy05LCItIl0sWy0xMywiLSJdLFstMjMsIisiXSxbMTIsIntcImN0eFwiOlwid2ViZ2xcIixcInZcIjpcIm1lc2FcIixcInJcIjpcImxsdm1waXBlXCIsXCJzbHZcIjpcIndlYmdsIGdsc2wgZXMgMS4wXCIsXCJndmVyXCI6XCJ3ZWJnbCAxLjBcIixcImd2ZW5cIjpcIm1vemlsbGFcIixcImJlblwiOjEwMCxcIndnbFwiOjEsXCJncmVuXCI6XCJsbHZtcGlwZVwiLFwic2VmXCI6NDk0MTk1MDQzLFwic2VjXCI6XCJcIn0iXSxbLTUwLCItIl0sWy02NSwiLSJdLFstMjYsIi0iXSxbLTM1LCJbMTc3MjY5MDU4OTg5OCwwXSJdLFstNDIsIjg4MzM5OTAxNiJdLFstNTgsIi0iXSxbLTY3LCItIl0sWy0xNSwiLSJdLFstMTksIlswLDAsMCwwLDAsMCwxLDI0LDI0LFwiLVwiLDEyODAsMTAyNCwxMjgwLDEwMjQsMTI4MCwxMDI0LDEyODAsMTAyNCwwLDAsMCwwLFwiLVwiLFwiLVwiLDEyODAsMTAyNCxudWxsXSJdLFstMzQsIi0iXSxbLTQ2LCIwIl0sWy01NCwie1wiaFwiOltcIl8zXCIsXCIyODcyODk5MzIwXCJdLFwiZFwiOltdLFwiYlwiOltdLFwic1wiOjF9Il0sWy02MSwiLSJdLFstNzIsIkV4VT0iXSxbLTc1LCIoaW50ZXJtZWRpYXRlIHZhbHVlKS5zb21lRnVuYyBpcyBub3QgYSBmdW5jdGlvbiJdLFstMjEsIi0iXSxbLTMwLCJbXCJ2XCIsMF0iXSxbLTMxLCJmYWxzZSJdLFstMzIsIjAiXSxbLTQ0LCIwLDUsMCw1Il0sWy00NSwiNzUyLDAsMCw3MTksMCwwLDc2MSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwIl0sWy00OCwiW1wiLVwiLFwiLVwiLFwiLVwiLFwiLVwiLFwiLVwiXSJdLFstNzMsIkVoUT0iXSxbLTIsIjgsSXNOOW5HbldiQVlBSXhOZlFhT3FHRTBDRkFRc2NHMDBJbmhPYllCQUtZVU96UU82RVgwMjBJbUdMY3U2MnVyZFAvYzJkMnBObVZaQXdmMy8vOHo3OUdySGExV3UzT21YUFB2ZSJdLFstOCwiLSJdLFstMjUsIi0iXSxbLTM4LCJjLC0xLC0xLDkxNSwwLDEsMCwyOCwzNTEsMTczLC0xLDAsLCwyMzA5LDIzMDkiXSxbLTM5LCJbXCIyMDEwMDEwMVwiLDIsXCJHZWNrb1wiLFwiTmV0c2NhcGVcIixcIk1vemlsbGFcIixcIjIwMTgxMDAxMDAwMDAwXCIsbnVsbCxmYWxzZSxudWxsLGZhbHNlLG51bGwsNSx0cnVlLGZhbHNlLG51bGwsMCxmYWxzZSxmYWxzZSxmYWxzZSxmYWxzZV0iXSxbLTQwLCIzNyJdLFstNDMsIjAwMDAwMDAxMDAwMDAwMDAwMDExMTAwMTAwMDAwMTAwMDAwMDAwMDAwMTAiXSxbLTU1LCIwIl0sWy02NiwiLSJdLFstNzEsImEwMTAwMTAxMTAwMTAwMTAxMDAwMTAxMDAxMTAxMTAwMDAwMDEwIl0sWyJibmNoIiwyNTJdLFstNywiLSJdLFstMywiW1wiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiXSJdLFstNCwiLSJdLFstMTIsIlwiMVwiIl0sWy0yNywiLSJdLFstMzYsIltcIjUvNFwiLFwiNS80XCJdIl0sWy0zNywiLSJdLFstNDcsIlVUQyxlbi1VUyxsYXRuLGdyZWdvcnkiXSxbLTYwLCItIl0sWy02LCJ7XCJ3XCI6W1wiMFwiLFwib25DaGVxUmVzcG9uc2VcIixcImhpZGVMb2FkZXJcIixcIk5vdGlmeVBhaW50RXZlbnRcIixcIl9fY3RjZ19jdF85MzEwNl9leGVjXCJdLFwiblwiOltdLFwiZFwiOltdfSJdLFstMTEsIntcInRcIjpcIlwiLFwibVwiOltdfSJdLFstMTYsIjAiXSxbLTE3LCI0OCJdLFstMjAsIi0iXSxbLTI4LCJlbi1VUyxlbiJdLFstNTIsIi0iXSxbLTUzLCIwMDEiXSxbLTYzLCItIl0sWyJkZGIiLCIwLDgsMCwwLDAsMiwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwxLDAsMCwwLDAsMCwwLDIsMCwwLDAsMiwwLDAsMCwwLDAsMSwwLDMsNDgsMCwxNiwxLDIsMCwwLDAsMCwwLDAsMCwyLDIsMCwxLDAsMCwwLDAsMCwwLDAsMCwxLDEsMCwwLDAsMCwwIl0sWyJjYiIsIjAsMCwwLDAsMCwwLDAsMSwwLDMsMSwwLDEwMiwwLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwxLDAsOCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDAsMCwxLDAsMCwxLDEsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwxLDAsMCwwLDEsMCwwLDEsMCwwIl1d\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=UyEiaxMGaM\u0026pto=2339\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1772690589.42eGErsMbnBa1Y0O\u0026suid=1.1772690589.g8iIBj91IateZnkF\u0026tuid=1.1772690589.eQSbxbJjpl2GiJI1\u0026fbc=-\u0026gtm=-\u0026it=3%2C1729%2C275\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA%2FNjotaGA2Og%3D%3D","fqdn":"obs.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"50.16.211.97","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b71b812a8322dd100b4ab240449b6c0f","sha1":"5fa97bc87253c3479808adfa9ba2d0938ac30dce","sha256":"9f2185e43c542d82981843f6a0b199fc1b92cd382d171fa3738ce6f32759d677","sha512":"de297af11ced52bb31b4bb7c41908bb4cf031030961fd6041bb9866c83e5183ea4849c6b82b77ac2d3ab0a6552343c9c5ff160b5d8556e264caa0c1afcbd3752","ssdeep":"","tlshash":"956109113a4e2ea529ee46d3cee4ee8913b2573f5d4f14b68837f64205bb1828f12081","size":3447,"data":"","first_seen":"2026-03-05T06:03:38.221245Z","last_seen":"2026-03-05T06:03:38.221245Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/js/tailwindcss.js","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-04T13:46:56.067837Z","times_seen":28772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/search/ads.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca95f2a304d2f215348d4b9f795cb8b2","sha1":"196106d8e570cb48045cf57ec3f80af955fa0331","sha256":"f1d043ab18b6d607465e00202761437ca12c081b19efd9540b1c0bd6c0b0ecc3","sha512":"da404b35484d9fe082b01dafe0bc91c7ac9ad1efe3b0546c8556624b5c61b5c883bf443980b338a46e223a286ce46d0dc970bd6b1d100f6b21d3ee656c428f6e","ssdeep":"1536:3hQZrBdqj29AlypQL6AoeKdC/4Cd0J5Eg2yJAcGu2rhZcDv7MS697aR9jhFkZfS1:RtLY3s/4dJR8yvoSbuSvd","tlshash":"41d33acdb6a1742243a3a1f5603f014fb139b96aa40c84a4f199d8e47cb4dad4277fbd","size":131366,"data":"","first_seen":"2026-03-04T20:54:55.82891Z","last_seen":"2026-03-05T15:07:17.579041Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=933883a2.buzz","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.66","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-04-04T13:49:31.951693Z","times_seen":352957,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=933883a2.buzz","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.66","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"889ca9e2c79a3ce7aaadbcdfd0ce4ef5","sha1":"b05c2c051bae71f80cb8c289e5a42d4f96d323fa","sha256":"6477acf082d26199b6ce8346b93149b1b999233d9fe76b0340ebf43317cf98f8","sha512":"122a494d50a5e8077cdda40e8d6edb442bb9d89fff078852aad7f84fe24f1c58fe693f0388ca6c9453d1b33036da0b9c4e9fb394a18268e254d306ffc2ca57a3","ssdeep":"","tlshash":"46a002d4b4ed8125564583390104d91cf936c934c0d5701873f0466ca6e700a53610b2","size":62,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-04T13:49:31.967758Z","times_seen":332286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/js/app.js","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6afc09e7619e556d54d1cb17a5a70022","sha1":"173e9d33730b6732ab48f87575fafccc1997254c","sha256":"6cd89b0651a4a6584cc98859b12e37d3df207ecf7ac621c4ade4e4c6b7469f3e","sha512":"93f964b9280cd93d8cfe439f13eeefac92d8590a6c3a286a9c667ec3f67bf870d3b652347705724b68e0f3d447b169400e4738b2ab3fa6174e252a688719f03e","ssdeep":"","tlshash":"1121eef8c87390d144b7206f86ae21a425a1197baa48f883388db5927fd8f7e15306f4","size":1155,"data":"","first_seen":"2025-07-02T03:33:37.427114Z","last_seen":"2026-04-04T09:28:43.665228Z","times_seen":3364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"57f27d78b1f47d5e8a5dc7c9779ff2ad","sha1":"161da2ee6e76f34fa4a959efd540ad171f9c9c1d","sha256":"6753e44c8aa3b471a2811e81da9ba6f8fe3fa4c347adf6330230c2dc9717468e","sha512":"d52b4093d8d4f2bf73d85cc84552d204057518e28b90aeae6341107621e1220059baedb32964c6d701ee7cea8a8d938bbf83348ebbbb92f66bea53d0c605dcfe","ssdeep":"","tlshash":"33c02bccf08351ea30722030cb7308070831937b08c4c0413009027d1f72c07024bb0c","size":137,"data":"","first_seen":"2024-08-21T07:24:10.333614Z","last_seen":"2026-04-04T09:28:43.687444Z","times_seen":3378,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"12e87d2f3a4c8b347ab13a0764d420a3","sha1":"4be715e11048c057fdf2ee0fbbfad4dbf3504c55","sha256":"78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe","sha512":"fa4d699e582de05d47f0beeddf3f79a37fca3bea3bf083447174db9e8250fc5d95a835615a86a256697f3841eff47b1583151a556f886e264f50941f17f63167","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPfz:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAV","tlshash":"e954a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","size":285314,"data":"","first_seen":"2023-09-15T16:51:13Z","last_seen":"2026-04-04T13:20:36.241281Z","times_seen":15946,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-9WGW9SCFVP\u0026cx=c\u0026gtm=4e6340h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"304cc3a8f62e11dfc0063f02c0d52b43","sha1":"b8ae34e1b48876752d9bc4ea08438835052cef5c","sha256":"26a930a90a75a2528dbee74c621cb1704344884bc0217a240c06d986b4e0ffb7","sha512":"bb0e0d4db4b5e84be0a9c3682308553399d2fd8db36379a1e798c0eaf91afc1dcbf334abdbf739e262b1f14754d9152939cad822704f5eb549dceea8707c1aa2","ssdeep":"6144:gekKfNl3HjvNQB/KI0SfZ8RGw/V0sApXxeZAJJx:Z/FxHjvIDfZ8/4","tlshash":"ffa40ace73c674225396f478503f018ba57b28a2b49cc89af189cce46e7469a4137f7d","size":464961,"data":"","first_seen":"2026-03-05T03:24:26.269287Z","last_seen":"2026-03-05T07:40:59.903727Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2.js","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"622209dbf4750ca1b62b82ee36b4579e","sha1":"5f459d016a540c008b8a4db3ceaaf570a4a2c3d9","sha256":"893c7f6aca9aca8c8aded19a9cd8919cbd7a205cff7f6503d1241b8fa2f721ff","sha512":"cd7a878355f5b1c086eb8c1c9229a7db90ba9b230f30b77112674f3d90593ac4d8f59a24eec59d29afaf45d7277929a53b596e627e8959d658140d18d6a0a6d9","ssdeep":"384:Pyr4MMy/s1OR/lZQkp5d4WFy6auy9fRIjGRSKh6/RW+fzddr7:VySOxl3p5d4Wk669fC6RgW+fzddn","tlshash":"caa295cab6e1b4654363a9f2a13f100ff23e6c6dd84c4858b084d4e0bdb596a4767f78","size":21495,"data":"","first_seen":"2026-03-01T10:14:34.996222Z","last_seen":"2026-04-03T21:45:58.597644Z","times_seen":1842,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2/253/runner.html","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c866489327636a36d982c02319dad6a8","sha1":"976987015dc9c62250063bc61ac97ec2bbbb98b3","sha256":"c9febe17b6cbda93dc3a509c0b180ce0247a20f1bc6808d2a106ec8c2fccbf24","sha512":"0c6a1c298b0186fbdb5cd009e668340e3747a18dd6a4ed4c56ce5aae655aca7fd32f5dd6c63336f0d523c42425b74fdb52f950bc40ea2f249a5a15318b54b606","ssdeep":"","tlshash":"6811b1c572a1e0d8817324f6560f504bf538943b589cb51097a0c8f8acb07fb442af57","size":956,"data":"","first_seen":"2026-02-26T09:48:45.396354Z","last_seen":"2026-04-04T13:12:04.17851Z","times_seen":1275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=933883a2.buzz","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.66","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e5d8c139688b25ef77b263d88ea99150","sha1":"7abc9c61c4966543f66d150c0155bfac575f86a7","sha256":"53e5f34ac520035c7f124076d1e68c70a85c83cf68a339fa713b872b54126148","sha512":"1cd4eb192d987ea1b21f3b553eea3881c807f8bf4a5299982675d57314a0eaa084db1722c38d02eb73178660ecb1ca3667a795a512527f843f2526dc0a99dc20","ssdeep":"","tlshash":"7440000000003000033c0000000000c0000c00000000000000000c00030000000c0000","size":7,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-04T13:49:31.952825Z","times_seen":332338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.contentsquare.net/uxa/3e73dd2905556.js","fqdn":"t.contentsquare.net","domain":"contentsquare.net","tld":"net"},"ip":{"addr":"3.164.230.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"381f2cb14e1e892c95419a8bd02f3948","sha1":"3c7eecfe5143af1a1a8dcbc407e994039591389a","sha256":"d815e428a3adb827cef26bf3bcf59b4f08030f734820e4c250a895e6a7104aef","sha512":"4501584af507044d1475aca4b0a86feb434cec4f1990db3399877920ec5918b4524175a7433f4ba751e7e1285389336cf7af4e112a8abce7858b40052145a39d","ssdeep":"6144:bUARE9BJLz9r/67/TYKSFpZ38fPQAqGse5x2RjaDDgWZkIMicrTc3mwj:bUARU9r4qqwk8ReVrhj","tlshash":"dba42bd973a6b0b68799c1ead0360102b33979a97409003cf1adecfb35a4d4572f6b79","size":454265,"data":"","first_seen":"2026-03-04T15:38:16.980119Z","last_seen":"2026-03-05T09:39:45.725413Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.14.0/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b90421cbb9666fd2558c5b57b2994a4","sha1":"3cca9d56f9bb1f973dd3ec9212de21c296cd5e21","sha256":"bb42fc680e84bf76d8d87238cb4080cabf47f05456817e2167df8aec2da7cdd7","sha512":"731467ffb3be2564aabc138678e0da0bebfdc2bed1165944c1de92040b9be59b813c4cc1b586574f1e3a28d9e5cef11f1b8d82cdbc1fb1c6c161961c82b5ca34","ssdeep":"12288:/aemHFgymcpIyHCcmMY/W/EEMPlQRgkrVhDdRtn:WIyHCcmMY/W/EEMPt0hDdRtn","tlshash":"ebb4b7c9f39c265a867a32594c2e42cdb23d8075e600587fbc5d59dc29a883c43bbf79","size":518995,"data":"","first_seen":"2024-09-19T22:28:43.042948Z","last_seen":"2026-04-04T09:28:43.66667Z","times_seen":3486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf1a0b319850914ec37db3662478aac8","sha1":"a01a3bd40e2b408259650ede8440f7250edfd635","sha256":"66e579dfdcb2d80a606bec2549a0b9bd17ea9dc3e44bcb4fa7902381ee723eb2","sha512":"7f9f089679a0ecb8a1e0323c879baedef1f5fb33ca073f58d4ce49eeaa9a623978b68c300f3b992fad938db4d4b18f7638d2a005aaeab64ba9c2137079089b74","ssdeep":"","tlshash":"56e0c0eb74164872629f85b633b5a1257253290d78091c22fdfd8c246e58687481719c","size":358,"data":"","first_seen":"2025-09-28T06:57:47.637874Z","last_seen":"2026-04-04T09:28:43.688026Z","times_seen":3368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0bb74b0b25b907f0209e865e6b5d8d4","sha1":"bdb2dcf8c447197fa53c0b075141126eeb1a89b6","sha256":"27d6832829b065f873b4f2268ed68e65bbf91b4c77b9fd015f4ec1f7f6990fce","sha512":"00b9d36b0bc4d8623f07907b1e409cc83cdf689195a19ce3999f67bae1b3dfac2118a1123649a73cd5e7502650e9ba44ab23877e66cbac26173edf18b24daf2a","ssdeep":"","tlshash":"63113a2fb4e1207741ab29f5b39b864d3b69890754c685323aacc70d6fa755008f3afc","size":1013,"data":"","first_seen":"2025-07-02T03:33:37.463951Z","last_seen":"2026-04-04T09:28:43.688611Z","times_seen":3356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NKZMCM7F","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fefb23c0464e73991c43a64617896a1f","sha1":"6d7ac9a0341cb5814fbf8b455581a61283e8c75c","sha256":"8e782cd54064a18e0084432a3a3120763e73816d06b531fdc16707e326a16b76","sha512":"58670a4224af001f5023b9bb06fb2734e4db2764ffd7149ffdaff5cd6ebc958d55606fd7c429e476f8d75bdd8781bc8ddd4ee2bde0229a02db640c961895f4b7","ssdeep":"6144:QkKfNl/jvN5B/KI0D8RGI/V0sApXxXJZRQ:Q/FVjv5U8qS","tlshash":"9d641acdb7d6706253a3a478403f018bb27a7892f88cc895f186d9d42e746a98137f7d","size":328490,"data":"","first_seen":"2026-03-05T06:03:38.226522Z","last_seen":"2026-03-05T06:03:38.226522Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=933883a2.buzz","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.66","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c8bd53395fd1e1a4a4592e146d34dcb5","sha1":"8af7c313711266067f8e67835a1df554699732d8","sha256":"4a743489e4f35d1e4c5a15197c6d583788ab013cb08b9fa1dc39ab5aa7861df7","sha512":"a5b00eb1e6096f5cbd4419bcfe7e8696ee72e8ec16e75f9c3863f30b5b6499c317856cf6a937b5cfc9c89778f4ded6256e71e5c3fb7d0b08b15c7baf2fba914a","ssdeep":"","tlshash":"d4017b1a76f39010599be425573f3d0924bee1071a0ad5113c1d47cccfa069aa1227f5","size":791,"data":"","first_seen":"2026-03-05T06:03:38.24591Z","last_seen":"2026-03-05T06:03:38.24591Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ob.sd559908.js.rsocdomains.com/i/58518ef7cff0c8433a35a3a4a06ac5dd.js","fqdn":"ob.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"65.9.46.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d3715fbc6351a6f06aa0c8d5ddf067c","sha1":"6d5fc7501ab5b3988a155c9790ae1c89ddf76da4","sha256":"571048f845de8fe69262ea6788eb5accaef086dc1b0cfa3d2ff9fc1243939faa","sha512":"dd1b551eba63623cc822b26ca7475716ddf69b9439079040efcca2a4b59269a7b0cd6b3a198b715819c175e224281b2a555fa51a3d856a5e3b1bd8b1fd4e260f","ssdeep":"1536:5wxeb5bdwL+phFz9FSUsqLon8NYgetcVPkx2cnYteolbFr3rd6TcWmuZUfFi8AiZ:5m5+dzfVP9ftrdruZ5QZ3fao8r0","tlshash":"53c3d6ddb2e27025439324a5157f410ae27b2e553c4b8290d17ee9d4ac7ce8e817bfac","size":121031,"data":"","first_seen":"2026-03-01T19:25:53.52879Z","last_seen":"2026-03-08T12:05:15.27578Z","times_seen":471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bd43cf0ae158526c6ab93dc3be79f28","sha1":"15c289e342bd3fdf5b1e95f7abf25a2bc78bf357","sha256":"7a13d5ae0755d86c09084ec300c4a0f1a0a06921f74d9980eba9d966ff17ad38","sha512":"5190eb107c27f5d655eab378cd468228aa031d088f59082f257f41d464a29fbdb23594043afe89a3f9b63ce86d91efad6c2901c816d85196389293a6a5a28521","ssdeep":"","tlshash":"df90040100513554711530d00134c3dd157df075dc4dd335754f57004040405c53c401","size":40,"data":"","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-04-04T13:33:36.986333Z","times_seen":20479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"c92a10324374fac681719d63979d00fe","sha1":"aee655773d856fb038536adcfd6472fc7543463e","sha256":"158a323a7ba44870f23d96f1516dd70aa48e9a72db4ebb026b0a89e212a208ab","sha512":"d27859c90f5748d3ec0ef6d4ef49c1755d6ce1ac8035cd4f7dba41b8dd7d440ad8fca164ccc948b5630ef90346ff9279e35d31887e724ab6e0284300a80eb61f","ssdeep":"","tlshash":"8430000000000000000c0000000000000000000003000000c000003000000000000c00","size":4,"data":"","first_seen":"2024-08-20T00:14:53.541497Z","last_seen":"2026-04-04T13:51:33.415463Z","times_seen":16705,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"expired.mamma.com/js/app.js","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /js/app.js HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz\r\nCookie: XSRF-TOKEN=eyJpdiI6InBLU3IreTIyTnQ2MFB5WW5raXpIelE9PSIsInZhbHVlIjoiVDhtSW9vNDZSK1VkdmZ6eGRVYWR4R1ViQnp2T1Q0RzQvbWhPV3BrSGhyTnpqMTB0UWV0OEVtSWpXQVVOUXNoamhvdm11U3hqSEJHSmJBRmZxUmlMd2tPZE1ocUEzaWFyZEFJRTh6MUh1azJxdUNIOTlyK0RjV0J3UXdZVGlOVVEiLCJtYWMiOiJlZGJkMzhiN2NhNWI3YTdiZmEyMDY1M2VlZTFmMzdlN2JhOWI0YWM0NTA1NWY3NzJlY2YxNDEzMTQ3Nzc1YTM4IiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6Ind6QTZuU1R2cy9BLzAvZXh6cWQ3OHc9PSIsInZhbHVlIjoidlpsdVJLNmxXR0NhUEZrczczS2NxVkVwT3ljcDRpK2psZ3dTQmFSS3NlUEtVNUllN3B3d3E5N0pudHBWVGdtSHlXNkRwRjVHejZQbTU3TUp6aXhYbXN6c1dtOEljSFZiMHo2bWROK2NkOHVYT3BUSHJWbUNEcHB3TFhQTlU2MisiLCJtYWMiOiIzMzk5YzBjMzU4NTM5Y2E2Yjg0NzcyZDM1Njc0Zjc3NWM4ZGY1NGZmZmI0ZjQ1NDI4YWM2NDAzMjhjOTc5MWY5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"483-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 1155\r\ncontent-type: text/javascript\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1155,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"6afc09e7619e556d54d1cb17a5a70022","sha1":"173e9d33730b6732ab48f87575fafccc1997254c","sha256":"6cd89b0651a4a6584cc98859b12e37d3df207ecf7ac621c4ade4e4c6b7469f3e","sha512":"93f964b9280cd93d8cfe439f13eeefac92d8590a6c3a286a9c667ec3f67bf870d3b652347705724b68e0f3d447b169400e4738b2ab3fa6174e252a688719f03e","ssdeep":"","tlshash":"1121eef8c87390d144b7206f86ae21a425a1197baa48f883388db5927fd8f7e15306f4","first_seen":"2025-07-02T03:33:37.427114Z","last_seen":"2026-04-04T09:28:43.665228Z","times_seen":3364,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.14.0/themes/base/jquery-ui.css","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /ui/1.14.0/themes/base/jquery-ui.css HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-8941\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\nage: 2498446\r\nx-served-by: cache-lga21941-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 4098, 875\r\nx-timer: S1772690592.649162,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 8095\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35137,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2363)","md5":"c7adb32928265c74cd2756b2e671e514","sha1":"29bd82afaa8d25afc01224193d02f917ab6ed244","sha256":"91f3e161d59796ce95f79439670ef5c752fa6c0d2100c5da5d037c400026dcd3","sha512":"2f7d90dd65dc3369a2ef5860bdde7a59c0f89756c5d736aa8cf803896e8027bdf365ebc967e33f1872ba37946fef65a6fa2fa9d36788364582ab8b3eb830d602","ssdeep":"192:70OW0NANbrj6ltnJbUetUQnSMfps3+emQY+h572hk/grQY5Y6BjSmMErEURHllPR:UrjUJo0W1eX3/PiF5fypDS25H","tlshash":"faf2ec316b432919ba1bd1a425a11bf7e32f1342ee1b6e7f64aa345cc3d54e080bf5b4","first_seen":"2024-08-16T22:22:29Z","last_seen":"2026-04-04T09:28:43.670931Z","times_seen":3491,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":72,"dns":0,"connect":26,"send":0,"wait":27,"receive":1,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/mamma-logo.svg","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/mamma-logo.svg HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz\r\nCookie: XSRF-TOKEN=eyJpdiI6InBLU3IreTIyTnQ2MFB5WW5raXpIelE9PSIsInZhbHVlIjoiVDhtSW9vNDZSK1VkdmZ6eGRVYWR4R1ViQnp2T1Q0RzQvbWhPV3BrSGhyTnpqMTB0UWV0OEVtSWpXQVVOUXNoamhvdm11U3hqSEJHSmJBRmZxUmlMd2tPZE1ocUEzaWFyZEFJRTh6MUh1azJxdUNIOTlyK0RjV0J3UXdZVGlOVVEiLCJtYWMiOiJlZGJkMzhiN2NhNWI3YTdiZmEyMDY1M2VlZTFmMzdlN2JhOWI0YWM0NTA1NWY3NzJlY2YxNDEzMTQ3Nzc1YTM4IiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6Ind6QTZuU1R2cy9BLzAvZXh6cWQ3OHc9PSIsInZhbHVlIjoidlpsdVJLNmxXR0NhUEZrczczS2NxVkVwT3ljcDRpK2psZ3dTQmFSS3NlUEtVNUllN3B3d3E5N0pudHBWVGdtSHlXNkRwRjVHejZQbTU3TUp6aXhYbXN6c1dtOEljSFZiMHo2bWROK2NkOHVYT3BUSHJWbUNEcHB3TFhQTlU2MisiLCJtYWMiOiIzMzk5YzBjMzU4NTM5Y2E2Yjg0NzcyZDM1Njc0Zjc3NWM4ZGY1NGZmZmI0ZjQ1NDI4YWM2NDAzMjhjOTc5MWY5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"7f8-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 2040\r\ncontent-type: image/svg+xml\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2040,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9cec769dd78f575508f8e4c2fc6b1552","sha1":"b542a31312251bfb5e48815297c5f829be295908","sha256":"1d6df4ff0aaf1c9c6c240e29983b7a6c226776b3637f787afe1b7f72076e4005","sha512":"1628a41902ff99c9737c74137b6914306d03c9b5723faf5fbf656f67b3596835bd384745b0f41f076649dc12597dd30474042c01aaf7369a1de9a06f232693b6","ssdeep":"","tlshash":"6a41dda74269cbbd5ffe96388e49bd1a32d17cc2e433d2c53ae61049c2250f1a01d5aa","first_seen":"2025-07-02T03:33:37.451098Z","last_seen":"2026-04-04T09:28:43.68152Z","times_seen":3358,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"933883com-cpnm9.933883a2.buzz/","fqdn":"933883com-cpnm9.933883a2.buzz","domain":"933883a2.buzz","tld":"buzz"},"ip":{"addr":"103.224.182.189","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-05T06:03:07.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0015688a.buzz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 14:52:36 GMT","end":"Sat, 23 May 2026 14:52:35 GMT"},"fingerprint":{"sha1":"70:25:50:A7:1C:17:6B:38:37:05:4A:8E:17:A8:41:5F:7B:68:A5:6E","sha256":"C2:85:D1:D4:5E:F9:83:F2:BA:01:C3:CF:0B:0F:60:D5:0B:43:1F:41:1F:EC:E0:D1:E4:AA:D4:6B:03:38:A9:1B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 933883com-cpnm9.933883a2.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\ndate: Thu, 05 Mar 2026 06:03:08 GMT\r\nserver: Apache\r\nset-cookie: __tad=1772690588.4616440; expires=Sun, 02 Mar 2036 06:03:08 GMT; Max-Age=315360000\r\nlocation: https://dynadot.rsocdomains.com/expired?d=933883a2.buzz\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2713,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":1543,"timings":{"blocked":682,"dns":331,"connect":155,"send":0,"wait":178,"receive":0,"ssl":192},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"933883com-cpnm9.933883a2.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/walmart.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/walmart.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz\r\nCookie: XSRF-TOKEN=eyJpdiI6InBLU3IreTIyTnQ2MFB5WW5raXpIelE9PSIsInZhbHVlIjoiVDhtSW9vNDZSK1VkdmZ6eGRVYWR4R1ViQnp2T1Q0RzQvbWhPV3BrSGhyTnpqMTB0UWV0OEVtSWpXQVVOUXNoamhvdm11U3hqSEJHSmJBRmZxUmlMd2tPZE1ocUEzaWFyZEFJRTh6MUh1azJxdUNIOTlyK0RjV0J3UXdZVGlOVVEiLCJtYWMiOiJlZGJkMzhiN2NhNWI3YTdiZmEyMDY1M2VlZTFmMzdlN2JhOWI0YWM0NTA1NWY3NzJlY2YxNDEzMTQ3Nzc1YTM4IiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6Ind6QTZuU1R2cy9BLzAvZXh6cWQ3OHc9PSIsInZhbHVlIjoidlpsdVJLNmxXR0NhUEZrczczS2NxVkVwT3ljcDRpK2psZ3dTQmFSS3NlUEtVNUllN3B3d3E5N0pudHBWVGdtSHlXNkRwRjVHejZQbTU3TUp6aXhYbXN6c1dtOEljSFZiMHo2bWROK2NkOHVYT3BUSHJWbUNEcHB3TFhQTlU2MisiLCJtYWMiOiIzMzk5YzBjMzU4NTM5Y2E2Yjg0NzcyZDM1Njc0Zjc3NWM4ZGY1NGZmZmI0ZjQ1NDI4YWM2NDAzMjhjOTc5MWY5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"8be-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 2238\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2238,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"c55dead6c1f0b6dcc6881facc0944fc5","sha1":"2fa841a393a2381632a362c2db2623c56be3aab5","sha256":"753b210ea1db70579a22911976c61c21490d239d18994268cce03af0fd8d7c78","sha512":"4df5152d646327f3f1aac2c9cd5502acc8cc125222f82fcfb24e663dc07b5207ef2732c4e2030438ef6e94c5602721d8bbccec8b6e4c187c09e364a04d222585","ssdeep":"","tlshash":"244109c118e16e1bd916363d7feb1b402a26636f500652043b11b827db87610e4ab2c7","first_seen":"2025-03-15T23:41:14.383382Z","last_seen":"2026-04-04T09:24:12.622265Z","times_seen":3317,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/stockX.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/stockX.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz\r\nCookie: XSRF-TOKEN=eyJpdiI6InBLU3IreTIyTnQ2MFB5WW5raXpIelE9PSIsInZhbHVlIjoiVDhtSW9vNDZSK1VkdmZ6eGRVYWR4R1ViQnp2T1Q0RzQvbWhPV3BrSGhyTnpqMTB0UWV0OEVtSWpXQVVOUXNoamhvdm11U3hqSEJHSmJBRmZxUmlMd2tPZE1ocUEzaWFyZEFJRTh6MUh1azJxdUNIOTlyK0RjV0J3UXdZVGlOVVEiLCJtYWMiOiJlZGJkMzhiN2NhNWI3YTdiZmEyMDY1M2VlZTFmMzdlN2JhOWI0YWM0NTA1NWY3NzJlY2YxNDEzMTQ3Nzc1YTM4IiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6Ind6QTZuU1R2cy9BLzAvZXh6cWQ3OHc9PSIsInZhbHVlIjoidlpsdVJLNmxXR0NhUEZrczczS2NxVkVwT3ljcDRpK2psZ3dTQmFSS3NlUEtVNUllN3B3d3E5N0pudHBWVGdtSHlXNkRwRjVHejZQbTU3TUp6aXhYbXN6c1dtOEljSFZiMHo2bWROK2NkOHVYT3BUSHJWbUNEcHB3TFhQTlU2MisiLCJtYWMiOiIzMzk5YzBjMzU4NTM5Y2E2Yjg0NzcyZDM1Njc0Zjc3NWM4ZGY1NGZmZmI0ZjQ1NDI4YWM2NDAzMjhjOTc5MWY5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"711-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 1809\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1809,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"3a74e3bc367eca73b987c062d3cc121c","sha1":"a4dd42327e27f6f5b015173c166ea31330aafdb8","sha256":"2b589c966d50e480e5c1e9966c5305f00b63be2b28b83be271ef4a96483da903","sha512":"095664247fcc501d6f766a749ea030ec324d3943511ed9a214b8e47456b6b952ad40d13337285d0980f811349ffb4c8f1d811138e4a16117b07e230ee8809d6c","ssdeep":"","tlshash":"fb31e65f24443d2cc645fa3ace6033b81a129840bb7913454dcbf43e0b0e1873fe9992","first_seen":"2025-07-02T03:33:37.403661Z","last_seen":"2026-04-04T09:24:12.599388Z","times_seen":3309,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep1.adtrafficquality.google/getconfig/sodar?sv=200\u0026tid=afs\u0026tv=1234567890\u0026st=env\u0026sjk=aN63jqfPSXefjumIcouuYA==\u0026sde=1","fqdn":"ep1.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"142.250.178.98","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:13.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adtrafficquality.google","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:40:04 GMT","end":"Mon, 27 Apr 2026 08:40:03 GMT"},"fingerprint":{"sha1":"48:5E:30:A3:53:85:10:4B:D1:5F:08:28:03:7A:94:53:A3:AF:9E:FB","sha256":"52:E6:EC:CE:8F:CE:7B:0D:30:AD:8E:25:53:FD:78:51:32:F3:83:2A:9E:09:03:20:E0:7A:F8:22:F3:05:B2:DB"}}},"request":{"raw":"GET /getconfig/sodar?sv=200\u0026tid=afs\u0026tv=1234567890\u0026st=env\u0026sjk=aN63jqfPSXefjumIcouuYA==\u0026sde=1 HTTP/1.1\r\nHost: ep1.adtrafficquality.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=UTF-8\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\ndate: Thu, 05 Mar 2026 06:03:14 GMT\r\nserver: cafe\r\ncontent-length: 8056\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10658,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2a4b735d720a1f774451928a73ae2564","sha1":"4091df771c4386f9d1536ea1f0ff6bb3922c2ab0","sha256":"dbf9d3d7c69f23b7b54b6e4a3cc8989819f00ecc841d0aff3a36be8b4448575a","sha512":"85e917217f332f631872d2bcea8f39ee83c1e6ab52f97bf56483caf2274f7a1f943076311ae052a4b95fd2087c09bc524dc30346a9255ad1996d4372218b7cf0","ssdeep":"192:QhCkI+5PDOCS1XwbGyUTd4EisTTYOzli4cQs:/+S1XePUT1imzYQs","tlshash":"0d22d093ae2d41c36bb6c316c1c7423d20414168fc47b6cee974242be587e56e2270eb","first_seen":"2026-03-05T06:03:38.199574Z","last_seen":"2026-03-05T06:03:38.199574Z","times_seen":1,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":115,"dns":1,"connect":28,"send":0,"wait":56,"receive":2,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/paramountplus.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/paramountplus.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz\r\nCookie: XSRF-TOKEN=eyJpdiI6InBLU3IreTIyTnQ2MFB5WW5raXpIelE9PSIsInZhbHVlIjoiVDhtSW9vNDZSK1VkdmZ6eGRVYWR4R1ViQnp2T1Q0RzQvbWhPV3BrSGhyTnpqMTB0UWV0OEVtSWpXQVVOUXNoamhvdm11U3hqSEJHSmJBRmZxUmlMd2tPZE1ocUEzaWFyZEFJRTh6MUh1azJxdUNIOTlyK0RjV0J3UXdZVGlOVVEiLCJtYWMiOiJlZGJkMzhiN2NhNWI3YTdiZmEyMDY1M2VlZTFmMzdlN2JhOWI0YWM0NTA1NWY3NzJlY2YxNDEzMTQ3Nzc1YTM4IiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6Ind6QTZuU1R2cy9BLzAvZXh6cWQ3OHc9PSIsInZhbHVlIjoidlpsdVJLNmxXR0NhUEZrczczS2NxVkVwT3ljcDRpK2psZ3dTQmFSS3NlUEtVNUllN3B3d3E5N0pudHBWVGdtSHlXNkRwRjVHejZQbTU3TUp6aXhYbXN6c1dtOEljSFZiMHo2bWROK2NkOHVYT3BUSHJWbUNEcHB3TFhQTlU2MisiLCJtYWMiOiIzMzk5YzBjMzU4NTM5Y2E2Yjg0NzcyZDM1Njc0Zjc3NWM4ZGY1NGZmZmI0ZjQ1NDI4YWM2NDAzMjhjOTc5MWY5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"1e076-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 122998\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":122998,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 950 x 950, 8-bit/color RGBA, non-interlaced","md5":"56258cd30601041a360e3a721edb7129","sha1":"2f29d7342998911bdd6f8ca58484548e6d363b32","sha256":"1c13d46b591e6846eaeea09d1d505bb2ac264f4edddca3f4eda06024277750be","sha512":"b7497db239188cfb2e2b32ff81135eb8fdf55d1568dcaec92c7084580795d69ca7aac6f139fa4c33ee416d249a984d146c38c37de58a156790cacbf08efa9b78","ssdeep":"3072:bIJbnu1qWtyhu83Aa2t9pWsjkMVnPq3ny8o6DC+mMH4486XGZNQJVEF0:ccquTR9/j5nGo6DsMfnQGJV7","tlshash":"83c31282a9c25e20d27f727e65cb58498393ce25b367b6b835896512fc1dfc8383413b","first_seen":"2025-07-02T03:33:37.428722Z","last_seen":"2026-04-04T09:24:12.618342Z","times_seen":3311,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/samsung.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/samsung.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz\r\nCookie: XSRF-TOKEN=eyJpdiI6InBLU3IreTIyTnQ2MFB5WW5raXpIelE9PSIsInZhbHVlIjoiVDhtSW9vNDZSK1VkdmZ6eGRVYWR4R1ViQnp2T1Q0RzQvbWhPV3BrSGhyTnpqMTB0UWV0OEVtSWpXQVVOUXNoamhvdm11U3hqSEJHSmJBRmZxUmlMd2tPZE1ocUEzaWFyZEFJRTh6MUh1azJxdUNIOTlyK0RjV0J3UXdZVGlOVVEiLCJtYWMiOiJlZGJkMzhiN2NhNWI3YTdiZmEyMDY1M2VlZTFmMzdlN2JhOWI0YWM0NTA1NWY3NzJlY2YxNDEzMTQ3Nzc1YTM4IiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6Ind6QTZuU1R2cy9BLzAvZXh6cWQ3OHc9PSIsInZhbHVlIjoidlpsdVJLNmxXR0NhUEZrczczS2NxVkVwT3ljcDRpK2psZ3dTQmFSS3NlUEtVNUllN3B3d3E5N0pudHBWVGdtSHlXNkRwRjVHejZQbTU3TUp6aXhYbXN6c1dtOEljSFZiMHo2bWROK2NkOHVYT3BUSHJWbUNEcHB3TFhQTlU2MisiLCJtYWMiOiIzMzk5YzBjMzU4NTM5Y2E2Yjg0NzcyZDM1Njc0Zjc3NWM4ZGY1NGZmZmI0ZjQ1NDI4YWM2NDAzMjhjOTc5MWY5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"1ec6-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 7878\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7878,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"dce623707b3632f8e0b5d1b222e54f31","sha1":"917107118b9e2437a08d5d65b2944f2402af635c","sha256":"c59f8b204e7a80a9f7863b11393da254a801feaee3108d1afadef0431644c2a0","sha512":"9c9dd63cba86a8ca5a401b30d41a1e9b76a61c3005f50cc0a9d82823815e6c2b3ca2b538ac016d2ccb3e6b64e55979dd758adeaf4ac35ddf0814a0cff9ebe3bd","ssdeep":"192:se90ywTuMWvsb4Da/wK+jrVKBiMWhX5l0X+U:sN3uMWEbvwK+fkRWl5lFU","tlshash":"99f17df23f10ad0ac21c17715ca04b45cb876d05b874a36fe5d9642af7be8b851884db","first_seen":"2025-07-02T03:33:37.453175Z","last_seen":"2026-04-04T09:24:12.602863Z","times_seen":3314,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:12.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 00:01:32 GMT\r\nexpires: Thu, 04 Mar 2027 00:01:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 108100\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-04T13:47:11.446009Z","times_seen":199167,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-9WGW9SCFVP\u0026gtm=45je6340h2v876558862z89192081961za20gzb9192081961zd9192081961\u0026_p=1772690592573\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=951130728.1772690593\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGA\u0026_s=1\u0026tag_exp=103116026~103200004~115938466~115938468~116024733~117484252\u0026sid=1772690593\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fexpired.mamma.com%2F%3Fcid%3D99998%26d%3D933883a2.buzz\u0026dr=https%3A%2F%2Fdynadot.rsocdomains.com%2F\u0026dt=Mamma.com%20Search%20-%20Trust%20Mamma%20to%20provide%20the%20best%20search%20results\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=3036","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:13.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-9WGW9SCFVP\u0026gtm=45je6340h2v876558862z89192081961za20gzb9192081961zd9192081961\u0026_p=1772690592573\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=951130728.1772690593\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGA\u0026_s=1\u0026tag_exp=103116026~103200004~115938466~115938468~116024733~117484252\u0026sid=1772690593\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fexpired.mamma.com%2F%3Fcid%3D99998%26d%3D933883a2.buzz\u0026dr=https%3A%2F%2Fdynadot.rsocdomains.com%2F\u0026dt=Mamma.com%20Search%20-%20Trust%20Mamma%20to%20provide%20the%20best%20search%20results\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=3036 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://expired.mamma.com/\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://expired.mamma.com\r\ndate: Thu, 05 Mar 2026 06:03:13 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:171:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:171:0\r\nreport-to: {\"group\":\"ascnsrsggc:171:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:171:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":63,"dns":0,"connect":7,"send":0,"wait":16,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/sams-club.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/sams-club.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz\r\nCookie: XSRF-TOKEN=eyJpdiI6InBLU3IreTIyTnQ2MFB5WW5raXpIelE9PSIsInZhbHVlIjoiVDhtSW9vNDZSK1VkdmZ6eGRVYWR4R1ViQnp2T1Q0RzQvbWhPV3BrSGhyTnpqMTB0UWV0OEVtSWpXQVVOUXNoamhvdm11U3hqSEJHSmJBRmZxUmlMd2tPZE1ocUEzaWFyZEFJRTh6MUh1azJxdUNIOTlyK0RjV0J3UXdZVGlOVVEiLCJtYWMiOiJlZGJkMzhiN2NhNWI3YTdiZmEyMDY1M2VlZTFmMzdlN2JhOWI0YWM0NTA1NWY3NzJlY2YxNDEzMTQ3Nzc1YTM4IiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6Ind6QTZuU1R2cy9BLzAvZXh6cWQ3OHc9PSIsInZhbHVlIjoidlpsdVJLNmxXR0NhUEZrczczS2NxVkVwT3ljcDRpK2psZ3dTQmFSS3NlUEtVNUllN3B3d3E5N0pudHBWVGdtSHlXNkRwRjVHejZQbTU3TUp6aXhYbXN6c1dtOEljSFZiMHo2bWROK2NkOHVYT3BUSHJWbUNEcHB3TFhQTlU2MisiLCJtYWMiOiIzMzk5YzBjMzU4NTM5Y2E2Yjg0NzcyZDM1Njc0Zjc3NWM4ZGY1NGZmZmI0ZjQ1NDI4YWM2NDAzMjhjOTc5MWY5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"12db-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 4827\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4827,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"772f2fd78bfb39c468fe810628a49dd8","sha1":"a2954af1ffb3e977e70b430d40d35d4355cf9dc2","sha256":"05e62c55992587f973cbfd930165b34d67e8665635e75575dac8b3738bf01c45","sha512":"d7ec04451d609e21d9cbb86c4261e218ac6b607a2a08ad76c9a5c637c0aafa8389510041cbabe3954e3ac2d459f0e64455fddbe0603b5a450c57ca498a88baf6","ssdeep":"96:jkPCFhYNmLZcLNMrNk+f62cS674veBtkVuJQkUPSwp+U:QPGhYNm1P53yP4veBWVu0boU","tlshash":"a6a1ae6861492395a000eeccb46f0caa16416d4e2e9b4ad3d730aaf4fdd3dbc95f834c","first_seen":"2025-07-02T03:33:37.45503Z","last_seen":"2026-04-04T09:24:12.606865Z","times_seen":3313,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/kohls.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/kohls.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz\r\nCookie: XSRF-TOKEN=eyJpdiI6InBLU3IreTIyTnQ2MFB5WW5raXpIelE9PSIsInZhbHVlIjoiVDhtSW9vNDZSK1VkdmZ6eGRVYWR4R1ViQnp2T1Q0RzQvbWhPV3BrSGhyTnpqMTB0UWV0OEVtSWpXQVVOUXNoamhvdm11U3hqSEJHSmJBRmZxUmlMd2tPZE1ocUEzaWFyZEFJRTh6MUh1azJxdUNIOTlyK0RjV0J3UXdZVGlOVVEiLCJtYWMiOiJlZGJkMzhiN2NhNWI3YTdiZmEyMDY1M2VlZTFmMzdlN2JhOWI0YWM0NTA1NWY3NzJlY2YxNDEzMTQ3Nzc1YTM4IiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6Ind6QTZuU1R2cy9BLzAvZXh6cWQ3OHc9PSIsInZhbHVlIjoidlpsdVJLNmxXR0NhUEZrczczS2NxVkVwT3ljcDRpK2psZ3dTQmFSS3NlUEtVNUllN3B3d3E5N0pudHBWVGdtSHlXNkRwRjVHejZQbTU3TUp6aXhYbXN6c1dtOEljSFZiMHo2bWROK2NkOHVYT3BUSHJWbUNEcHB3TFhQTlU2MisiLCJtYWMiOiIzMzk5YzBjMzU4NTM5Y2E2Yjg0NzcyZDM1Njc0Zjc3NWM4ZGY1NGZmZmI0ZjQ1NDI4YWM2NDAzMjhjOTc5MWY5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"5ea-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 1514\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1514,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"f6460f7fcdc8f7eb154a550c288b5cab","sha1":"7a166d72f5a212f40a512b8a6ffa92ed5753dc20","sha256":"f830f7710726f1d905411ed23c357fd22d163b9a859dc910323051d94ec74427","sha512":"92660ccdddc6751a5d3541db9847662a78a01b634f2062a28bd68e87590c4027a3e023858a5e1d19d5b10a5edff9cfa2476431508a1f60ac1833b6ce31132892","ssdeep":"","tlshash":"ce31ebd52aa594aed1fef83bd655512716acb3350b5ccd07276d08dd2ea0b30d50603a","first_seen":"2025-07-02T03:33:37.447297Z","last_seen":"2026-04-04T09:24:12.608869Z","times_seen":3312,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/storage/uploads/hero_image/quran.png","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /storage/uploads/hero_image/quran.png HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InBLU3IreTIyTnQ2MFB5WW5raXpIelE9PSIsInZhbHVlIjoiVDhtSW9vNDZSK1VkdmZ6eGRVYWR4R1ViQnp2T1Q0RzQvbWhPV3BrSGhyTnpqMTB0UWV0OEVtSWpXQVVOUXNoamhvdm11U3hqSEJHSmJBRmZxUmlMd2tPZE1ocUEzaWFyZEFJRTh6MUh1azJxdUNIOTlyK0RjV0J3UXdZVGlOVVEiLCJtYWMiOiJlZGJkMzhiN2NhNWI3YTdiZmEyMDY1M2VlZTFmMzdlN2JhOWI0YWM0NTA1NWY3NzJlY2YxNDEzMTQ3Nzc1YTM4IiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6Ind6QTZuU1R2cy9BLzAvZXh6cWQ3OHc9PSIsInZhbHVlIjoidlpsdVJLNmxXR0NhUEZrczczS2NxVkVwT3ljcDRpK2psZ3dTQmFSS3NlUEtVNUllN3B3d3E5N0pudHBWVGdtSHlXNkRwRjVHejZQbTU3TUp6aXhYbXN6c1dtOEljSFZiMHo2bWROK2NkOHVYT3BUSHJWbUNEcHB3TFhQTlU2MisiLCJtYWMiOiIzMzk5YzBjMzU4NTM5Y2E2Yjg0NzcyZDM1Njc0Zjc3NWM4ZGY1NGZmZmI0ZjQ1NDI4YWM2NDAzMjhjOTc5MWY5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\nserver: Apache\r\nlast-modified: Sun, 22 Feb 2026 08:17:46 GMT\r\netag: \"1b30eb-64b654a0b3324\"\r\naccept-ranges: bytes\r\ncontent-length: 1781995\r\ncontent-type: image/png\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1781995,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"d71536b97a54e33d40fd88b48d4e1b99","sha1":"edf670f4420eef96b427f345565b3d0a79e6c486","sha256":"5088f6a306c90cc93c8dd39024e4a50379a29e92e507f131d863297d62b2acae","sha512":"54b164355020c0a33e1fc15d812ffd704dcda16e7dfccd4d1a61fd6159d8b21ce1eaab68ce66db64c529b6e0118e54217f8a8a3b187ceb0537fb833d97123f9a","ssdeep":"24576:MFgMuJbAj9fCC/5Vyzmoy0wQwyAESXxUV8+Ck4kH7ZwdcXh:xGjlCCMmoy0wQlZSXxU6+NT7ZwuXh","tlshash":"4f252324ec0a623cc6576c7868b44581dff438d2de84950204c98196db66f2afb6fbce","first_seen":"2026-03-04T09:15:28.83046Z","last_seen":"2026-04-04T09:24:12.600919Z","times_seen":217,"resource_available":false,"data":null}},"time_used":1389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":740,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired/result?rid=14c678ad7719f43ab3bcd59f3f88cf7c\u0026cid=52a18e42-6e70-43df-9648-aa67df9e6902\u0026d=933883a2.buzz","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.66","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-05T06:03:10.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"test.rsocdomains.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 21:41:33 GMT","end":"Sat, 09 May 2026 21:41:32 GMT"},"fingerprint":{"sha1":"1E:C9:08:BA:B6:E8:CD:70:8B:24:03:1B:31:6A:69:AD:0D:CC:6A:BA","sha256":"10:8C:2B:1B:06:D5:06:01:C4:9A:24:79:29:29:8B:FA:99:0D:5D:12:50:5D:35:E1:79:1F:10:C7:18:31:D5:E0"}}},"request":{"raw":"GET /expired/result?rid=14c678ad7719f43ab3bcd59f3f88cf7c\u0026cid=52a18e42-6e70-43df-9648-aa67df9e6902\u0026d=933883a2.buzz HTTP/1.1\r\nHost: dynadot.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/expired?d=933883a2.buzz\r\nCookie: _cq_duid=4.09c1dac64ce0c9189691080c3b878e45; _cq_suid=1.1772690589.g8iIBj91IateZnkF; _cq_pvid=4.14c678ad7719f43ab3bcd59f3f88cf7c\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-length: 0\r\ndate: Thu, 05 Mar 2026 06:03:10 GMT\r\nserver: Kestrel\r\ncache-control: no-cache\r\nlocation: https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]}],"data":{"size":38831,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/storage/uploads/hero_image/cas-72.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /storage/uploads/hero_image/cas-72.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InBLU3IreTIyTnQ2MFB5WW5raXpIelE9PSIsInZhbHVlIjoiVDhtSW9vNDZSK1VkdmZ6eGRVYWR4R1ViQnp2T1Q0RzQvbWhPV3BrSGhyTnpqMTB0UWV0OEVtSWpXQVVOUXNoamhvdm11U3hqSEJHSmJBRmZxUmlMd2tPZE1ocUEzaWFyZEFJRTh6MUh1azJxdUNIOTlyK0RjV0J3UXdZVGlOVVEiLCJtYWMiOiJlZGJkMzhiN2NhNWI3YTdiZmEyMDY1M2VlZTFmMzdlN2JhOWI0YWM0NTA1NWY3NzJlY2YxNDEzMTQ3Nzc1YTM4IiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6Ind6QTZuU1R2cy9BLzAvZXh6cWQ3OHc9PSIsInZhbHVlIjoidlpsdVJLNmxXR0NhUEZrczczS2NxVkVwT3ljcDRpK2psZ3dTQmFSS3NlUEtVNUllN3B3d3E5N0pudHBWVGdtSHlXNkRwRjVHejZQbTU3TUp6aXhYbXN6c1dtOEljSFZiMHo2bWROK2NkOHVYT3BUSHJWbUNEcHB3TFhQTlU2MisiLCJtYWMiOiIzMzk5YzBjMzU4NTM5Y2E2Yjg0NzcyZDM1Njc0Zjc3NWM4ZGY1NGZmZmI0ZjQ1NDI4YWM2NDAzMjhjOTc5MWY5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\nserver: Apache\r\nlast-modified: Mon, 12 Jan 2026 00:51:53 GMT\r\netag: \"e60-6482647f96d96\"\r\naccept-ranges: bytes\r\ncontent-length: 3680\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3680,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f168483c75eb41a2408fd96f41d1e801","sha1":"16f90b94650ac6e0619ce726ad8ce37746f1815a","sha256":"71c777d0d7ecf5305f04d0cd55f20d02c707fb6aace4cf5289641ad17d6f990a","sha512":"11e1b8fc90ce7c041eed1a0625972a9e75ce5372d5dd7c02ea48589a36cfb032f2e3567276de511aff30a36b989d806db81bc2a9d2e8e0de309c45c9b7345ece","ssdeep":"","tlshash":"26716c30637c23d6c327ab7800319380a2c03fe05aa75382d309972553c94c6f5ea957","first_seen":"2026-03-04T09:15:28.845747Z","last_seen":"2026-04-04T09:24:12.618887Z","times_seen":217,"resource_available":false,"data":null}},"time_used":645,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":645,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-9WGW9SCFVP\u0026gtm=45je6340h2v876558862z89192081961za20gzb9192081961zd9192081961\u0026_p=1772690592573\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=951130728.1772690593\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGQ\u0026_s=2\u0026tag_exp=103116026~103200004~115938466~115938468~116024733~117484252\u0026sid=1772690593\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fexpired.mamma.com%2F%3Fcid%3D99998%26d%3D933883a2.buzz\u0026dr=https%3A%2F%2Fdynadot.rsocdomains.com%2F\u0026dt=Mamma.com%20Search%20-%20Trust%20Mamma%20to%20provide%20the%20best%20search%20results\u0026en=page_view\u0026tfd=8059","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:18.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-9WGW9SCFVP\u0026gtm=45je6340h2v876558862z89192081961za20gzb9192081961zd9192081961\u0026_p=1772690592573\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=951130728.1772690593\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGQ\u0026_s=2\u0026tag_exp=103116026~103200004~115938466~115938468~116024733~117484252\u0026sid=1772690593\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fexpired.mamma.com%2F%3Fcid%3D99998%26d%3D933883a2.buzz\u0026dr=https%3A%2F%2Fdynadot.rsocdomains.com%2F\u0026dt=Mamma.com%20Search%20-%20Trust%20Mamma%20to%20provide%20the%20best%20search%20results\u0026en=page_view\u0026tfd=8059 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://expired.mamma.com/\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://expired.mamma.com\r\ndate: Thu, 05 Mar 2026 06:03:18 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:171:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:171:0\r\nreport-to: {\"group\":\"ascnsrsggc:171:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:171:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ob.sd559908.js.rsocdomains.com/i/58518ef7cff0c8433a35a3a4a06ac5dd.js","fqdn":"ob.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"65.9.46.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dynadot.rsocdomains.com/expired?d=933883a2.buzz","date":"2026-03-05T06:03:09.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sd559908.js.rsocdomains.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 25 Nov 2025 00:00:00 GMT","end":"Thu, 24 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D8:BF:CA:57:4B:F8:E0:A8:F2:21:31:99:0C:8C:18:40:E5:CD:00:F6","sha256":"AC:AC:4F:5E:FC:5A:BF:23:4B:FB:96:F1:BD:C6:59:2F:FF:13:DE:12:47:1C:3B:14:64:0C:C4:EC:A2:AA:7F:3D"}}},"request":{"raw":"GET /i/58518ef7cff0c8433a35a3a4a06ac5dd.js HTTP/1.1\r\nHost: ob.sd559908.js.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 44779\r\ncontent-encoding: gzip\r\nserver: Caddy\r\ndate: Wed, 04 Mar 2026 23:58:14 GMT\r\ncache-control: max-age=43200\r\nexpires: Thu, 05 Mar 2026 11:58:12 GMT\r\netag: \"1d8c7-bV/HUBq1s5iKFVyXkK4cid33baQ\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 00e0a1f3db0a6b68739ab37e1cf3422a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: X7MFiyC8LLEyx3hYzqkMClsjNm0rHyzPb042803-28WaZHWZOwD7DQ==\r\nage: 21897\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":121031,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"0d3715fbc6351a6f06aa0c8d5ddf067c","sha1":"6d5fc7501ab5b3988a155c9790ae1c89ddf76da4","sha256":"571048f845de8fe69262ea6788eb5accaef086dc1b0cfa3d2ff9fc1243939faa","sha512":"dd1b551eba63623cc822b26ca7475716ddf69b9439079040efcca2a4b59269a7b0cd6b3a198b715819c175e224281b2a555fa51a3d856a5e3b1bd8b1fd4e260f","ssdeep":"1536:5wxeb5bdwL+phFz9FSUsqLon8NYgetcVPkx2cnYteolbFr3rd6TcWmuZUfFi8AiZ:5m5+dzfVP9ftrdruZ5QZ3fao8r0","tlshash":"53c3d6ddb2e27025439324a5157f410ae27b2e553c4b8290d17ee9d4ac7ce8e817bfac","first_seen":"2026-03-01T19:25:53.52879Z","last_seen":"2026-03-08T12:05:15.27578Z","times_seen":471,"resource_available":true,"data":null}},"time_used":462,"timings":{"blocked":219,"dns":193,"connect":11,"send":0,"wait":11,"receive":11,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/js/tailwindcss.js","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /js/tailwindcss.js HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz\r\nCookie: XSRF-TOKEN=eyJpdiI6InBLU3IreTIyTnQ2MFB5WW5raXpIelE9PSIsInZhbHVlIjoiVDhtSW9vNDZSK1VkdmZ6eGRVYWR4R1ViQnp2T1Q0RzQvbWhPV3BrSGhyTnpqMTB0UWV0OEVtSWpXQVVOUXNoamhvdm11U3hqSEJHSmJBRmZxUmlMd2tPZE1ocUEzaWFyZEFJRTh6MUh1azJxdUNIOTlyK0RjV0J3UXdZVGlOVVEiLCJtYWMiOiJlZGJkMzhiN2NhNWI3YTdiZmEyMDY1M2VlZTFmMzdlN2JhOWI0YWM0NTA1NWY3NzJlY2YxNDEzMTQ3Nzc1YTM4IiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6Ind6QTZuU1R2cy9BLzAvZXh6cWQ3OHc9PSIsInZhbHVlIjoidlpsdVJLNmxXR0NhUEZrczczS2NxVkVwT3ljcDRpK2psZ3dTQmFSS3NlUEtVNUllN3B3d3E5N0pudHBWVGdtSHlXNkRwRjVHejZQbTU3TUp6aXhYbXN6c1dtOEljSFZiMHo2bWROK2NkOHVYT3BUSHJWbUNEcHB3TFhQTlU2MisiLCJtYWMiOiIzMzk5YzBjMzU4NTM5Y2E2Yjg0NzcyZDM1Njc0Zjc3NWM4ZGY1NGZmZmI0ZjQ1NDI4YWM2NDAzMjhjOTc5MWY5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\nserver: Apache\r\nlast-modified: Wed, 30 Jul 2025 09:48:49 GMT\r\netag: \"636ef-63b226e7ee240\"\r\naccept-ranges: bytes\r\ncontent-length: 407279\r\ncontent-type: text/javascript\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-04T13:46:56.067837Z","times_seen":28772,"resource_available":true,"data":null}},"time_used":875,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":655,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:400,400italic,600,600italic,700,700italic,800,800italic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"GET /css?family=Open+Sans:400,400italic,600,600italic,700,700italic,800,800italic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 05 Mar 2026 06:03:11 GMT\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46468,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"fc4d1e8341532e72b100662c8d5cd00b","sha1":"9fb1cdb5aa0fbacb008b309cad0c3f15cb77aee3","sha256":"9d0d749d352bfe34562d871e060ad504c4c2e3f26fac903b7c64751eacab220e","sha512":"06a816f0e8acea46f483fdcdb92063c14a95397cbcf94b6df0fc1947de44d364b21f47021e7df34468ca1b4058128d0cc0d8cb36d1b12c21dfe4ac82da175494","ssdeep":"384:+bOjI8t7KvGqY49xn+vROFuGttcvoqY497nMZ6OiFLty5v7qY49Un1AnOPEgtHmN:kiCAgkgHL8OOnL3JbcI/z","tlshash":"57231c910417244066432dd233de3e30ee0fa2607044d076abfd9bdbeedad6a62b535d","first_seen":"2025-09-18T17:37:33.475534Z","last_seen":"2026-04-04T09:28:43.680355Z","times_seen":3549,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":180,"dns":0,"connect":18,"send":0,"wait":38,"receive":0,"ssl":173},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-9WGW9SCFVP\u0026cx=c\u0026gtm=4e6340h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:13.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:44 GMT","end":"Mon, 27 Apr 2026 08:36:43 GMT"},"fingerprint":{"sha1":"60:4D:15:F0:37:85:71:03:3A:5F:40:31:C7:D1:01:D3:83:25:3A:02","sha256":"67:C0:9E:02:17:D8:19:0D:DC:84:B7:81:9F:AA:72:31:D5:26:0D:A6:E0:AB:41:AD:C9:26:05:57:7C:19:35:3A"}}},"request":{"raw":"GET /gtag/js?id=G-9WGW9SCFVP\u0026cx=c\u0026gtm=4e6340h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 05 Mar 2026 06:03:13 GMT\r\nexpires: Thu, 05 Mar 2026 06:03:13 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 153229\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":464961,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"304cc3a8f62e11dfc0063f02c0d52b43","sha1":"b8ae34e1b48876752d9bc4ea08438835052cef5c","sha256":"26a930a90a75a2528dbee74c621cb1704344884bc0217a240c06d986b4e0ffb7","sha512":"bb0e0d4db4b5e84be0a9c3682308553399d2fd8db36379a1e798c0eaf91afc1dcbf334abdbf739e262b1f14754d9152939cad822704f5eb549dceea8707c1aa2","ssdeep":"6144:gekKfNl3HjvNQB/KI0SfZ8RGw/V0sApXxeZAJJx:Z/FxHjvIDfZ8/4","tlshash":"ffa40ace73c674225396f478503f018ba57b28a2b49cc89af189cce46e7469a4137f7d","first_seen":"2026-03-05T03:24:26.269287Z","last_seen":"2026-03-05T07:40:59.903727Z","times_seen":12,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":52,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pro.fontawesome.com/releases/v5.14.0/css/all.css","fqdn":"pro.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /releases/v5.14.0/css/all.css HTTP/1.1\r\nHost: pro.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nx-amz-id-2: n52Bf3LWRDaOcX+G2RPVwx8SEDZUCJ0AyfUgjGPvYVNyQUafB/LdFOPd3sfuEtvf+8L1+JbisB/iLAkorEypR6t9a9Lmjg9G\r\nx-amz-request-id: XZ1VFYBQX2EYTN8Q\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 28 Jun 2021 17:12:47 GMT\r\netag: W/\"1dfe138ae594553bc5ddec1f1f1ef389\"\r\ncache-control: max-age=31556926\r\nage: 3720401\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9d76ea855888a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173842,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65393)","md5":"1dfe138ae594553bc5ddec1f1f1ef389","sha1":"7cc21d0873893a2ef4f9ad06962d8b32cb62d24d","sha256":"e7de3b4b49089f8cdd8267eda652f35806cb2b70f7c5cec0351f6d129263e52b","sha512":"95aa51536dd8c8075b1ce64b8424884e91d8f1718115295d2d9c4a9b5faccb1a7b5675f9a8a0db6a2c458fb5519cf47872247f01ea2c3616919449f20f5de6b9","ssdeep":"1536:mLv1E8SIklJ/ZHUADlnzZ+mqX5l5dWGFIibJbiC8IYiy6BFAXq6Y18GMF63kAmh9:61E1Ik3/S2ln9+1vlbqMAXHP","tlshash":"e4046eb4d41e01da7726c60fab01b27a99f6f738d5410e4ae0cb4d1e1de2b9811c9bed","first_seen":"2023-04-11T10:03:25Z","last_seen":"2026-04-04T09:28:43.686732Z","times_seen":3746,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":29,"dns":6,"connect":2,"send":0,"wait":27,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:12.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 00:01:32 GMT\r\nexpires: Thu, 04 Mar 2027 00:01:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 108100\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-04T13:47:11.446009Z","times_seen":199167,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":107,"dns":1,"connect":14,"send":0,"wait":14,"receive":20,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/doordash.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/doordash.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz\r\nCookie: XSRF-TOKEN=eyJpdiI6InBLU3IreTIyTnQ2MFB5WW5raXpIelE9PSIsInZhbHVlIjoiVDhtSW9vNDZSK1VkdmZ6eGRVYWR4R1ViQnp2T1Q0RzQvbWhPV3BrSGhyTnpqMTB0UWV0OEVtSWpXQVVOUXNoamhvdm11U3hqSEJHSmJBRmZxUmlMd2tPZE1ocUEzaWFyZEFJRTh6MUh1azJxdUNIOTlyK0RjV0J3UXdZVGlOVVEiLCJtYWMiOiJlZGJkMzhiN2NhNWI3YTdiZmEyMDY1M2VlZTFmMzdlN2JhOWI0YWM0NTA1NWY3NzJlY2YxNDEzMTQ3Nzc1YTM4IiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6Ind6QTZuU1R2cy9BLzAvZXh6cWQ3OHc9PSIsInZhbHVlIjoidlpsdVJLNmxXR0NhUEZrczczS2NxVkVwT3ljcDRpK2psZ3dTQmFSS3NlUEtVNUllN3B3d3E5N0pudHBWVGdtSHlXNkRwRjVHejZQbTU3TUp6aXhYbXN6c1dtOEljSFZiMHo2bWROK2NkOHVYT3BUSHJWbUNEcHB3TFhQTlU2MisiLCJtYWMiOiIzMzk5YzBjMzU4NTM5Y2E2Yjg0NzcyZDM1Njc0Zjc3NWM4ZGY1NGZmZmI0ZjQ1NDI4YWM2NDAzMjhjOTc5MWY5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"7a8-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 1960\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1960,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"a2aa24db9097058ecddf0c21616dc32b","sha1":"8507e1b050de8427ddc817bd414fcab8b057e7e1","sha256":"4ceee7903b0ff3777b243339047fc545a66d52122b1e14166cf92b432864d96e","sha512":"d0a0c4b8edcc7065d0cad188a2b87218c0c5c987022e0976af61e5977d0693ad11011d643b4cb11643387a997782a71c6a6dcb12ef5c5826a56a2b7d9f7b537a","ssdeep":"","tlshash":"c4413d99f3593d47cbd997f4c3700e91194c5c6926d04044b2431b7a60fbf67d648c01","first_seen":"2025-07-02T03:33:37.417807Z","last_seen":"2026-04-04T09:24:12.606237Z","times_seen":3314,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/search/ads.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:13.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:39:05 GMT","end":"Mon, 13 Apr 2026 08:39:04 GMT"},"fingerprint":{"sha1":"AC:37:C7:AF:75:CB:27:69:D4:EC:B6:A6:68:E1:51:4A:A3:99:78:B0","sha256":"63:86:A6:69:FF:ED:40:2B:88:13:6E:3E:4F:01:08:AB:8D:96:19:72:D3:22:DD:14:05:79:8E:5D:58:1F:0D:39"}}},"request":{"raw":"GET /adsense/search/ads.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Thu, 05 Mar 2026 06:03:13 GMT\r\nexpires: Thu, 05 Mar 2026 06:03:13 GMT\r\ncache-control: private, max-age=3600\r\netag: \"9292987978407600317\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131366,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2505)","md5":"ca95f2a304d2f215348d4b9f795cb8b2","sha1":"196106d8e570cb48045cf57ec3f80af955fa0331","sha256":"f1d043ab18b6d607465e00202761437ca12c081b19efd9540b1c0bd6c0b0ecc3","sha512":"da404b35484d9fe082b01dafe0bc91c7ac9ad1efe3b0546c8556624b5c61b5c883bf443980b338a46e223a286ce46d0dc970bd6b1d100f6b21d3ee656c428f6e","ssdeep":"1536:3hQZrBdqj29AlypQL6AoeKdC/4Cd0J5Eg2yJAcGu2rhZcDv7MS697aR9jhFkZfS1:RtLY3s/4dJR8yvoSbuSvd","tlshash":"41d33acdb6a1742243a3a1f5603f014fb139b96aa40c84a4f199d8e47cb4dad4277fbd","first_seen":"2026-03-04T20:54:55.82891Z","last_seen":"2026-03-05T15:07:17.579041Z","times_seen":33,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":91,"dns":22,"connect":22,"send":0,"wait":34,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obs.sd559908.js.rsocdomains.com/ct?id=93106\u0026url=https%3A%2F%2Fdynadot.rsocdomains.com%2Fexpired%3Fd%3D933883a2.buzz\u0026sf=0\u0026tpi=\u0026ch=933883a2.buzz\u0026uvid=\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1772690589998\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=74001702111956921902702809681128068719876186121192616016712021216205150926882239016176961885\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=UyEiaxMGaM\u0026pto=2339\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1772690589.42eGErsMbnBa1Y0O\u0026suid=1.1772690589.g8iIBj91IateZnkF\u0026tuid=1.1772690589.eQSbxbJjpl2GiJI1\u0026fbc=-\u0026gtm=-\u0026it=3%2C1729%2C275\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA%2FNjotaGA2Og%3D%3D","fqdn":"obs.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"50.16.211.97","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dynadot.rsocdomains.com/expired?d=933883a2.buzz","date":"2026-03-05T06:03:10.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sd559908.js.rsocdomains.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:71:3D:EC:FB:1B:E3:CE:69:F9:00:4F:34:6E:DF:3A:95:11:14:5A","sha256":"CF:05:9C:6B:30:C3:EB:68:09:12:7B:D1:4B:58:DA:50:88:70:45:EA:95:61:8F:B8:03:FA:78:BA:E3:80:C6:A3"}}},"request":{"raw":"GET /ct?id=93106\u0026url=https%3A%2F%2Fdynadot.rsocdomains.com%2Fexpired%3Fd%3D933883a2.buzz\u0026sf=0\u0026tpi=\u0026ch=933883a2.buzz\u0026uvid=\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1772690589998\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=74001702111956921902702809681128068719876186121192616016712021216205150926882239016176961885\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=W1siZWYiLDMyMDBdLFsiYWJuY2giLDE3XSxbLTUsIi0iXSxbLTE4LCJbMSwwLDAsMF0iXSxbLTI0LCJbXSJdLFstNTksIi0iXSxbLTYyLCI1OCJdLFstNjQsIi0iXSxbLTc0LCItIl0sWy0xLCJMaW51eCB4ODZfNjQiXSxbLTMzLCItIl0sWy01MSwiLSJdLFstNTYsImxhbmRzY2FwZS1wcmltYXJ5Il0sWy02OSwiV2luMzJ8fHw0OHwtfC0iXSxbLTE0LCItIl0sWy0yOSwiLSJdLFstNDksIi0iXSxbLTU3LCJTM2xSVFUxSlNnTVdGbFpiRjBwZERBd0FBQWtCRjFOS0YwdEtWbHBkVmxSWVVGZEtGMXBXVkJaUUZnd0JEQWdCWEY4T1dsOWZDVm9CRFFvS1dBb01XQXBZRFZnSkQxaGFERjFkRjFOS0F3Z0RBUTRMQVFBVkRnZ0FGazBYWEVGSlZrdE5TaFlGZVZGTlRVbEtBeFlXVmxzWFNsME1EQUFBQ1FFWFUwb1hTMHBXV2wxV1ZGaFFWMG9YV2xaVUZsQVdEQUVNQ0FGY1h3NWFYMThKV2dFTkNncFlDZ3hZQ2xnTldBa1BXRm9NWFYwWFUwb0RDQU1CRGcwQkRoVktYRTF0VUZSY1ZreE5HVkZZVjExVlhFc1REZ2dBRmswWFhFRkpWa3ROU2hZRmVWRk5UVWxLQXhZV1Zsc1hTbDBNREFBQUNRRVhVMG9YUzBwV1dsMVdWRmhRVnc9PSJdLFstNjgsIi0iXSxbLTcwLCItIl0sWy0xMCwiLSJdLFstMjIsIltcIm5cIixcIm5cIl0iXSxbLTQxLCItIl0sWy05LCItIl0sWy0xMywiLSJdLFstMjMsIisiXSxbMTIsIntcImN0eFwiOlwid2ViZ2xcIixcInZcIjpcIm1lc2FcIixcInJcIjpcImxsdm1waXBlXCIsXCJzbHZcIjpcIndlYmdsIGdsc2wgZXMgMS4wXCIsXCJndmVyXCI6XCJ3ZWJnbCAxLjBcIixcImd2ZW5cIjpcIm1vemlsbGFcIixcImJlblwiOjEwMCxcIndnbFwiOjEsXCJncmVuXCI6XCJsbHZtcGlwZVwiLFwic2VmXCI6NDk0MTk1MDQzLFwic2VjXCI6XCJcIn0iXSxbLTUwLCItIl0sWy02NSwiLSJdLFstMjYsIi0iXSxbLTM1LCJbMTc3MjY5MDU4OTg5OCwwXSJdLFstNDIsIjg4MzM5OTAxNiJdLFstNTgsIi0iXSxbLTY3LCItIl0sWy0xNSwiLSJdLFstMTksIlswLDAsMCwwLDAsMCwxLDI0LDI0LFwiLVwiLDEyODAsMTAyNCwxMjgwLDEwMjQsMTI4MCwxMDI0LDEyODAsMTAyNCwwLDAsMCwwLFwiLVwiLFwiLVwiLDEyODAsMTAyNCxudWxsXSJdLFstMzQsIi0iXSxbLTQ2LCIwIl0sWy01NCwie1wiaFwiOltcIl8zXCIsXCIyODcyODk5MzIwXCJdLFwiZFwiOltdLFwiYlwiOltdLFwic1wiOjF9Il0sWy02MSwiLSJdLFstNzIsIkV4VT0iXSxbLTc1LCIoaW50ZXJtZWRpYXRlIHZhbHVlKS5zb21lRnVuYyBpcyBub3QgYSBmdW5jdGlvbiJdLFstMjEsIi0iXSxbLTMwLCJbXCJ2XCIsMF0iXSxbLTMxLCJmYWxzZSJdLFstMzIsIjAiXSxbLTQ0LCIwLDUsMCw1Il0sWy00NSwiNzUyLDAsMCw3MTksMCwwLDc2MSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwIl0sWy00OCwiW1wiLVwiLFwiLVwiLFwiLVwiLFwiLVwiLFwiLVwiXSJdLFstNzMsIkVoUT0iXSxbLTIsIjgsSXNOOW5HbldiQVlBSXhOZlFhT3FHRTBDRkFRc2NHMDBJbmhPYllCQUtZVU96UU82RVgwMjBJbUdMY3U2MnVyZFAvYzJkMnBObVZaQXdmMy8vOHo3OUdySGExV3UzT21YUFB2ZSJdLFstOCwiLSJdLFstMjUsIi0iXSxbLTM4LCJjLC0xLC0xLDkxNSwwLDEsMCwyOCwzNTEsMTczLC0xLDAsLCwyMzA5LDIzMDkiXSxbLTM5LCJbXCIyMDEwMDEwMVwiLDIsXCJHZWNrb1wiLFwiTmV0c2NhcGVcIixcIk1vemlsbGFcIixcIjIwMTgxMDAxMDAwMDAwXCIsbnVsbCxmYWxzZSxudWxsLGZhbHNlLG51bGwsNSx0cnVlLGZhbHNlLG51bGwsMCxmYWxzZSxmYWxzZSxmYWxzZSxmYWxzZV0iXSxbLTQwLCIzNyJdLFstNDMsIjAwMDAwMDAxMDAwMDAwMDAwMDExMTAwMTAwMDAwMTAwMDAwMDAwMDAwMTAiXSxbLTU1LCIwIl0sWy02NiwiLSJdLFstNzEsImEwMTAwMTAxMTAwMTAwMTAxMDAwMTAxMDAxMTAxMTAwMDAwMDEwIl0sWyJibmNoIiwyNTJdLFstNywiLSJdLFstMywiW1wiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiXSJdLFstNCwiLSJdLFstMTIsIlwiMVwiIl0sWy0yNywiLSJdLFstMzYsIltcIjUvNFwiLFwiNS80XCJdIl0sWy0zNywiLSJdLFstNDcsIlVUQyxlbi1VUyxsYXRuLGdyZWdvcnkiXSxbLTYwLCItIl0sWy02LCJ7XCJ3XCI6W1wiMFwiLFwib25DaGVxUmVzcG9uc2VcIixcImhpZGVMb2FkZXJcIixcIk5vdGlmeVBhaW50RXZlbnRcIixcIl9fY3RjZ19jdF85MzEwNl9leGVjXCJdLFwiblwiOltdLFwiZFwiOltdfSJdLFstMTEsIntcInRcIjpcIlwiLFwibVwiOltdfSJdLFstMTYsIjAiXSxbLTE3LCI0OCJdLFstMjAsIi0iXSxbLTI4LCJlbi1VUyxlbiJdLFstNTIsIi0iXSxbLTUzLCIwMDEiXSxbLTYzLCItIl0sWyJkZGIiLCIwLDgsMCwwLDAsMiwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwxLDAsMCwwLDAsMCwwLDIsMCwwLDAsMiwwLDAsMCwwLDAsMSwwLDMsNDgsMCwxNiwxLDIsMCwwLDAsMCwwLDAsMCwyLDIsMCwxLDAsMCwwLDAsMCwwLDAsMCwxLDEsMCwwLDAsMCwwIl0sWyJjYiIsIjAsMCwwLDAsMCwwLDAsMSwwLDMsMSwwLDEwMiwwLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwxLDAsOCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDAsMCwxLDAsMCwxLDEsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwxLDAsMCwwLDEsMCwwLDEsMCwwIl1d\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=UyEiaxMGaM\u0026pto=2339\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1772690589.42eGErsMbnBa1Y0O\u0026suid=1.1772690589.g8iIBj91IateZnkF\u0026tuid=1.1772690589.eQSbxbJjpl2GiJI1\u0026fbc=-\u0026gtm=-\u0026it=3%2C1729%2C275\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA%2FNjotaGA2Og%3D%3D HTTP/1.1\r\nHost: obs.sd559908.js.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/\r\nCookie: _cq_duid=1.1772690589.42eGErsMbnBa1Y0O; _cq_suid=1.1772690589.g8iIBj91IateZnkF\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Thu, 05 Mar 2026 06:03:10 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: cg_uuid=ac08aa5c28f2cea028389e477538a274; Max-Age=29030400; Path=/; Expires=Thu, 04 Feb 2027 06:03:10 GMT; HttpOnly; Secure; SameSite=None\r\ntiming-allow-origin: https://dynadot.rsocdomains.com\r\ncontent-length: 1190\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3447,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3447), with no line terminators","md5":"b71b812a8322dd100b4ab240449b6c0f","sha1":"5fa97bc87253c3479808adfa9ba2d0938ac30dce","sha256":"9f2185e43c542d82981843f6a0b199fc1b92cd382d171fa3738ce6f32759d677","sha512":"de297af11ced52bb31b4bb7c41908bb4cf031030961fd6041bb9866c83e5183ea4849c6b82b77ac2d3ab0a6552343c9c5ff160b5d8556e264caa0c1afcbd3752","ssdeep":"","tlshash":"956109113a4e2ea529ee46d3cee4ee8913b2573f5d4f14b68837f64205bb1828f12081","first_seen":"2026-03-05T06:03:38.221245Z","last_seen":"2026-03-05T06:03:38.221245Z","times_seen":1,"resource_available":true,"data":null}},"time_used":735,"timings":{"blocked":293,"dns":4,"connect":95,"send":0,"wait":146,"receive":1,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.7.1.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-45a82\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\nage: 6206746\r\nx-served-by: cache-lga21929-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 14, 19136\r\nx-timer: S1772690592.659827,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 83619\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":285314,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"12e87d2f3a4c8b347ab13a0764d420a3","sha1":"4be715e11048c057fdf2ee0fbbfad4dbf3504c55","sha256":"78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe","sha512":"fa4d699e582de05d47f0beeddf3f79a37fca3bea3bf083447174db9e8250fc5d95a835615a86a256697f3841eff47b1583151a556f886e264f50941f17f63167","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPfz:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAV","tlshash":"e954a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","first_seen":"2023-09-15T16:51:13Z","last_seen":"2026-04-04T13:20:36.241281Z","times_seen":15946,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":79,"dns":0,"connect":28,"send":0,"wait":73,"receive":14,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/storage/uploads/hero_image/business-operations-72.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /storage/uploads/hero_image/business-operations-72.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InBLU3IreTIyTnQ2MFB5WW5raXpIelE9PSIsInZhbHVlIjoiVDhtSW9vNDZSK1VkdmZ6eGRVYWR4R1ViQnp2T1Q0RzQvbWhPV3BrSGhyTnpqMTB0UWV0OEVtSWpXQVVOUXNoamhvdm11U3hqSEJHSmJBRmZxUmlMd2tPZE1ocUEzaWFyZEFJRTh6MUh1azJxdUNIOTlyK0RjV0J3UXdZVGlOVVEiLCJtYWMiOiJlZGJkMzhiN2NhNWI3YTdiZmEyMDY1M2VlZTFmMzdlN2JhOWI0YWM0NTA1NWY3NzJlY2YxNDEzMTQ3Nzc1YTM4IiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6Ind6QTZuU1R2cy9BLzAvZXh6cWQ3OHc9PSIsInZhbHVlIjoidlpsdVJLNmxXR0NhUEZrczczS2NxVkVwT3ljcDRpK2psZ3dTQmFSS3NlUEtVNUllN3B3d3E5N0pudHBWVGdtSHlXNkRwRjVHejZQbTU3TUp6aXhYbXN6c1dtOEljSFZiMHo2bWROK2NkOHVYT3BUSHJWbUNEcHB3TFhQTlU2MisiLCJtYWMiOiIzMzk5YzBjMzU4NTM5Y2E2Yjg0NzcyZDM1Njc0Zjc3NWM4ZGY1NGZmZmI0ZjQ1NDI4YWM2NDAzMjhjOTc5MWY5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\nserver: Apache\r\nlast-modified: Mon, 12 Jan 2026 00:22:13 GMT\r\netag: \"2da0-64825ddd8c651\"\r\naccept-ranges: bytes\r\ncontent-length: 11680\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11680,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f47ebc997defbf3382504970260d7fab","sha1":"deea2a2ac4ba65e06e08f5fce2e986039d93ec3e","sha256":"f9f0a2742291ed4fff83d5194c7ed601cb5929ff4fb0e68b79b7955b2c2c6de0","sha512":"50d36dcaa66a7b548333745e8f7c4c6daca6039e6d18d59a692d08d8dc9ebd3d51f79c494ebcc79a7a6ddc96489b91aa8014fc04b19a335faa29aaaba94e0c03","ssdeep":"192:2wCTfrH/hFPREEvres0aHG6sa1bflvT3LWTZA4xiv4AXUr8I1QWmx+sZIvHP0gVY:2wCTfN9RVv6snsatVGTZRxO4Akr88mwQ","tlshash":"2632cf62631caa73e725e5365d8a3fc7e7202300840f869a4bc41be51fd8ac3429db44","first_seen":"2026-03-04T09:15:28.847631Z","last_seen":"2026-04-04T09:24:12.623308Z","times_seen":217,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":647,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-05T06:03:10.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /?cid=99998\u0026d=933883a2.buzz HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dynadot.rsocdomains.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\nserver: Apache\r\nx-powered-by: PHP/8.2.29\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InBLU3IreTIyTnQ2MFB5WW5raXpIelE9PSIsInZhbHVlIjoiVDhtSW9vNDZSK1VkdmZ6eGRVYWR4R1ViQnp2T1Q0RzQvbWhPV3BrSGhyTnpqMTB0UWV0OEVtSWpXQVVOUXNoamhvdm11U3hqSEJHSmJBRmZxUmlMd2tPZE1ocUEzaWFyZEFJRTh6MUh1azJxdUNIOTlyK0RjV0J3UXdZVGlOVVEiLCJtYWMiOiJlZGJkMzhiN2NhNWI3YTdiZmEyMDY1M2VlZTFmMzdlN2JhOWI0YWM0NTA1NWY3NzJlY2YxNDEzMTQ3Nzc1YTM4IiwidGFnIjoiIn0%3D; expires=Thu, 05 Mar 2026 08:03:11 GMT; Max-Age=7200; path=/; samesite=lax\nwwwmammacom_session=eyJpdiI6Ind6QTZuU1R2cy9BLzAvZXh6cWQ3OHc9PSIsInZhbHVlIjoidlpsdVJLNmxXR0NhUEZrczczS2NxVkVwT3ljcDRpK2psZ3dTQmFSS3NlUEtVNUllN3B3d3E5N0pudHBWVGdtSHlXNkRwRjVHejZQbTU3TUp6aXhYbXN6c1dtOEljSFZiMHo2bWROK2NkOHVYT3BUSHJWbUNEcHB3TFhQTlU2MisiLCJtYWMiOiIzMzk5YzBjMzU4NTM5Y2E2Yjg0NzcyZDM1Njc0Zjc3NWM4ZGY1NGZmZmI0ZjQ1NDI4YWM2NDAzMjhjOTc5MWY5IiwidGFnIjoiIn0%3D; expires=Thu, 05 Mar 2026 08:03:11 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI:1.14.0","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Contentsquare","description":"Contentsquare is an enterprise-level UX optimisation platform.","website":"https://contentsquare.com","common_platform_enumeration":"","icon":"Contentsquare.svg","categories":["Analytics","A/B Testing"]}],"data":{"size":38831,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (301)","md5":"1afbd54c18886f26e71267fcd5cf4795","sha1":"06fbea7c0e2f237c916d088490904ce8001f6647","sha256":"3a984045264e075cdc2067f516a2a9e490daeac4c99f6939a274cb662d6fa605","sha512":"524fb757cfbd8acef3b70ad9785a1329da874f58f05669b942e6b8149ca75594254b9bd241e8fe5358d4f935422c1b9b47d7c77cb0026c0641b24b15039bb35e","ssdeep":"192:u8xD4wxmppiV7+g3dilfliEyzRbMRQNnL2aofXu3hNljCqDgmwRBRxOJLz2fTPAe:uTQ7gKySUaEW2fTPAbf/y2DlIn7x","tlshash":"3203ffb7a5f034ef1347829e18227a2c99c2604fd603a58df9bcc45eefd5d4e4a23169","first_seen":"2026-03-04T09:33:29.066827Z","last_seen":"2026-03-05T20:03:48.748903Z","times_seen":35,"resource_available":true,"data":null}},"time_used":904,"timings":{"blocked":331,"dns":1,"connect":160,"send":0,"wait":242,"receive":0,"ssl":168},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.contentsquare.net/uxa/3e73dd2905556.js","fqdn":"t.contentsquare.net","domain":"contentsquare.net","tld":"net"},"ip":{"addr":"3.164.230.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.contentsquare.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"81:2B:A5:F7:FB:66:FE:5E:22:95:03:AA:23:47:B5:B5:C4:CA:4A:32","sha256":"3E:1E:4A:F5:7D:7B:01:5C:C6:B4:23:70:7E:11:42:0A:A0:37:55:B6:A1:8A:40:62:29:2F:FE:21:59:3C:F4:60"}}},"request":{"raw":"GET /uxa/3e73dd2905556.js HTTP/1.1\r\nHost: t.contentsquare.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\ncontent-type: application/javascript\r\nx-tag-target: es2019\r\nx-amzn-trace-id: Root=1-69a850f9-4aa12146479ac3bd7f4ae79a;Parent=15914fe22bd92739;Sampled=0;Lineage=1:d10704b2:0\r\nx-amzn-requestid: b2dcd5f4-13a6-470c-b677-e7439c4d0b7b\r\nx-date: 2026-03-04T15:34:17.745Z\r\nx-tag-version: 15.193.7\r\ncontent-encoding: br\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 7c387b19d61d1c91aac6ab5213be0f38.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: sr5edsXiHUi2c_k1eoURZBU8vsvntCT0-iktNXJj3V6OOsNtv0U3og==\r\nage: 0\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":454265,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42511)","md5":"381f2cb14e1e892c95419a8bd02f3948","sha1":"3c7eecfe5143af1a1a8dcbc407e994039591389a","sha256":"d815e428a3adb827cef26bf3bcf59b4f08030f734820e4c250a895e6a7104aef","sha512":"4501584af507044d1475aca4b0a86feb434cec4f1990db3399877920ec5918b4524175a7433f4ba751e7e1285389336cf7af4e112a8abce7858b40052145a39d","ssdeep":"6144:bUARE9BJLz9r/67/TYKSFpZ38fPQAqGse5x2RjaDDgWZkIMicrTc3mwj:bUARU9r4qqwk8ReVrhj","tlshash":"dba42bd973a6b0b68799c1ead0360102b33979a97409003cf1adecfb35a4d4572f6b79","first_seen":"2026-03-04T15:38:16.980119Z","last_seen":"2026-03-05T09:39:45.725413Z","times_seen":107,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":69,"dns":50,"connect":8,"send":0,"wait":10,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NKZMCM7F","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:12.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:44 GMT","end":"Mon, 27 Apr 2026 08:36:43 GMT"},"fingerprint":{"sha1":"60:4D:15:F0:37:85:71:03:3A:5F:40:31:C7:D1:01:D3:83:25:3A:02","sha256":"67:C0:9E:02:17:D8:19:0D:DC:84:B7:81:9F:AA:72:31:D5:26:0D:A6:E0:AB:41:AD:C9:26:05:57:7C:19:35:3A"}}},"request":{"raw":"GET /gtm.js?id=GTM-NKZMCM7F HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 05 Mar 2026 06:03:12 GMT\r\nexpires: Thu, 05 Mar 2026 06:03:12 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 112795\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":328490,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5376)","md5":"fefb23c0464e73991c43a64617896a1f","sha1":"6d7ac9a0341cb5814fbf8b455581a61283e8c75c","sha256":"8e782cd54064a18e0084432a3a3120763e73816d06b531fdc16707e326a16b76","sha512":"58670a4224af001f5023b9bb06fb2734e4db2764ffd7149ffdaff5cd6ebc958d55606fd7c429e476f8d75bdd8781bc8ddd4ee2bde0229a02db640c961895f4b7","ssdeep":"6144:QkKfNl/jvN5B/KI0D8RGI/V0sApXxXJZRQ:Q/FVjv5U8qS","tlshash":"9d641acdb7d6706253a3a478403f018bb27a7892f88cc895f186d9d42e746a98137f7d","first_seen":"2026-03-05T06:03:38.226522Z","last_seen":"2026-03-05T06:03:38.226522Z","times_seen":1,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":102,"dns":2,"connect":20,"send":0,"wait":41,"receive":43,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.14.0/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /ui/1.14.0/jquery-ui.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-7eb53\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\nage: 2501334\r\nx-served-by: cache-lga21936-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1208, 1251\r\nx-timer: S1772690592.650187,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 122789\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":518995,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1004)","md5":"8b90421cbb9666fd2558c5b57b2994a4","sha1":"3cca9d56f9bb1f973dd3ec9212de21c296cd5e21","sha256":"bb42fc680e84bf76d8d87238cb4080cabf47f05456817e2167df8aec2da7cdd7","sha512":"731467ffb3be2564aabc138678e0da0bebfdc2bed1165944c1de92040b9be59b813c4cc1b586574f1e3a28d9e5cef11f1b8d82cdbc1fb1c6c161961c82b5ca34","ssdeep":"12288:/aemHFgymcpIyHCcmMY/W/EEMPlQRgkrVhDdRtn:WIyHCcmMY/W/EEMPt0hDdRtn","tlshash":"ebb4b7c9f39c265a867a32594c2e42cdb23d8075e600587fbc5d59dc29a883c43bbf79","first_seen":"2024-09-19T22:28:43.042948Z","last_seen":"2026-04-04T09:28:43.66667Z","times_seen":3486,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":67,"dns":0,"connect":30,"send":0,"wait":28,"receive":61,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.contentsquare.net/settings/556112.json?r=1969656","fqdn":"t.contentsquare.net","domain":"contentsquare.net","tld":"net"},"ip":{"addr":"3.164.230.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:13.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.contentsquare.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"81:2B:A5:F7:FB:66:FE:5E:22:95:03:AA:23:47:B5:B5:C4:CA:4A:32","sha256":"3E:1E:4A:F5:7D:7B:01:5C:C6:B4:23:70:7E:11:42:0A:A0:37:55:B6:A1:8A:40:62:29:2F:FE:21:59:3C:F4:60"}}},"request":{"raw":"GET /settings/556112.json?r=1969656 HTTP/1.1\r\nHost: t.contentsquare.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:13 GMT\r\ncontent-type: application/json\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Sat, 21 Feb 2026 12:30:16 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ARmN.JiLn4mBFeY0rvQgx71Ft5.3176d\r\ncontent-encoding: gzip\r\netag: W/\"2c0114ac7a91de05d645d19a8349b347\"\r\nvary: Origin,accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 7c387b19d61d1c91aac6ab5213be0f38.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nage: 0\r\nx-amz-cf-id: tU1RWSwALyea6iiXD7r7zN11czPg5CfkbOG3iOYXizxY3xGEjd4-Rg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2445,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2c0114ac7a91de05d645d19a8349b347","sha1":"ad7deb9a027cc507c6163dcb8b5cd2a57ca27b98","sha256":"37e9685e252238a002a7f5d547beace4bdc279a484011d98c55aeb04d262bac6","sha512":"2dc7460fce58d120b5452a1b7a8332a541873fedac5a9f622878e67ed6f7fe4c17db06f95496d17621a4b1e3c88c457e47fb66f6e2cfdbb306953101399e4ca3","ssdeep":"","tlshash":"7b51cc61115c28fa5b8ac56ad6527a434568ca3719d80bfce5ce4acca1f89b05703d27","first_seen":"2026-01-26T14:57:02.998855Z","last_seen":"2026-04-04T09:28:43.685813Z","times_seen":3068,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":91,"dns":59,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/favicon.ico","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.66","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dynadot.rsocdomains.com/expired?d=933883a2.buzz","date":"2026-03-05T06:03:09.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"test.rsocdomains.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 21:41:33 GMT","end":"Sat, 09 May 2026 21:41:32 GMT"},"fingerprint":{"sha1":"1E:C9:08:BA:B6:E8:CD:70:8B:24:03:1B:31:6A:69:AD:0D:CC:6A:BA","sha256":"10:8C:2B:1B:06:D5:06:01:C4:9A:24:79:29:29:8B:FA:99:0D:5D:12:50:5D:35:E1:79:1F:10:C7:18:31:D5:E0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dynadot.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/expired?d=933883a2.buzz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 0\r\ndate: Thu, 05 Mar 2026 06:03:09 GMT\r\nserver: Kestrel\r\ncache-control: no-cache\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obs.sd559908.js.rsocdomains.com/tracker/tc_imp.gif?e=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\u0026cri=UyEiaxMGaM\u0026ts=478\u0026cb=1772690590477","fqdn":"obs.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"50.16.211.97","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dynadot.rsocdomains.com/expired?d=933883a2.buzz","date":"2026-03-05T06:03:10.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sd559908.js.rsocdomains.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:71:3D:EC:FB:1B:E3:CE:69:F9:00:4F:34:6E:DF:3A:95:11:14:5A","sha256":"CF:05:9C:6B:30:C3:EB:68:09:12:7B:D1:4B:58:DA:50:88:70:45:EA:95:61:8F:B8:03:FA:78:BA:E3:80:C6:A3"}}},"request":{"raw":"GET /tracker/tc_imp.gif?e=37dfbd8ee84e00126decc13cea42839d9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d57128c6d2117071a10acf9f29f6718d18381567d3a48fc702106d46e8e62c50c330d2ac656075830075797bc6c4b77be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebff079ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b226537a30ca946c75ca92560c2b4022010cafdf78677a06adac4d7addf9f67cc3b45e7b4b2ffdaeadc7ce70edcfc248b5038e523b67c4e19abdea26d59ebe799d215695bd896f1209e83526f6c1403baac6b937d055ab19efd5419c0cd59c20992760ded97e9a30c4ddbcfe86ece01122f57eb4a5a86c1b7eaecf71c4e150b9445a1395080bc68f8f8899afd76298709edeb4c820ae505674ca382bd4ccc10067c7eb33f357a9d35d9173a86d524c448c6eff4d9287af75f8df789c4db6d5868a64de15447ae546541d3e457dd3a766b753dfc18b64fdde69bdde6cdf81c8f07688bcf174603ed0a9110495f70d5a23fae7e538e043cef856fdfd3cae6ee26d8759bf15d7a83ecf0623f8b3936437237d00220c400aa9e78870cf04b545525e2ef9b553c29f1908e2a5d9babd01deffb0b9dfacbdfb594f35a846d2e70a688710301b846a5c7965f072ae7611c2b8c2318267df708fae3ed1aa4edc225b332a107d0d9dc7e3d93a72559f104c8b84d1e2c9b8090c9fc9ec39c3a52d20aec00e2e2dbcc88d442ba5269b5e981de1399212dec01ae6ef5381c9c080e21d22b3e24c3af80fa79facb954dc3a261c6ef9745112f5fa4d85ed08d8cdca8c05b1d8d4624a6e18e05ffe52f30aec9363972e517514786f75e05a8e833b49ab2f9df6e73fd8d35fcc2926ed03762d9fe8d30246fc31a8cc02d0072d1215ff687d90a5d774d9087dc9d051b3d5c0fe824ac64f0a6146b0652f539e99085bb320f5a797789dd9ed124f2de1782a0d04cc1754fa8bac5c48d6707bd78b95199ac6b0dd5d2aa82ca95e292f8c3c7f20868b5d1fdcc4e980b3ee50b477\u0026cri=UyEiaxMGaM\u0026ts=478\u0026cb=1772690590477 HTTP/1.1\r\nHost: obs.sd559908.js.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/\r\nCookie: _cq_duid=4.09c1dac64ce0c9189691080c3b878e45; _cq_suid=1.1772690589.g8iIBj91IateZnkF; cg_uuid=ac08aa5c28f2cea028389e477538a274; _cq_pvid=4.14c678ad7719f43ab3bcd59f3f88cf7c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ndate: Thu, 05 Mar 2026 06:03:10 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 43\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"db04c7b378cb2db912c3ba8a5a774ee3","sha1":"dee34bd86c3484d31002182aa2b7caa4699126b8","sha256":"98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a","sha512":"826225fc21717d8861a05b9d2f959539aad2d2b131b2afed75d88fbca535e1b0d5a0da8ac69713a0876a0d467848a37a0a7f926aeafad8cf28201382d16466ab","ssdeep":"","tlshash":"6490000bca888002caa2c0302b8883022b88b0320228832e80bc30a8ee3b3a20c02000","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T13:49:31.928243Z","times_seen":355701,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/storage/uploads/hero_image/top_model_australia.png","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /storage/uploads/hero_image/top_model_australia.png HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InBLU3IreTIyTnQ2MFB5WW5raXpIelE9PSIsInZhbHVlIjoiVDhtSW9vNDZSK1VkdmZ6eGRVYWR4R1ViQnp2T1Q0RzQvbWhPV3BrSGhyTnpqMTB0UWV0OEVtSWpXQVVOUXNoamhvdm11U3hqSEJHSmJBRmZxUmlMd2tPZE1ocUEzaWFyZEFJRTh6MUh1azJxdUNIOTlyK0RjV0J3UXdZVGlOVVEiLCJtYWMiOiJlZGJkMzhiN2NhNWI3YTdiZmEyMDY1M2VlZTFmMzdlN2JhOWI0YWM0NTA1NWY3NzJlY2YxNDEzMTQ3Nzc1YTM4IiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6Ind6QTZuU1R2cy9BLzAvZXh6cWQ3OHc9PSIsInZhbHVlIjoidlpsdVJLNmxXR0NhUEZrczczS2NxVkVwT3ljcDRpK2psZ3dTQmFSS3NlUEtVNUllN3B3d3E5N0pudHBWVGdtSHlXNkRwRjVHejZQbTU3TUp6aXhYbXN6c1dtOEljSFZiMHo2bWROK2NkOHVYT3BUSHJWbUNEcHB3TFhQTlU2MisiLCJtYWMiOiIzMzk5YzBjMzU4NTM5Y2E2Yjg0NzcyZDM1Njc0Zjc3NWM4ZGY1NGZmZmI0ZjQ1NDI4YWM2NDAzMjhjOTc5MWY5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\nserver: Apache\r\nlast-modified: Sun, 08 Feb 2026 08:12:04 GMT\r\netag: \"1bdbc9-64a4b93eaf465\"\r\naccept-ranges: bytes\r\ncontent-length: 1825737\r\ncontent-type: image/png\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1825737,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"a8bf913806a5b7ddcf41aa369fd0d2a6","sha1":"a41bc13dd66dc3268de5daa9da5d486d352a82ad","sha256":"0a565b026ed368ab0fd6f8fdf93d51421ccb4cf23d9b4643a8f0c2bcf40aa05c","sha512":"2b7fe53feb2e2774a19df57b3d6c147fcee1dfed191741e84ee234fabae48e080f20a4f71058be54eb071affeaf32056304416abcd63f57e7e580eff4c3bd1d8","ssdeep":"24576:yLK/8kdPG5D/5+XT1SW+3sgVlpsWYJmAb9VCUb:184rXTYzVlS9m0fzb","tlshash":"5e2533e4f6c1b7bbd9e7c17960a1d08b6ad120d43b1938414768cdc82f68f067e9a74e","first_seen":"2026-03-04T09:15:28.825101Z","last_seen":"2026-04-04T09:24:12.61572Z","times_seen":217,"resource_available":false,"data":null}},"time_used":1430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":647,"receive":783,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pro.fontawesome.com/releases/v5.14.0/webfonts/fa-regular-400.woff2","fqdn":"pro.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:12.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /releases/v5.14.0/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: pro.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pro.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:13 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 173220\r\ncf-ray: 9d76ea8e2cbba0f0-OSL\r\nx-amz-id-2: 1DU067wO4352bVOn0Vm75j9sfyfMJ4FoctKKhlPlzWE+diiMd8D5ZixnBjja+xursN3feCG/wZzMQ1OugoUV96jgN64am/zF\r\nx-amz-request-id: BPN3K1K994JDQ0E4\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 28 Jun 2021 17:14:37 GMT\r\netag: \"3e332211899360ab9380df4d50e1c33a\"\r\ncache-control: max-age=31556926\r\naccept-ranges: bytes\r\nage: 457415\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":173220,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 173220, version 331.17301","md5":"3e332211899360ab9380df4d50e1c33a","sha1":"a4c6413bb7f7549b4fa37f22829e4d09f9de6817","sha256":"58f76b0b684536fbea8ae9ae7177607e81a261407916e9a86e063b02948e9adc","sha512":"697a1a3c6517f93d280d47ec93871aadb9e0d6576d2966ed2a296f2764d9b2bfd39a4b4854c6fa445965545dda72a4656de96ca3f8497c041749791c0f3c682e","ssdeep":"3072:AsJ+WJ7ekhVohiHZSPzAIc0NmYgt4Qmp60OPzGYDpBXa:B0UekhVoUZSPkIJVQ3PzZTXa","tlshash":"e904121023ee60e0327d969b5374e34e770b4789c656e99dcac7b2e1d8d44af41c2d2e","first_seen":"2023-04-05T13:40:29Z","last_seen":"2026-04-04T09:28:43.677636Z","times_seen":4563,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/mamma-favicon.svg","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:13.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/mamma-favicon.svg HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz\r\nCookie: XSRF-TOKEN=eyJpdiI6InBLU3IreTIyTnQ2MFB5WW5raXpIelE9PSIsInZhbHVlIjoiVDhtSW9vNDZSK1VkdmZ6eGRVYWR4R1ViQnp2T1Q0RzQvbWhPV3BrSGhyTnpqMTB0UWV0OEVtSWpXQVVOUXNoamhvdm11U3hqSEJHSmJBRmZxUmlMd2tPZE1ocUEzaWFyZEFJRTh6MUh1azJxdUNIOTlyK0RjV0J3UXdZVGlOVVEiLCJtYWMiOiJlZGJkMzhiN2NhNWI3YTdiZmEyMDY1M2VlZTFmMzdlN2JhOWI0YWM0NTA1NWY3NzJlY2YxNDEzMTQ3Nzc1YTM4IiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6Ind6QTZuU1R2cy9BLzAvZXh6cWQ3OHc9PSIsInZhbHVlIjoidlpsdVJLNmxXR0NhUEZrczczS2NxVkVwT3ljcDRpK2psZ3dTQmFSS3NlUEtVNUllN3B3d3E5N0pudHBWVGdtSHlXNkRwRjVHejZQbTU3TUp6aXhYbXN6c1dtOEljSFZiMHo2bWROK2NkOHVYT3BUSHJWbUNEcHB3TFhQTlU2MisiLCJtYWMiOiIzMzk5YzBjMzU4NTM5Y2E2Yjg0NzcyZDM1Njc0Zjc3NWM4ZGY1NGZmZmI0ZjQ1NDI4YWM2NDAzMjhjOTc5MWY5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:13 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"37d-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 893\r\ncontent-type: image/svg+xml\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":893,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2cab9de44eae12465ff29b6a664f9375","sha1":"adbe537227d33660ea063248f10579b0b04cdb24","sha256":"507fe22603f5670f685c8170fc9b69fcd1c7619533dad12260b6245e04420ca1","sha512":"2eae91f47cc74bf070ac483ca7be63772f73137a976c60657d2024a96300b71f18822c075ac5c71576ba7583f8e1ac284b4879430f7b07cb7a0d9481f34eb498","ssdeep":"","tlshash":"f21123964318d87bfdd9460987f075e633e0349ae29414ec6c9b347ae15d8e8e1092dc","first_seen":"2025-07-02T03:33:37.440576Z","last_seen":"2026-04-04T09:28:43.678863Z","times_seen":3289,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=933883a2.buzz","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.66","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-05T06:03:08.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"test.rsocdomains.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 21:41:33 GMT","end":"Sat, 09 May 2026 21:41:32 GMT"},"fingerprint":{"sha1":"1E:C9:08:BA:B6:E8:CD:70:8B:24:03:1B:31:6A:69:AD:0D:CC:6A:BA","sha256":"10:8C:2B:1B:06:D5:06:01:C4:9A:24:79:29:29:8B:FA:99:0D:5D:12:50:5D:35:E1:79:1F:10:C7:18:31:D5:E0"}}},"request":{"raw":"GET /expired?d=933883a2.buzz HTTP/1.1\r\nHost: dynadot.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 2713\r\ncontent-type: text/html\r\ndate: Thu, 05 Mar 2026 06:03:08 GMT\r\nserver: Kestrel\r\ncache-control: no-cache\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]}],"data":{"size":2713,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"87084da6ea180adf7a13f2fe228f3780","sha1":"fa38ff4c98ea94f734096bc9227c7364b82894ed","sha256":"6f87018ec0eeb6e832f7cfdf8617d763bbaa62af7dae1cfbdbe8a32fde9d5657","sha512":"7d5a7e2b505363fd2a7cae88d89873930f6a370ce9d44f0c82fd6e4f17288ba809ec61a5c9c1f42e86167f110e850436feb91c85cb022d9593e6cff16065ccb2","ssdeep":"","tlshash":"0d51205a6de340015857d0256bbb7a082aaae107470acd513e9e13cccfc57da98937e8","first_seen":"2026-03-05T06:03:38.23314Z","last_seen":"2026-03-05T06:03:38.23314Z","times_seen":1,"resource_available":true,"data":null}},"time_used":931,"timings":{"blocked":379,"dns":28,"connect":168,"send":0,"wait":173,"receive":0,"ssl":180},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/storage/uploads/hero_image/biohazard.png","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /storage/uploads/hero_image/biohazard.png HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InBLU3IreTIyTnQ2MFB5WW5raXpIelE9PSIsInZhbHVlIjoiVDhtSW9vNDZSK1VkdmZ6eGRVYWR4R1ViQnp2T1Q0RzQvbWhPV3BrSGhyTnpqMTB0UWV0OEVtSWpXQVVOUXNoamhvdm11U3hqSEJHSmJBRmZxUmlMd2tPZE1ocUEzaWFyZEFJRTh6MUh1azJxdUNIOTlyK0RjV0J3UXdZVGlOVVEiLCJtYWMiOiJlZGJkMzhiN2NhNWI3YTdiZmEyMDY1M2VlZTFmMzdlN2JhOWI0YWM0NTA1NWY3NzJlY2YxNDEzMTQ3Nzc1YTM4IiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6Ind6QTZuU1R2cy9BLzAvZXh6cWQ3OHc9PSIsInZhbHVlIjoidlpsdVJLNmxXR0NhUEZrczczS2NxVkVwT3ljcDRpK2psZ3dTQmFSS3NlUEtVNUllN3B3d3E5N0pudHBWVGdtSHlXNkRwRjVHejZQbTU3TUp6aXhYbXN6c1dtOEljSFZiMHo2bWROK2NkOHVYT3BUSHJWbUNEcHB3TFhQTlU2MisiLCJtYWMiOiIzMzk5YzBjMzU4NTM5Y2E2Yjg0NzcyZDM1Njc0Zjc3NWM4ZGY1NGZmZmI0ZjQ1NDI4YWM2NDAzMjhjOTc5MWY5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\nserver: Apache\r\nlast-modified: Mon, 09 Feb 2026 09:22:36 GMT\r\netag: \"19b5c7-64a60adfb4939\"\r\naccept-ranges: bytes\r\ncontent-length: 1684935\r\ncontent-type: image/png\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1684935,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"400c39a524efc5690249c0a0b1e59fc7","sha1":"31e67d23ef0377063687a27d41da07876eedde6e","sha256":"ccef5fbf1ad8def3e31d1fba39948627ff35de8a5d10a39d071fd90ab24f0359","sha512":"7e19d8e5d035fef7fe1006aca45c8bde8a168ec8ade65693c73563dbdb48bba489fd2fdf30dda36ee38cf53f32710a4c327cd1e7700f3fde5694ed0fa58bd2d4","ssdeep":"24576:t68F1bSf68kminY4OFsc7sgKEOyH1v2BSdK9SC9:fK6/PBOV7NKEOKuZwC9","tlshash":"d92533e0ecb997f1cd1770e415912c218632636a9b7734b3d0a1606a9ace78dec637d3","first_seen":"2026-03-04T09:15:28.836201Z","last_seen":"2026-04-04T09:24:12.596467Z","times_seen":217,"resource_available":false,"data":null}},"time_used":1331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":648,"receive":683,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2/253/runner.html","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:14.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adtrafficquality.google","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:40:04 GMT","end":"Mon, 27 Apr 2026 08:40:03 GMT"},"fingerprint":{"sha1":"48:5E:30:A3:53:85:10:4B:D1:5F:08:28:03:7A:94:53:A3:AF:9E:FB","sha256":"52:E6:EC:CE:8F:CE:7B:0D:30:AD:8E:25:53:FD:78:51:32:F3:83:2A:9E:09:03:20:E0:7A:F8:22:F3:05:B2:DB"}}},"request":{"raw":"GET /sodar/sodar2/253/runner.html HTTP/1.1\r\nHost: ep2.adtrafficquality.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"adspam-signals-scs\"\r\nreport-to: {\"group\":\"adspam-signals-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs\"}]}\r\ncontent-length: 5450\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 05:16:53 GMT\r\nexpires: Thu, 05 Mar 2026 06:06:53 GMT\r\ncache-control: public, max-age=3000\r\nage: 2781\r\nlast-modified: Thu, 26 Feb 2026 22:42:13 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14614,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2028)","md5":"961379b174afb05d4e2d5f8f12d9536b","sha1":"88bb62ead0bb1ed10734e3964af360fce282bf9d","sha256":"b77745f4a57eb621e30714ec9daf54ab1191ea694bca8898a48b5ce75de5843b","sha512":"64f66f143f05ca66e172078fc7c389456385bb253947a1933fb382fd8aa3eee34fad0e028c002a1b12c9e813eefe138d0189c9dead28d94c45ae18c5bbeabe0c","ssdeep":"192:Glfuae1+vz7yPBdxcx/uS+JTyaQ6b3xDteLB9saDBiIjkLEX/wm0UZENpmUkpbHq:qfuao+k7m/fdTFORpCVGaLJZlX8v","tlshash":"3562548cbea1b4210363e5f1613f040fe23f64bee45c4999b180e9f16cb5a694623f79","first_seen":"2026-03-01T19:05:05.780035Z","last_seen":"2026-04-03T21:45:58.556501Z","times_seen":1812,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obs.sd559908.js.rsocdomains.com/mon","fqdn":"obs.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"50.16.211.97","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://dynadot.rsocdomains.com/expired?d=933883a2.buzz","date":"2026-03-05T06:03:11.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sd559908.js.rsocdomains.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:71:3D:EC:FB:1B:E3:CE:69:F9:00:4F:34:6E:DF:3A:95:11:14:5A","sha256":"CF:05:9C:6B:30:C3:EB:68:09:12:7B:D1:4B:58:DA:50:88:70:45:EA:95:61:8F:B8:03:FA:78:BA:E3:80:C6:A3"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obs.sd559908.js.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2585\r\nOrigin: https://dynadot.rsocdomains.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/\r\nCookie: _cq_duid=4.09c1dac64ce0c9189691080c3b878e45; _cq_suid=1.1772690589.g8iIBj91IateZnkF; cg_uuid=ac08aa5c28f2cea028389e477538a274; _cq_pvid=4.14c678ad7719f43ab3bcd59f3f88cf7c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2585,"data":"e=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\u0026cri=UyEiaxMGaM\u0026sf=0\u0026dc=DwcDGwt8GwwMVgwbDAwbDH1QS1JSGwx9CgoJGwx9DQoKCRsMfQwKCgYbDH0MCAoMGwx9DA0LDxsMfQwICg8bDH0MDQoPGwx9DhsMfQobDH0MCQYJGwx9DAkGBhsLehgNDwMbCXwbDAxJGwwMGw1%2FDwkMGwx9GwwMVhsMDBsNfwoMGwx9GwwMXGEbDAwbDX8HGwl6GAkPAxsJfBsMDE0bDAwbDX8OGwx9GwwMUxsMDBsNfw4bDH0bDAxJGwwMGw1%2FDhsMfRsMDFxhGwwMGw1%2FDwsbCXoYDwoPAxsJfBsMDE0bDAwbDX8PGwx9GwwMXGEbDAwbDX8OGwl6GA8LBwMbCXwbDAxbDhsMDBsNfxsMDEgQWVtKfF9KSltMRxsMDldNGwwOUFFKGwwOXxsMDlhLUF1KV1FQGwwMGwx9GwwMXGEbDAwbDX8OGwl6GA0MCAMbC3wbCXwbDAxcGwwMGw1%2FDxsMfRsMDE0bDAwbDX8bDAwPGwwMGwl6Gwx9Gwl8GwwMXBsMDBsNfw8bDH0bDAxNGwwMGw1%2FGwwMDxsMDBsJehsLehgLDA4DGwl8GwwMThsMDBsNfxsMDGlXUA0MGwwMGwx9GwwMUhsMDBsNfxsLfBsMDFtQE2ttGwwMGwx9GwwMW1AbDAwbC3obDH0bDAxWXRsMDBsNfwoGGwx9GwwMSVlIGwwMGw1%2FGwwMc1tNXxsMDBsMfRsMDElZTBsMDBsNfxsMDFJSSFNOV05bGwwMGwx9GwwMXGEbDAwbDX8NBxsJehgGCQoDGwl8GwwMTRsMDBsNfw0bDH0bDAxLSE5fGwwMGw1%2FDhsMfRsMDFxhGwwMGw1%2FDhsJeg%3D%3D\u0026ule=pagehide\u0026cp=unload\u0026gtm=-\u0026gac=-\u0026tb=1\u0026ich=1\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=903\u0026mo=0\u0026pn=3714\u0026spn=2811\u0026fp=2815"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://dynadot.rsocdomains.com\r\ncontent-type: application/json\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-9WGW9SCFVP\u0026cid=951130728.1772690593\u0026gtm=45je6340h2v876558862z89192081961za20gzb9192081961zd9192081961\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~115938466~115938468~116024733~117484252\u0026z=1918085552","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:13.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:39:49 GMT","end":"Mon, 27 Apr 2026 08:39:48 GMT"},"fingerprint":{"sha1":"CE:42:4E:D1:C8:99:18:01:BA:4D:0B:75:5E:F8:41:9B:7C:98:09:87","sha256":"B3:D9:56:1E:11:C2:75:BC:1A:B0:66:E1:E3:F3:0F:B7:9B:EE:05:A4:69:10:AA:BC:34:28:C0:22:FC:AA:40:9A"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-9WGW9SCFVP\u0026cid=951130728.1772690593\u0026gtm=45je6340h2v876558862z89192081961za20gzb9192081961zd9192081961\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~115938466~115938468~116024733~117484252\u0026z=1918085552 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Thu, 05 Mar 2026 06:03:13 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T13:48:12.100411Z","times_seen":763262,"resource_available":true,"data":null}},"time_used":626,"timings":{"blocked":288,"dns":0,"connect":30,"send":0,"wait":48,"receive":0,"ssl":257},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2.js","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:14.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adtrafficquality.google","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:40:04 GMT","end":"Mon, 27 Apr 2026 08:40:03 GMT"},"fingerprint":{"sha1":"48:5E:30:A3:53:85:10:4B:D1:5F:08:28:03:7A:94:53:A3:AF:9E:FB","sha256":"52:E6:EC:CE:8F:CE:7B:0D:30:AD:8E:25:53:FD:78:51:32:F3:83:2A:9E:09:03:20:E0:7A:F8:22:F3:05:B2:DB"}}},"request":{"raw":"GET /sodar/sodar2.js HTTP/1.1\r\nHost: ep2.adtrafficquality.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"adspam-signals-scs\"\r\nreport-to: {\"group\":\"adspam-signals-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs\"}]}\r\ncontent-length: 7609\r\ndate: Thu, 05 Mar 2026 06:03:14 GMT\r\nexpires: Thu, 05 Mar 2026 06:03:14 GMT\r\ncache-control: private, max-age=3000\r\netag: \"1772145733101481\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21495,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1398)","md5":"622209dbf4750ca1b62b82ee36b4579e","sha1":"5f459d016a540c008b8a4db3ceaaf570a4a2c3d9","sha256":"893c7f6aca9aca8c8aded19a9cd8919cbd7a205cff7f6503d1241b8fa2f721ff","sha512":"cd7a878355f5b1c086eb8c1c9229a7db90ba9b230f30b77112674f3d90593ac4d8f59a24eec59d29afaf45d7277929a53b596e627e8959d658140d18d6a0a6d9","ssdeep":"384:Pyr4MMy/s1OR/lZQkp5d4WFy6auy9fRIjGRSKh6/RW+fzddr7:VySOxl3p5d4Wk669fC6RgW+fzddn","tlshash":"caa295cab6e1b4654363a9f2a13f100ff23e6c6dd84c4858b084d4e0bdb596a4767f78","first_seen":"2026-03-01T10:14:34.996222Z","last_seen":"2026-04-03T21:45:58.597644Z","times_seen":1842,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":76,"dns":0,"connect":28,"send":0,"wait":40,"receive":1,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/fiverr.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/fiverr.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz\r\nCookie: XSRF-TOKEN=eyJpdiI6InBLU3IreTIyTnQ2MFB5WW5raXpIelE9PSIsInZhbHVlIjoiVDhtSW9vNDZSK1VkdmZ6eGRVYWR4R1ViQnp2T1Q0RzQvbWhPV3BrSGhyTnpqMTB0UWV0OEVtSWpXQVVOUXNoamhvdm11U3hqSEJHSmJBRmZxUmlMd2tPZE1ocUEzaWFyZEFJRTh6MUh1azJxdUNIOTlyK0RjV0J3UXdZVGlOVVEiLCJtYWMiOiJlZGJkMzhiN2NhNWI3YTdiZmEyMDY1M2VlZTFmMzdlN2JhOWI0YWM0NTA1NWY3NzJlY2YxNDEzMTQ3Nzc1YTM4IiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6Ind6QTZuU1R2cy9BLzAvZXh6cWQ3OHc9PSIsInZhbHVlIjoidlpsdVJLNmxXR0NhUEZrczczS2NxVkVwT3ljcDRpK2psZ3dTQmFSS3NlUEtVNUllN3B3d3E5N0pudHBWVGdtSHlXNkRwRjVHejZQbTU3TUp6aXhYbXN6c1dtOEljSFZiMHo2bWROK2NkOHVYT3BUSHJWbUNEcHB3TFhQTlU2MisiLCJtYWMiOiIzMzk5YzBjMzU4NTM5Y2E2Yjg0NzcyZDM1Njc0Zjc3NWM4ZGY1NGZmZmI0ZjQ1NDI4YWM2NDAzMjhjOTc5MWY5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 10:26:39 GMT\r\netag: \"8b8-63607621cf5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 2232\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2232,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"d7c86e0082be875ab9e502d8f63a560a","sha1":"7465b9a5a77881507eeb6356b5f4c04ea4921093","sha256":"dbab65716f1d5e9dc9ce6a17614ad1e015be9b49a23d78f48a042a9d2e5b5dc0","sha512":"311b5ffb7eeb21c8494a1fe91da9c8c735d247663a9b303aa0975d1cc70c2743716d16866fd3e21e51b7aab9177b6b0d9599cfa72540586ae446084bb790afc7","ssdeep":"","tlshash":"e3413a86b6441918e5a2c77417a8f87075eb199dd07099e73bca08a6314ee2a70163dd","first_seen":"2025-07-02T03:33:37.459148Z","last_seen":"2026-04-04T09:24:12.607408Z","times_seen":3306,"resource_available":false,"data":null}},"time_used":847,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":847,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/storage/uploads/hero_image/snap_on.png","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=933883a2.buzz","date":"2026-03-05T06:03:11.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /storage/uploads/hero_image/snap_on.png HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InBLU3IreTIyTnQ2MFB5WW5raXpIelE9PSIsInZhbHVlIjoiVDhtSW9vNDZSK1VkdmZ6eGRVYWR4R1ViQnp2T1Q0RzQvbWhPV3BrSGhyTnpqMTB0UWV0OEVtSWpXQVVOUXNoamhvdm11U3hqSEJHSmJBRmZxUmlMd2tPZE1ocUEzaWFyZEFJRTh6MUh1azJxdUNIOTlyK0RjV0J3UXdZVGlOVVEiLCJtYWMiOiJlZGJkMzhiN2NhNWI3YTdiZmEyMDY1M2VlZTFmMzdlN2JhOWI0YWM0NTA1NWY3NzJlY2YxNDEzMTQ3Nzc1YTM4IiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6Ind6QTZuU1R2cy9BLzAvZXh6cWQ3OHc9PSIsInZhbHVlIjoidlpsdVJLNmxXR0NhUEZrczczS2NxVkVwT3ljcDRpK2psZ3dTQmFSS3NlUEtVNUllN3B3d3E5N0pudHBWVGdtSHlXNkRwRjVHejZQbTU3TUp6aXhYbXN6c1dtOEljSFZiMHo2bWROK2NkOHVYT3BUSHJWbUNEcHB3TFhQTlU2MisiLCJtYWMiOiIzMzk5YzBjMzU4NTM5Y2E2Yjg0NzcyZDM1Njc0Zjc3NWM4ZGY1NGZmZmI0ZjQ1NDI4YWM2NDAzMjhjOTc5MWY5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 06:03:11 GMT\r\nserver: Apache\r\nlast-modified: Sun, 08 Feb 2026 08:34:02 GMT\r\netag: \"1e9956-64a4be27ac8c1\"\r\naccept-ranges: bytes\r\ncontent-length: 2005334\r\ncontent-type: image/png\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2005334,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"0c8ce1f297321ed477ae348d152c981d","sha1":"908fed905c909016872777c1c9f24f366d0e37ef","sha256":"350c60b80a3bf84aaef6fc0d966414c54da72abb53a72125f745b6e07c2d0c71","sha512":"e49026c4705611ec14846196cfe146ad8f280c9306e04409ab5434aaadbff9b818d8b04e2d3859776bbfb3392c8b75d0b0c3bf66cd3dc4c90ce39cc65f84b6bf","ssdeep":"24576:MQY4JcjXzr5dxHHtRQxcyiN0OeyTm/Bt+RKUR0tKVaNC:JZJcTzdvHwiyigiZiNC","tlshash":"0225336cee49ec71c3c6df329955d12977a490c7a3f3100796ca8ecee87ce10992a359","first_seen":"2026-03-04T09:15:28.824099Z","last_seen":"2026-04-04T09:24:12.620241Z","times_seen":217,"resource_available":false,"data":null}},"time_used":1490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":648,"receive":842,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}