{"report_id":"00d0ec39-61b0-4981-b35d-c1404b9fb205","version":6,"status":"done","tags":[],"date":"2026-02-13T18:13:02Z","url":{"schema":"https","addr":"141model.com/","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"104.21.19.110","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"141model.com/","fqdn":"141model.com","domain":"141model.com","tld":"com"},"title":"Hong Kong Models","dom":{"size":76298,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1197)","md5":"faaa669a9a267bd7cd9c3d04eb001396","sha1":"4d370a2ac80b1e284d3b0a5db60dd41f6ce99680","sha256":"49d15e8b8bb355744f75b8bf476ec753f600dfcff29128d625a1289526f874bb","sha512":"e51e45bb8fd5d59f9e4d95362bacb3b51eaafdf5e1691df28dc5672c8f7c0c9712bffeeb439e0f7097d5488cca9fb546511ecf02084e2eb426379ea2484f7983","ssdeep":"1536:6fD4EZBnTcIIt/DHdRH02UmQTVvE1xkTr:Vb8","tlshash":"067384e255f0a1be1187c5dbaf25af5b9e87a557ea96400072ed0bc84fa7cc1fe03418","dom_hash":"domhashcae163f881eb3e4fa84fe3a1facf2709","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"141model.com/","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"104.21.19.110","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T18:13:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-08T22:20:44.026892Z","alert_count":0,"request_count":1,"received_data":401793,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"141model.com","ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-06","domain_rank":0,"first_seen":"2026-02-12T21:38:37.132933Z","last_seen":"2026-02-12T21:38:37.132933Z","alert_count":34,"request_count":17,"received_data":900994,"sent_data":9002,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"hk141vip.matomo.cloud","ip":{"addr":"18.195.235.189","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2017-09-08","domain_rank":0,"first_seen":"2026-02-12T21:38:37.130745Z","last_seen":"2026-02-12T21:38:37.130745Z","alert_count":0,"request_count":1,"received_data":232,"sent_data":856,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.matomo.cloud","ip":{"addr":"3.174.230.122","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-09-08","domain_rank":124973,"first_seen":"2019-09-27T14:00:38Z","last_seen":"2026-02-11T14:31:27.381337Z","alert_count":0,"request_count":1,"received_data":140016,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-02-08T22:26:16.428236Z","alert_count":0,"request_count":2,"received_data":1001,"sent_data":1898,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"141model.com/","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ea9269506d22aa09ab546590b1d7cab","sha1":"cb6253d73e81da2defc8c7f11b00a2d6fd444aea","sha256":"a1ad346bb5a46195c8c06ffd26dfd9fe23e0c00df444fdd1e7e02d4ff55f658b","sha512":"82f33f4bf1ffa1d8614f6c80919447b9edfed8525b85f001322f63f623e42cddcf08a6acfb6c590975541d88f93b1efad4a1ebe8776dfcc806f9e0220d6fd389","ssdeep":"","tlshash":"64f0d45e2c53a45637fa253dc327666b2763070374c2d415ba05c4143fd4a962c419ce","size":489,"data":"","first_seen":"2026-02-12T21:38:42.077133Z","last_seen":"2026-02-13T18:13:05.649209Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T15:29:30.901899Z","times_seen":364010,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"29fcd02db1ead3a4a4c778999958f45c","sha1":"a1ea3f2226e7c52b3d05291e09cc0ddfe51771e3","sha256":"7db3762107e95de0c1e7433ae9f3c4a965f511dbc9b1e58ae08b55624764d901","sha512":"394c9834048c5f22d6c50354d202c5433571d6f1fe5f8116a187cac5d49f66beac94f7ffe92f73d7e450c51217f6fe47172c247c41c112e88d61e06e34b6db03","ssdeep":"","tlshash":"ebc08c88221b4c7146bb2a424b7fa204b0062213a8f09a21290a73044f20e53e748858","size":167,"data":"","first_seen":"2026-02-12T21:38:42.078976Z","last_seen":"2026-02-13T18:13:05.650451Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/default/assets/js/front/main.js","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa857036fc48291053f3e6f97c55f188","sha1":"7950d35f050fda718778101e1c3d69cc7943378c","sha256":"423cb37767dff6e2e1d53b4b275dad32f43d6a055bd95771a89ae9d92740354a","sha512":"28134f87892cf7b6c9588d5ce2e596e96512c0e9ed1938e4f0cb872a3a1453746110fff7e6e2618ef9aac98eed6c21fc0978bed3d682dd45668500a72add2f8f","ssdeep":"384:yyd1aXkIg8NKVxRAs3VR4z8KDZujmUG7tp5Ww3YV:fcUfge0DZujmUGa","tlshash":"a772532a9abb2136826761bedb9fa2163716101b2305cd183e3dc74c2f81b7196f16f5","size":16664,"data":"","first_seen":"2026-02-12T21:38:42.05809Z","last_seen":"2026-02-13T18:13:05.63924Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6de16cbca7aa07127c321c6edb86e42","sha1":"7076e8fa680b743454fdca59bafc2c6419a8a0e0","sha256":"2d9ef6a35c3c3d89d812daec08be43ed47ac6a89b3bd28cb35a75d3405656fab","sha512":"453c95ebda98e33fd83d47e37bc2bfc7d279cd97827c589de5d8092d7338d547cb004f4e3480d9d8b6e96c5cf892c277eea2cde926134367e6294ed18ac128bd","ssdeep":"","tlshash":"2df0ac1609ab1afa313b613e3e7e4a29f3ab681f9090c4017e4d941caf6199587403c8","size":599,"data":"","first_seen":"2026-02-12T21:38:42.081405Z","last_seen":"2026-02-13T18:13:05.651568Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"61ba6ba9812caba1bb0813576700bca2","sha1":"494547cfcfe08d129c086e3815fcfe0a989d27bd","sha256":"95c12a01a0f8504188c02998f060be8a380006669de1bedb5f2037571c416fe1","sha512":"33a038daf3e3589cec491e14a8ebc8fd65e22c3817ad1cc539bf95bc4259e436ad7ade04d9e46a67b36b4ed4ab45b31692c6e49977a26dd8d12d762bbbcac54d","ssdeep":"","tlshash":"a8a00203c55445b1c1d7b69c23635335373b2307b100115051cce39c2f4d5abc0457b5","size":63,"data":"","first_seen":"2026-02-12T21:38:42.082267Z","last_seen":"2026-02-13T18:13:05.652817Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.matomo.cloud/hk141vip.matomo.cloud/matomo.js","fqdn":"cdn.matomo.cloud","domain":"matomo.cloud","tld":"cloud"},"ip":{"addr":"3.174.230.122","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf8b381329cc0aee32cb1b8b039f45a4","sha1":"4c3df5b37efad2433b0ce9797cf616b9054e73f8","sha256":"2aa5b34976102b9b3df357626c749e33cfe37a0e0031edfb40a3471c1d303a1c","sha512":"27024ab0f52f0897e4783d44c281bf863d459b91521402fff79f9e35a33de5705cb4d84e217a279cd68c1b63d472ce4ced4a9f9c70b01f5a974b99bdeca90bf0","ssdeep":"3072:AT+Z2fucXYy1PGJ9d1QkNw0CjBi4jZdV50tqv:ASUucfBGrd1HwBi4jZdV50tqv","tlshash":"e5d3088a72c2753a86db60b5543f110b733a9daa2448c0b8f625d4f63d78e0e553bf78","size":139327,"data":"","first_seen":"2026-02-05T13:16:52.117928Z","last_seen":"2026-05-18T14:30:39.242884Z","times_seen":658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a5f266046a245985ebe8121d5360ba07","sha1":"6e8532fc692b2c1b49e2ef780f2d8acc0ef3597b","sha256":"59a93a599bc953d185449a699bb396239c23c0aa1054d0df7c777900fc802f2c","sha512":"10be9d54dca39515951b83938d2cd099f86266ecfb4331cc2869467bd38604d9bc542f45bbefb856e97cb9b9f12f0ef95f5664be42e5b0bc1d39c123cedfb0ec","ssdeep":"","tlshash":"68e0d87d96a508b000f3b175626ff6506a32419338488c157e5d45c41fac71c20a1a8d","size":413,"data":"","first_seen":"2026-02-12T21:38:42.092027Z","last_seen":"2026-02-13T18:13:05.654453Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f72775abbe97ebe8576d84ffa7e1693","sha1":"f15c15f9a7406b002e6bc8b381c9332283544e2c","sha256":"7e389e52df8f27015228e04459f85c5b997a4f6d4520536a73c196ab6ada576a","sha512":"f177bd8e02cefc843938ef4ed2dc44254d2ed31c83a0f77c5bfaf6b9486249d5bbd7efba90554943326f41dedd3f319b8ae452b1d897502da3fb404de6e43b4e","ssdeep":"","tlshash":"fde0df6d97a508b010f3b0b6923ff6166633809370089d05bf9d86840facb1c10a2e4e","size":412,"data":"","first_seen":"2026-02-12T21:38:42.093031Z","last_seen":"2026-02-13T18:13:05.655856Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17793616209","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"457d3486eaa3f0b3ac11c16e729bf808","sha1":"155376b0fed1c3f44271083bca680e95d2e24da8","sha256":"b5b7b942b10b5e011d819c6f4ad5f6e029fc3d0a2f0fb55902398fab64ba4508","sha512":"a96fe96f74755ed55e4e85251cb519123d02f6427e652626b5f4c981c8ffa5793548ffabb5a654f493f722d2e146427e23c1a93fd08a251df53bc2173e283025","ssdeep":"6144:ajNMmuYVpw8UENXaP8gM7SgP14j9Vk74Bqq471:ijuYVkmKP8So4BD2","tlshash":"a68419dd73d674225393a478403f018ba57b68a2f48cc899f18acce42d74a9a4277f7d","size":401189,"data":"","first_seen":"2026-02-13T18:13:05.647502Z","last_seen":"2026-02-13T18:13:05.647502Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"141model.com/img/photo_5_2026-02-01_09-06-36_medium.webp","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://141model.com/","date":"2026-02-13T18:12:40.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"141model.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:02:55 GMT","end":"Thu, 07 May 2026 13:01:30 GMT"},"fingerprint":{"sha1":"60:EF:49:61:CD:4D:49:C6:50:88:C6:39:D5:98:D7:E1:0D:7B:E8:60","sha256":"BF:C2:5C:FE:64:10:A6:61:D1:72:5A:14:5B:51:46:0E:43:55:66:A2:04:75:87:0E:24:59:91:01:14:16:E1:38"}}},"request":{"raw":"GET /img/photo_5_2026-02-01_09-06-36_medium.webp HTTP/1.1\r\nHost: 141model.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://141model.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: language=en; PHPSESSID=ttkjeubnagdkt7fgfg08fng9v0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 18:12:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 61544\r\nlast-modified: Tue, 10 Feb 2026 11:09:05 GMT\r\netag: \"698b11d1-f068\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2JW4Fj2Z38Duvevo2NC35d%2F1pN62mljKPNMvVWoEq05x%2BrhVOn9JyhLiHXdD%2FEYTN%2BMGTe4y9MqAnE7RqCuMehfTbQgoF2urphE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd64b9829792e0d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61544,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x1152, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5b272aa37be4164bee3ad73c2f363420","sha1":"b5b750a4e37d72f9ea9cfcea3c049ee16dd2fd17","sha256":"2a2fc976a665333a36bda13ff8a7dfa3c834c95b7d72d25d782446ef4303ec72","sha512":"d81eb9af05abf8265679a6d0b7cb5aae30f60c20a4500472d42e4f1ce894bbcae8b6cfe44db19a10145629cb96bb70e2dc0c08b404826144e053f7f13ff9c4c9","ssdeep":"1536:hBOKjoZBO7NdDHHecaQ2sChstVU3b0j4QTQNvyHMAZIHkL7:hBBMDO7zTXa3y44j4Q8dgYkL7","tlshash":"1053016a0ff653ddf885979449830d2fbe28ff220635ac03a899e0cb256045e27dd1e2","first_seen":"2026-02-12T21:38:42.05905Z","last_seen":"2026-02-13T18:13:05.620556Z","times_seen":2,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/img/photo_5_2026-02-10_12-41-11_medium.webp","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://141model.com/","date":"2026-02-13T18:12:40.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"141model.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:02:55 GMT","end":"Thu, 07 May 2026 13:01:30 GMT"},"fingerprint":{"sha1":"60:EF:49:61:CD:4D:49:C6:50:88:C6:39:D5:98:D7:E1:0D:7B:E8:60","sha256":"BF:C2:5C:FE:64:10:A6:61:D1:72:5A:14:5B:51:46:0E:43:55:66:A2:04:75:87:0E:24:59:91:01:14:16:E1:38"}}},"request":{"raw":"GET /img/photo_5_2026-02-10_12-41-11_medium.webp HTTP/1.1\r\nHost: 141model.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://141model.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: language=en; PHPSESSID=ttkjeubnagdkt7fgfg08fng9v0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 18:12:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30422\r\nlast-modified: Tue, 10 Feb 2026 10:47:48 GMT\r\netag: \"698b0cd4-76d6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xvUVrRPNtAXWUe2uSViVImUK7IYctBi1Z3xr4NoaBQ%2BHm8gzy29gpOZRPow1rlA8VaQy6Kc0BQD6DvWbOVsxXUNvseZ0TILUHjo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd64b98297c2e0d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30422,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2c7e8f127edc3cfb4db7f02ea9a6c885","sha1":"e478a6e70865749d96cf2417f4caee1ba22add63","sha256":"4ad6fe89c5f7d3f212af2b8e2e24de5a8f1d8a9f0be32883ab4adc605d5b86b1","sha512":"69d544300313e770e915b0cf369eda7f96182fedb7e98d54dd6ef0d9a38f4af60ff1c5ef106b8b16ddc9519a67e6f2c6db2da3c0bf9f1504af9a459b742a3b62","ssdeep":"768:vsFsYp1gRjTrg7/jJ94blJ0nudQXyLM+nyaSoKY15/eJf/+nkj:0FstsJ98JEiL5SvuY+nS","tlshash":"6ad2e1543fa215b7e359ab83a2ac89aa76044442df028a6c0f7bfc817d31fdd55b46c4","first_seen":"2026-02-12T21:38:42.071587Z","last_seen":"2026-02-13T18:13:05.622551Z","times_seen":2,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/img/photo_1_2026-02-07_17-06-57_medium.webp","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://141model.com/","date":"2026-02-13T18:12:40.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"141model.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:02:55 GMT","end":"Thu, 07 May 2026 13:01:30 GMT"},"fingerprint":{"sha1":"60:EF:49:61:CD:4D:49:C6:50:88:C6:39:D5:98:D7:E1:0D:7B:E8:60","sha256":"BF:C2:5C:FE:64:10:A6:61:D1:72:5A:14:5B:51:46:0E:43:55:66:A2:04:75:87:0E:24:59:91:01:14:16:E1:38"}}},"request":{"raw":"GET /img/photo_1_2026-02-07_17-06-57_medium.webp HTTP/1.1\r\nHost: 141model.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://141model.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: language=en; PHPSESSID=ttkjeubnagdkt7fgfg08fng9v0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 18:12:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33414\r\nlast-modified: Sat, 07 Feb 2026 15:08:34 GMT\r\netag: \"69875572-8286\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vjjuZLP%2FymK57thCWUDW5csl5TVnpi0%2BuDYz%2Bm%2FDTd1iw9JMmhyBsKxSsmDsXJg%2F1Ui8Ap%2Bx4ZcfpiggCwpgPw2ARXDi1fd7x24%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd64b98297f2e0d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33414,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x1029, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f2c1e80f9ab0e80b5503c969e02aa236","sha1":"9e5028ca1e02727d4f9aec95aad07f37513edb91","sha256":"d5706f134f1dc94c48756598556c2ae51476fb86936efb2d79ca505a3dc128a3","sha512":"fee29b741e16812384f6420293cfc7bdfca728be2cdf36d458daad987c88105ba16e5dacf44903994a0305e1db0c75273f9d6427997d73fd837a89388fe9da85","ssdeep":"768:zHSL4tT87E0StEwPhKQ+x4TAwhJdMk8RH+CnW2Qj:Ru1StHF+xYbtM/jy","tlshash":"20e2f102bae6ea75eef97947a57d46c33237fca09603d81513fa179016a21f24b0533e","first_seen":"2026-02-12T21:38:42.057147Z","last_seen":"2026-02-13T18:13:05.624603Z","times_seen":2,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hk141vip.matomo.cloud/matomo.php?action_name=Hong%20Kong%20Models\u0026idsite=4\u0026rec=1\u0026r=361373\u0026h=18\u0026m=12\u0026s=40\u0026url=https%3A%2F%2F141model.com%2F\u0026_id=67e029ca7cf94738\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=ZHR5b4\u0026fa_pv=1\u0026fa_fp[0][fa_vid]=MpbMzD\u0026fa_fp[0][fa_id]=vipLoginForm\u0026fa_fp[0][fa_fv]=1\u0026pf_net=69\u0026pf_srv=205\u0026pf_tfr=0\u0026pf_dm1=373\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"hk141vip.matomo.cloud","domain":"matomo.cloud","tld":"cloud"},"ip":{"addr":"18.195.235.189","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://141model.com/","date":"2026-02-13T18:12:40.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matomo.cloud","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 21 Apr 2025 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"20:11:4C:63:17:FD:99:09:3C:43:B7:CC:E0:3C:3D:1B:68:53:F3:19","sha256":"B0:CB:AA:8B:5C:DE:18:64:46:50:8B:3C:EF:2F:F8:94:E6:C3:D9:44:13:32:41:13:29:76:AB:D1:5A:E1:A0:1C"}}},"request":{"raw":"POST /matomo.php?action_name=Hong%20Kong%20Models\u0026idsite=4\u0026rec=1\u0026r=361373\u0026h=18\u0026m=12\u0026s=40\u0026url=https%3A%2F%2F141model.com%2F\u0026_id=67e029ca7cf94738\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=ZHR5b4\u0026fa_pv=1\u0026fa_fp[0][fa_vid]=MpbMzD\u0026fa_fp[0][fa_id]=vipLoginForm\u0026fa_fp[0][fa_fv]=1\u0026pf_net=69\u0026pf_srv=205\u0026pf_tfr=0\u0026pf_dm1=373\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: hk141vip.matomo.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://141model.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nOrigin: https://141model.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 13 Feb 2026 18:12:40 GMT\r\nserver: nginx\r\naccess-control-allow-origin: https://141model.com\r\naccess-control-allow-credentials: true\r\ncross-origin-resource-policy: cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T15:34:22.145557Z","times_seen":16243359,"resource_available":true,"data":null}},"time_used":852,"timings":{"blocked":376,"dns":14,"connect":23,"send":0,"wait":92,"receive":0,"ssl":344},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T18:12:39.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"141model.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:02:55 GMT","end":"Thu, 07 May 2026 13:01:30 GMT"},"fingerprint":{"sha1":"60:EF:49:61:CD:4D:49:C6:50:88:C6:39:D5:98:D7:E1:0D:7B:E8:60","sha256":"BF:C2:5C:FE:64:10:A6:61:D1:72:5A:14:5B:51:46:0E:43:55:66:A2:04:75:87:0E:24:59:91:01:14:16:E1:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 141model.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 18:12:39 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: language=en; expires=Sun, 15 Mar 2026 18:12:39 GMT; Max-Age=2592000; path=/; HttpOnly\nPHPSESSID=ttkjeubnagdkt7fgfg08fng9v0; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=(), usb=()\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jg6kt5bzltAlUI2I9%2BeEwaPGtMjgCyGfkEbGiLgFBefAdD%2BCp%2B3Y9nggzTO9wDC49qA7dvgiEHKLAtm9tVYKYnsE4yA1gb%2BBxoA%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cd64b935c722dfa-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75801,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1191)","md5":"2dad2a9f08935d335ed4f45979cf27f7","sha1":"8fd73bb926af8a40b81ab4cd1869261caf074e7d","sha256":"e46f1f20c92f5bbac39c73b2d10e55dec71ce9acd77ab314f3bf94e8451d9d87","sha512":"b179df7a82b21fe7ca70dac6367a96c9e93cbf1c8e21fa44e223e2bb2a488b66a8bdd176f72032493f260d65cca00304965b2e9ac099f48a902d5969b6d35a25","ssdeep":"1536:6lD4EZBnq+IItk5IgbBmo68mBf9KfBQqf:1R1","tlshash":"be7384e255f1a0be11c3c5daaf25af5b9ed7a553ea96410072ed07884fa7cc2fe03418","first_seen":"2026-02-13T18:13:05.62758Z","last_seen":"2026-02-13T18:13:05.62758Z","times_seen":1,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":54,"dns":22,"connect":8,"send":0,"wait":205,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.matomo.cloud/hk141vip.matomo.cloud/matomo.js","fqdn":"cdn.matomo.cloud","domain":"matomo.cloud","tld":"cloud"},"ip":{"addr":"3.174.230.122","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://141model.com/","date":"2026-02-13T18:12:40.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.matomo.cloud","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7B:9E:B2:8F:2C:21:F3:D8:CC:C3:78:9E:88:F2:FC:72:0C:FB:68:3A","sha256":"D7:E0:95:8B:B8:35:19:48:30:B8:87:D2:5F:82:0D:1D:DF:65:27:5C:9A:83:C6:2B:1B:9B:3F:9C:32:70:25:3C"}}},"request":{"raw":"GET /hk141vip.matomo.cloud/matomo.js HTTP/1.1\r\nHost: cdn.matomo.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://141model.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 13 Feb 2026 18:12:41 GMT\r\nlast-modified: Tue, 03 Feb 2026 22:26:20 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=691200\r\nx-amz-version-id: ViTZYre6uVZeoWLRB5x68BQ_NP8x3lFz\r\netag: W/\"cf8b381329cc0aee32cb1b8b039f45a4\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 db15e6848c4fc4c8c6bfc799d4629b0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: WAW51-P6\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: mfgdnEGdcz--ew6b39J5T6WygC44_bM-n91bEx10KdHZSmDeQkBcuQ==\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":139327,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2923)","md5":"cf8b381329cc0aee32cb1b8b039f45a4","sha1":"4c3df5b37efad2433b0ce9797cf616b9054e73f8","sha256":"2aa5b34976102b9b3df357626c749e33cfe37a0e0031edfb40a3471c1d303a1c","sha512":"27024ab0f52f0897e4783d44c281bf863d459b91521402fff79f9e35a33de5705cb4d84e217a279cd68c1b63d472ce4ced4a9f9c70b01f5a974b99bdeca90bf0","ssdeep":"3072:AT+Z2fucXYy1PGJ9d1QkNw0CjBi4jZdV50tqv:ASUucfBGrd1HwBi4jZdV50tqv","tlshash":"e5d3088a72c2753a86db60b5543f110b733a9daa2448c0b8f625d4f63d78e0e553bf78","first_seen":"2026-02-05T13:16:52.117928Z","last_seen":"2026-05-18T14:30:39.242884Z","times_seen":658,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":72,"dns":16,"connect":24,"send":0,"wait":133,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/img/hf_20260208_161548_deafa71e-2c81-41a4-9751-8c6ca01162c0_medium.webp","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://141model.com/","date":"2026-02-13T18:12:40.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"141model.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:02:55 GMT","end":"Thu, 07 May 2026 13:01:30 GMT"},"fingerprint":{"sha1":"60:EF:49:61:CD:4D:49:C6:50:88:C6:39:D5:98:D7:E1:0D:7B:E8:60","sha256":"BF:C2:5C:FE:64:10:A6:61:D1:72:5A:14:5B:51:46:0E:43:55:66:A2:04:75:87:0E:24:59:91:01:14:16:E1:38"}}},"request":{"raw":"GET /img/hf_20260208_161548_deafa71e-2c81-41a4-9751-8c6ca01162c0_medium.webp HTTP/1.1\r\nHost: 141model.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://141model.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: language=en; PHPSESSID=ttkjeubnagdkt7fgfg08fng9v0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 18:12:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59222\r\nlast-modified: Mon, 09 Feb 2026 07:32:23 GMT\r\netag: \"69898d87-e756\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zAuOki57JT%2FEQ96530xu%2FpDoAnJvLBJLFlnj5UZ7ljI8Zif5mZMt%2BYhjCU18uSizRLLTwWMJkFE6mn95IhYR1rudFj0OpIe1MBw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd64b98297d2e0d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59222,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0fa7dad55827c26e00e9fdb5b7b63c5e","sha1":"4ed6d4b99144d4bf39b6e85555aedb38b3e569af","sha256":"1c280b906d066c3be5983ed7d4b8893ca81b54ddc7cb8fc92e9a3477c455c626","sha512":"a74c6ccf85efbdc53daa24ce4b28afced97a253213f4de82169a8ae6b4679e58ca4de188c300a8ef2dc7e9e9049f327c533de953611a16de36e2a2f67fc3f6ca","ssdeep":"1536:n/D8IiIgfEiNUXWRh0WK8baAcfzqbAlPvu6GYvD11D35vg2:ngIVg8NMh0xYqeclPvIY7bDJvg2","tlshash":"424302e5ca11132f97cf5b2ffaa09fa907ac7b3112728284962972c40a965572943e73","first_seen":"2026-02-12T21:38:42.076134Z","last_seen":"2026-02-13T18:13:05.630177Z","times_seen":2,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2F141model.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1302989031.1771006360\u0026dt=Hong%20Kong%20Models\u0026auid=338559201.1771006360\u0026navt=n\u0026npa=1\u0026gtm=45be62b1v9239805177za200zd9239805177xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104573694~104684208~104684211~115616986~115938465~115938468~116988315~117447491~117455673~117455675~117527104\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-17793616209\u0026tid=AW-17793616209\u0026tft=1771006360383\u0026tfd=886\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://141model.com/","date":"2026-02-13T18:12:40.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:39:05 GMT","end":"Mon, 13 Apr 2026 08:39:04 GMT"},"fingerprint":{"sha1":"AC:37:C7:AF:75:CB:27:69:D4:EC:B6:A6:68:E1:51:4A:A3:99:78:B0","sha256":"63:86:A6:69:FF:ED:40:2B:88:13:6E:3E:4F:01:08:AB:8D:96:19:72:D3:22:DD:14:05:79:8E:5D:58:1F:0D:39"}}},"request":{"raw":"GET /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2F141model.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1302989031.1771006360\u0026dt=Hong%20Kong%20Models\u0026auid=338559201.1771006360\u0026navt=n\u0026npa=1\u0026gtm=45be62b1v9239805177za200zd9239805177xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104573694~104684208~104684211~115616986~115938465~115938468~116988315~117447491~117455673~117455675~117527104\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-17793616209\u0026tid=AW-17793616209\u0026tft=1771006360383\u0026tfd=886\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://141model.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ndate: Fri, 13 Feb 2026 18:12:40 GMT\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T15:34:22.145557Z","times_seen":16243359,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/img/hf_20260208_124323_6232c618-b173-42b6-a1e4-a3730d936b30_medium.webp","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://141model.com/","date":"2026-02-13T18:12:40.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"141model.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:02:55 GMT","end":"Thu, 07 May 2026 13:01:30 GMT"},"fingerprint":{"sha1":"60:EF:49:61:CD:4D:49:C6:50:88:C6:39:D5:98:D7:E1:0D:7B:E8:60","sha256":"BF:C2:5C:FE:64:10:A6:61:D1:72:5A:14:5B:51:46:0E:43:55:66:A2:04:75:87:0E:24:59:91:01:14:16:E1:38"}}},"request":{"raw":"GET /img/hf_20260208_124323_6232c618-b173-42b6-a1e4-a3730d936b30_medium.webp HTTP/1.1\r\nHost: 141model.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://141model.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: language=en; PHPSESSID=ttkjeubnagdkt7fgfg08fng9v0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 18:12:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 47638\r\nlast-modified: Tue, 10 Feb 2026 11:04:34 GMT\r\netag: \"698b10c2-ba16\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ieacH4O1%2Fqjax7H2WiwoFhtiDNbQT0SHdwN4QtyQij9JGCqy3zlrDMHlwGX%2B0UVN%2BZ%2BxHc9Mor22%2BqWx9xiY4vCqz3o5wLvAUWU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd64b98297a2e0d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47638,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2c4ecb3b66208939d19e84a73a7a3083","sha1":"0dbdc68d7cafff5de2a4bcf887c3a9a01ddaa4f4","sha256":"1b00ed0f1962435c198d982fd49875bf8cb9ea20d03ffdc34c14dde951c4a57b","sha512":"d7588a7f461c11f61c5beac021a378dd83d09463650f9617dd1b9f47e2943562e6c773df4bfb6bf71389be6417742b8685c3f36a29d18bcceaf3e968fa3ed87b","ssdeep":"768:zbrYXhRo7GkXggGo5+rGlonE3XXL+8GtaHEOmpw9MRYfM1JQPnd+eW/zDW8B7jnv:zQX47k1elF3XXPG0ktH/i58DLB7rv","tlshash":"ae23f27877f87b5de46d978a190d74e6e4e6830c6d4d9e8bbc0770bd4a03d32e284285","first_seen":"2026-02-12T21:38:42.059929Z","last_seen":"2026-02-13T18:13:05.631908Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/img/hf_20260206_141008_617950ba-8080-42dd-9275-e3f568e9a6b6_medium.webp","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://141model.com/","date":"2026-02-13T18:12:40.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"141model.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:02:55 GMT","end":"Thu, 07 May 2026 13:01:30 GMT"},"fingerprint":{"sha1":"60:EF:49:61:CD:4D:49:C6:50:88:C6:39:D5:98:D7:E1:0D:7B:E8:60","sha256":"BF:C2:5C:FE:64:10:A6:61:D1:72:5A:14:5B:51:46:0E:43:55:66:A2:04:75:87:0E:24:59:91:01:14:16:E1:38"}}},"request":{"raw":"GET /img/hf_20260206_141008_617950ba-8080-42dd-9275-e3f568e9a6b6_medium.webp HTTP/1.1\r\nHost: 141model.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://141model.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: language=en; PHPSESSID=ttkjeubnagdkt7fgfg08fng9v0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 18:12:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 53088\r\nlast-modified: Sat, 07 Feb 2026 14:59:51 GMT\r\netag: \"69875367-cf60\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=th%2B9LOS70YPBpdG8DFh%2F%2BzRZeNKFWYXgoVJDuipzrMWgkE%2FcBhdlA2ndFsKqrCWBR3liBgB9wrOD66UYb0j0eYe0WIfw399eka8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd64b9829802e0d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53088,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"41a66bfec12ec11d9571cb39eb8232e4","sha1":"d03f95820dcdba20c20f3ca0d14dc347632dc6de","sha256":"782c28d22bd2785b1aa8cd63555fbacd551164f88a299237daf22040479b4d33","sha512":"a7dc3a79a47dc3c3d015c1ba482e4ecbaefab5035ce0b84c94787947bb1810de06d2238e3318e53a6c5eaa679fa0a6bdbe8917c7784162d334aca3aea0a253cb","ssdeep":"768:AjEgrp43pmIrEB/WAgn1I2IWCRBAjgU3CB/rQLB9EJYMEgk5ZugsKgolSgtRoKKU:Ajq6tdg15IWkpU1QJDWZuwlSQqU","tlshash":"283302bb1dd9fd091f1b6e82e939078d9fab7e18084e8946604632d514ddba43300fbd","first_seen":"2026-02-12T21:38:42.069627Z","last_seen":"2026-02-13T18:13:05.633467Z","times_seen":2,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/img/hf_20260206_134237_d937fe39-8164-4d7a-bb66-f9263d315dd1_medium.webp","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://141model.com/","date":"2026-02-13T18:12:40.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"141model.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:02:55 GMT","end":"Thu, 07 May 2026 13:01:30 GMT"},"fingerprint":{"sha1":"60:EF:49:61:CD:4D:49:C6:50:88:C6:39:D5:98:D7:E1:0D:7B:E8:60","sha256":"BF:C2:5C:FE:64:10:A6:61:D1:72:5A:14:5B:51:46:0E:43:55:66:A2:04:75:87:0E:24:59:91:01:14:16:E1:38"}}},"request":{"raw":"GET /img/hf_20260206_134237_d937fe39-8164-4d7a-bb66-f9263d315dd1_medium.webp HTTP/1.1\r\nHost: 141model.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://141model.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: language=en; PHPSESSID=ttkjeubnagdkt7fgfg08fng9v0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 18:12:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 58672\r\nlast-modified: Sat, 07 Feb 2026 13:05:53 GMT\r\netag: \"698738b1-e530\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K8%2BDY4dwx7rnFtpBdx%2FsU54WCLS8u8%2BXWWXPEw28uVC12oJX10jSEjG2vIR1DG5cO3dATvsoNG%2Fbz1ymEobCg6N3bzoWkeGPHKU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd64b9829822e0d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58672,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1a4cfc6418b696b508707c27a559f415","sha1":"d4b2c1919611b8d1133326979dd9f250c1c6a8c1","sha256":"b43738ca399012ca336de38de6b046030e4b3488d9f204542cc30dde8f700c0b","sha512":"54ac0a195aa5ba01634e2e03d2b9ba7924384d41dd150c5780042fd66027186d0a90292da9b4d56d51b8c697b73abd3c00d71a41bd185eda54f46f699e7f204e","ssdeep":"1536:8DWZs0BLCi5TU8qTXUkR3HhAskJdfB17+tl:8i12i5Y8UX3BHkJtB17+n","tlshash":"054302865efaca049e92cd5b65dce500641f465b3b52203aae0c85e3bb4f14a674eccf","first_seen":"2026-02-12T21:38:42.068706Z","last_seen":"2026-02-13T18:13:05.635145Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2F141model.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1302989031.1771006360\u0026dt=Hong%20Kong%20Models\u0026auid=338559201.1771006360\u0026navt=n\u0026npa=1\u0026gtm=45be62b1v9239805177za200zd9239805177xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104573694~104684208~104684211~115616986~115938465~115938468~116988315~117447491~117455673~117455675~117527104\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-17793616209\u0026tid=AW-17793616209\u0026tft=1771006360383\u0026tfd=886","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://141model.com/","date":"2026-02-13T18:12:40.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:39:05 GMT","end":"Mon, 13 Apr 2026 08:39:04 GMT"},"fingerprint":{"sha1":"AC:37:C7:AF:75:CB:27:69:D4:EC:B6:A6:68:E1:51:4A:A3:99:78:B0","sha256":"63:86:A6:69:FF:ED:40:2B:88:13:6E:3E:4F:01:08:AB:8D:96:19:72:D3:22:DD:14:05:79:8E:5D:58:1F:0D:39"}}},"request":{"raw":"POST /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2F141model.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1302989031.1771006360\u0026dt=Hong%20Kong%20Models\u0026auid=338559201.1771006360\u0026navt=n\u0026npa=1\u0026gtm=45be62b1v9239805177za200zd9239805177xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104573694~104684208~104684211~115616986~115938465~115938468~116988315~117447491~117455673~117455675~117527104\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-17793616209\u0026tid=AW-17793616209\u0026tft=1771006360383\u0026tfd=886 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://141model.com/\r\nOrigin: https://141model.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 18:12:40 GMT\r\npragma: no-cache\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://141model.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T15:34:22.145557Z","times_seen":16243359,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":63,"dns":0,"connect":7,"send":0,"wait":17,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/favicon.ico","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://141model.com/","date":"2026-02-13T18:12:40.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"141model.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:02:55 GMT","end":"Thu, 07 May 2026 13:01:30 GMT"},"fingerprint":{"sha1":"60:EF:49:61:CD:4D:49:C6:50:88:C6:39:D5:98:D7:E1:0D:7B:E8:60","sha256":"BF:C2:5C:FE:64:10:A6:61:D1:72:5A:14:5B:51:46:0E:43:55:66:A2:04:75:87:0E:24:59:91:01:14:16:E1:38"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 141model.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://141model.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: language=en; PHPSESSID=ttkjeubnagdkt7fgfg08fng9v0; _gcl_au=1.1.338559201.1771006360; _pk_id.4.388c=67e029ca7cf94738.1771006360.; _pk_ses.4.388c=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 18:12:40 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 15 Jan 2026 10:48:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6968c606-3aee\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wRCETRcmp6zOuITkxytx0iuYGzFmDKXRSJCVIv2xo8QrBnFn8sYpB4AlXQ%2B9VD%2FKAO65XOHvkergybnEZrq4EyNcjNQt4b1hSYY%3D\"}]}\r\ncf-ray: 9cd64b99f9a52e0d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"5b925e7c1bd2d7f677c768d44c7c97ce","sha1":"2162062d8c02abbc5a6dc9412dbfa1a5873a0e70","sha256":"b6ee29e31bd2aff9afbf78ab268ad845eb517e27e60a0db1292625ddbe9f897d","sha512":"ef0ef9e02a538c4ebdbf74ab9087ecd9d741d8b7f010fc16fb00ddaf7577222a3bb0dd8700300c56c323e7c122a58e2ddf22a4e9d6aa1cfd62ae4d7c2adeabab","ssdeep":"192:j97WLncbl36AU/GpHW/e7qigrlEY9VOZpQIlqpJ:j97mcZ36AcGhWeY9cMIu","tlshash":"a9622f1274f392edcbc14af4fe89eaca44cdef911c124db462a837cd5ab591cc1c6869","first_seen":"2026-02-12T21:38:42.064182Z","last_seen":"2026-02-13T18:13:05.63657Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/default/assets/css/front/main.css","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://141model.com/","date":"2026-02-13T18:12:39.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"141model.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:02:55 GMT","end":"Thu, 07 May 2026 13:01:30 GMT"},"fingerprint":{"sha1":"60:EF:49:61:CD:4D:49:C6:50:88:C6:39:D5:98:D7:E1:0D:7B:E8:60","sha256":"BF:C2:5C:FE:64:10:A6:61:D1:72:5A:14:5B:51:46:0E:43:55:66:A2:04:75:87:0E:24:59:91:01:14:16:E1:38"}}},"request":{"raw":"GET /default/assets/css/front/main.css HTTP/1.1\r\nHost: 141model.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://141model.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: language=en; PHPSESSID=ttkjeubnagdkt7fgfg08fng9v0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 18:12:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 13:47:46 GMT\r\netag: W/\"6985f102-113c8\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bgGOINBxQ2AjrN2QrR3njDir6oXiV8%2FkbMLvXDlCK97uYbg3B%2BMZaWP777rV%2BBVBL7lqXShq%2BYvWoXretKVfkXjoTjOL%2F532SF0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd64b95994d2e0d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70600,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (325)","md5":"cc2dfd0532fa26db7261576aab948e81","sha1":"e536e72ad25d39a075b28f23eed6341644854b76","sha256":"8164fc16c81aa1c592070673da59d7ac261d0d9170a0db0fed777e2d9b812753","sha512":"4ac8403b5f5635935794eea60545a9ebcfbaa9fe941db4795f6998f0fc82ee694523b1831a6a3d3fbfc503e090ecbfbf2c9c0245af6a62cd141101a783ea1edb","ssdeep":"1536:uQ7OcKNzRL1HbYgMT3npQREyU+H3RoilyARn2JbYoSZzH3/R0J9Y7IABw2+u+dVB:q1R2","tlshash":"3e63635153209278b97bb74c77cad75cb328b022dd0569fcaae51008c7cd3fc6a6aa5c","first_seen":"2026-02-12T21:38:42.067166Z","last_seen":"2026-02-13T18:13:05.638018Z","times_seen":2,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/default/assets/js/front/main.js","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://141model.com/","date":"2026-02-13T18:12:39.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"141model.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:02:55 GMT","end":"Thu, 07 May 2026 13:01:30 GMT"},"fingerprint":{"sha1":"60:EF:49:61:CD:4D:49:C6:50:88:C6:39:D5:98:D7:E1:0D:7B:E8:60","sha256":"BF:C2:5C:FE:64:10:A6:61:D1:72:5A:14:5B:51:46:0E:43:55:66:A2:04:75:87:0E:24:59:91:01:14:16:E1:38"}}},"request":{"raw":"GET /default/assets/js/front/main.js HTTP/1.1\r\nHost: 141model.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://141model.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: language=en; PHPSESSID=ttkjeubnagdkt7fgfg08fng9v0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 18:12:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 05 Feb 2026 09:32:01 GMT\r\netag: \"69846391-411c\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hPPpNsgla8bgoI7QtdOI809nwRY%2BTWm4OcYtnBMq82%2FRjldqVhrlRhZyTQjxVAgPsG909v3sQ5Tof4Vms%2BUMKho8eQzJ1JdCzmo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd64b95994f2e0d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16668,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"fa857036fc48291053f3e6f97c55f188","sha1":"7950d35f050fda718778101e1c3d69cc7943378c","sha256":"423cb37767dff6e2e1d53b4b275dad32f43d6a055bd95771a89ae9d92740354a","sha512":"28134f87892cf7b6c9588d5ce2e596e96512c0e9ed1938e4f0cb872a3a1453746110fff7e6e2618ef9aac98eed6c21fc0978bed3d682dd45668500a72add2f8f","ssdeep":"384:yyd1aXkIg8NKVxRAs3VR4z8KDZujmUG7tp5Ww3YV:fcUfge0DZujmUGa","tlshash":"a772532a9abb2136826761bedb9fa2163716101b2305cd183e3dc74c2f81b7196f16f5","first_seen":"2026-02-12T21:38:42.05809Z","last_seen":"2026-02-13T18:13:05.63924Z","times_seen":2,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/img/photo_2_2026-02-07_17-13-33_medium.webp","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://141model.com/","date":"2026-02-13T18:12:40.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"141model.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:02:55 GMT","end":"Thu, 07 May 2026 13:01:30 GMT"},"fingerprint":{"sha1":"60:EF:49:61:CD:4D:49:C6:50:88:C6:39:D5:98:D7:E1:0D:7B:E8:60","sha256":"BF:C2:5C:FE:64:10:A6:61:D1:72:5A:14:5B:51:46:0E:43:55:66:A2:04:75:87:0E:24:59:91:01:14:16:E1:38"}}},"request":{"raw":"GET /img/photo_2_2026-02-07_17-13-33_medium.webp HTTP/1.1\r\nHost: 141model.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://141model.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: language=en; PHPSESSID=ttkjeubnagdkt7fgfg08fng9v0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 18:12:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21198\r\nlast-modified: Sat, 07 Feb 2026 15:16:23 GMT\r\netag: \"69875747-52ce\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NwFy%2FOIOa%2FrBj73kwf2VlA5jO1NprtbHJqjayvZd%2B2PlXi4bu7pog698AQp6nL9hDgcuVuBAwZkvBRMXBTUrX%2BcSuZ4DGt2v%2BBE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd64b98297e2e0d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21198,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ee3060e70d7f1ce22ee1e8a2e4ec0a9c","sha1":"35ede6a70b65a9012d6643bfdee5b2f35d550df3","sha256":"3c5515994d1947e3703f6adb511ba85494ea64cc9b72a3873143eee258c07896","sha512":"90bb10a8268a33a0cf6d5db7bc7715b544aa9e2980694e4d3c61b66005d7129df1cb10b9a5cc7d55372388ae4c1d2364dc8d47c8f849cd8cdb93f1ed7c87e38f","ssdeep":"384:L+DxZE0qqQot4dtiJEtEHxAspXK0JyYlanLFGzimWxNdj1wG9VFJ:exoY4dtilHdXKtnL4OPNdB1nFJ","tlshash":"8992d1550fc7c4abd8a6f680eb6ddd031e9ca5260e0429d3671d0ef64700774ba8d7a5","first_seen":"2026-02-12T21:38:42.064983Z","last_seen":"2026-02-13T18:13:05.641256Z","times_seen":2,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/img/photo_2_2026-02-03_13-41-04_medium.webp","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://141model.com/","date":"2026-02-13T18:12:40.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"141model.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:02:55 GMT","end":"Thu, 07 May 2026 13:01:30 GMT"},"fingerprint":{"sha1":"60:EF:49:61:CD:4D:49:C6:50:88:C6:39:D5:98:D7:E1:0D:7B:E8:60","sha256":"BF:C2:5C:FE:64:10:A6:61:D1:72:5A:14:5B:51:46:0E:43:55:66:A2:04:75:87:0E:24:59:91:01:14:16:E1:38"}}},"request":{"raw":"GET /img/photo_2_2026-02-03_13-41-04_medium.webp HTTP/1.1\r\nHost: 141model.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://141model.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: language=en; PHPSESSID=ttkjeubnagdkt7fgfg08fng9v0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 18:12:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39630\r\nlast-modified: Sat, 07 Feb 2026 14:42:51 GMT\r\netag: \"69874f6b-9ace\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qDm0XYXccrTV4vleLlawatOXFHauSHh1pKnMmqI%2BsvVQsuZvvo9GV19keeXwOhPp9cEBhUzxKuEYO5GM3qh7%2Ffiwqts%2BEkru88w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd64b9829812e0d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39630,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x1152, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"76d13cac1cd528c9eed16db34267149f","sha1":"f2e5d9a5a069701db0b87c6ccea80ec5e20e586e","sha256":"b1e560a798ad27038da250103c335bdf2a2aba57e7dcc664ee5195d050a54ee9","sha512":"da51857449b148894d562de0c19501055c5de8335de76e657ae884feffb9eb8adaa6d2cd7db6b997d962a3a41d8712614f90e9e10f93231befcf2ccaa42a05d9","ssdeep":"768:oyzLFq01I6RK+LBiIwBXcuxRCW8v1hjP5LyJv5dqxaIXYDbnXyqQ8GC:oydI6RKiEIKXcmcWE12JhnYYHCqQO","tlshash":"a603f1ea98a5ab7e36ddeb6cc85ef461ab39b73b2850426155cfc43f525b06c0bf0400","first_seen":"2026-02-12T21:38:42.073999Z","last_seen":"2026-02-13T18:13:05.642617Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/img/escort-moni-dubai-al-barsha-resplendent_medium.webp","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://141model.com/","date":"2026-02-13T18:12:40.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"141model.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:02:55 GMT","end":"Thu, 07 May 2026 13:01:30 GMT"},"fingerprint":{"sha1":"60:EF:49:61:CD:4D:49:C6:50:88:C6:39:D5:98:D7:E1:0D:7B:E8:60","sha256":"BF:C2:5C:FE:64:10:A6:61:D1:72:5A:14:5B:51:46:0E:43:55:66:A2:04:75:87:0E:24:59:91:01:14:16:E1:38"}}},"request":{"raw":"GET /img/escort-moni-dubai-al-barsha-resplendent_medium.webp HTTP/1.1\r\nHost: 141model.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://141model.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: language=en; PHPSESSID=ttkjeubnagdkt7fgfg08fng9v0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 18:12:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42112\r\nlast-modified: Thu, 15 Jan 2026 10:48:43 GMT\r\netag: \"6968c60b-a480\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BMmj1FhBh5uSIpCgHT9FHzlolU0nWnJ0Sj8yFFqY18IURifPW2I67kpGnF06Q5CQbhvXXqGk0EktgszR4RpmSEVRv4svzwB4%2BEQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd64b9829832e0d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42112,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x1152, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8907e2df824e6afeb0a9d9234d04a68e","sha1":"1e48b6713f5dff422b5542db88ea78cb2ba2433b","sha256":"5ae17b437fc827c4acfc95074e6f812a246e7aa10968c98c0374ad2f5d7d9f39","sha512":"485847238068e24faa0d30f3d57c861e352190dffa4fd026771fe37ea451bfd1bdf19a40a958f72199dd40a2a747a69624417c9e340e167b938b6cb5fdde1d3f","ssdeep":"768:0MffTTZOcH21yBbOCzJRcdFRDWI9wemzIGK+7fn4LvybHIxN53m7yu5N:0MjdOcH21yQQJRq24FmzDf4eTIxNpGP","tlshash":"771302dfe4b9b9280183c8c06b85368b945c51fd1bd5845c68d2ec8bd9cbd2a83c4ced","first_seen":"2026-02-12T21:38:42.060783Z","last_seen":"2026-02-13T18:13:05.643903Z","times_seen":2,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/img/beautiful-escort-aishe-dubai-jbr-enchanting_medium.webp","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://141model.com/","date":"2026-02-13T18:12:40.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"141model.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:02:55 GMT","end":"Thu, 07 May 2026 13:01:30 GMT"},"fingerprint":{"sha1":"60:EF:49:61:CD:4D:49:C6:50:88:C6:39:D5:98:D7:E1:0D:7B:E8:60","sha256":"BF:C2:5C:FE:64:10:A6:61:D1:72:5A:14:5B:51:46:0E:43:55:66:A2:04:75:87:0E:24:59:91:01:14:16:E1:38"}}},"request":{"raw":"GET /img/beautiful-escort-aishe-dubai-jbr-enchanting_medium.webp HTTP/1.1\r\nHost: 141model.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://141model.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: language=en; PHPSESSID=ttkjeubnagdkt7fgfg08fng9v0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 18:12:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 48046\r\nlast-modified: Thu, 15 Jan 2026 10:48:41 GMT\r\netag: \"6968c609-bbae\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TlxxAfcpZTMpkAxc%2FOJi0riW8XEVHrpi09TY8THgVaLbS3xr015nPk86MloKNBUF4r4uU4%2BaBPrloM3EE7woNodrie5aWC8r%2Fu4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd64b9829852e0d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48046,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x1152, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"358dabc71981cc08e742db2730416799","sha1":"d8f89ebad67cd7bc9e6aa7c63d55392edc5d24b4","sha256":"12bcfc8f546e938681b2829e45903c9055bc7fa4b0999102506ff04035d6fe72","sha512":"6e6de2a9a24872b92631e9ecbd79a046dece57b4a5bc3444d12c08b00e7604bcf37e5bf30d53b3b560f1e9ad5a9343f072e00f2c46b1c73b75e42dd4ec791c25","ssdeep":"768:PQ7ItznWvoK0eqvC7dGPdEcNvgNQ4VZD+xVyOh21hL/HuNtRxbu0:Pkra9t2m2aHs1hL/HUtnbb","tlshash":"002302d72a3672d415f268c62f476b5f0e66d1c714880e9149dab1bea3aa33035e182d","first_seen":"2026-02-12T21:38:42.075083Z","last_seen":"2026-02-13T18:13:05.64511Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/img/erotic-escort-alejandra-dubai-marina-stylish_medium.webp","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://141model.com/","date":"2026-02-13T18:12:40.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"141model.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:02:55 GMT","end":"Thu, 07 May 2026 13:01:30 GMT"},"fingerprint":{"sha1":"60:EF:49:61:CD:4D:49:C6:50:88:C6:39:D5:98:D7:E1:0D:7B:E8:60","sha256":"BF:C2:5C:FE:64:10:A6:61:D1:72:5A:14:5B:51:46:0E:43:55:66:A2:04:75:87:0E:24:59:91:01:14:16:E1:38"}}},"request":{"raw":"GET /img/erotic-escort-alejandra-dubai-marina-stylish_medium.webp HTTP/1.1\r\nHost: 141model.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://141model.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: language=en; PHPSESSID=ttkjeubnagdkt7fgfg08fng9v0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 18:12:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 214280\r\nlast-modified: Thu, 15 Jan 2026 10:48:41 GMT\r\netag: \"6968c609-34508\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CwE3DhBod2yKozmMxCBwaT8b7RD2ZeJQ432mgTdaN%2FUjUMVYDU6xljtdXIC9dpm2H6mY5houONUHZpRa%2BKBT4TNyRmKNcIWACek%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd64b9829842e0d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214280,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x1152, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"793aeb4d218eaafe7b2cae42e5401dce","sha1":"ae0ce6b413c1a9ce9623f7955da59f774f78e839","sha256":"b43cdfac07ac1ab12fd5b2d42e81373c605fc4ab77a44ebb6dec36458f0a8486","sha512":"0dab25efeb5ae79a7276ca40c47cee7734f944dfa960c26395447d1dd5030ca22d14a592b47003f960d6c6204b1424e24027d067429579a457407b251ca66228","ssdeep":"3072:X+wtTGY1i1fKzhg7GD7FK5AmkY3e8dpo1kpVUq55tgpgmGEEJ8o6VtoHw:OwtTGktFDxK6mkYu80+d5tgamE6Vtkw","tlshash":"a02423b8e99af03edcad595b6f4cc5c652078c3176155a9bcc82f8a4f8e186f34212dc","first_seen":"2026-02-12T21:38:42.063382Z","last_seen":"2026-02-13T18:13:05.646265Z","times_seen":2,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17793616209","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://141model.com/","date":"2026-02-13T18:12:39.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?id=AW-17793616209 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://141model.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 13 Feb 2026 18:12:40 GMT\r\nexpires: Fri, 13 Feb 2026 18:12:40 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 136161\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":401189,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"457d3486eaa3f0b3ac11c16e729bf808","sha1":"155376b0fed1c3f44271083bca680e95d2e24da8","sha256":"b5b7b942b10b5e011d819c6f4ad5f6e029fc3d0a2f0fb55902398fab64ba4508","sha512":"a96fe96f74755ed55e4e85251cb519123d02f6427e652626b5f4c981c8ffa5793548ffabb5a654f493f722d2e146427e23c1a93fd08a251df53bc2173e283025","ssdeep":"6144:ajNMmuYVpw8UENXaP8gM7SgP14j9Vk74Bqq471:ijuYVkmKP8So4BD2","tlshash":"a68419dd73d674225393a478403f018ba57b68a2f48cc899f18acce42d74a9a4277f7d","first_seen":"2026-02-13T18:13:05.647502Z","last_seen":"2026-02-13T18:13:05.647502Z","times_seen":1,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":88,"dns":0,"connect":7,"send":0,"wait":35,"receive":29,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"141model.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"141model.com","domain":"141model.com","tld":"com"},"ip":{"addr":"172.67.185.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://141model.com/","date":"2026-02-13T18:12:39.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"141model.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:02:55 GMT","end":"Thu, 07 May 2026 13:01:30 GMT"},"fingerprint":{"sha1":"60:EF:49:61:CD:4D:49:C6:50:88:C6:39:D5:98:D7:E1:0D:7B:E8:60","sha256":"BF:C2:5C:FE:64:10:A6:61:D1:72:5A:14:5B:51:46:0E:43:55:66:A2:04:75:87:0E:24:59:91:01:14:16:E1:38"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: 141model.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://141model.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: language=en; PHPSESSID=ttkjeubnagdkt7fgfg08fng9v0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Fri, 13 Feb 2026 19:00:39 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hSPPaDoqX6yurTGFnQ0BbJCLchsBb6xK%2BI98YS6fehPpas1Ay7fUVL5afHW4tDTBMYKnBH64SMo7M3sw3SMQ3M867EqC6iMhBOQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 18:12:39 GMT\r\ncf-ray: 9cd64b95994e2e0d-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T15:29:30.901899Z","times_seen":364010,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"141model.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}