{"report_id":"04d8a112-1ff1-424d-a3cb-8ccec4edd588","version":6,"status":"done","tags":[],"date":"2025-12-30T20:58:15Z","url":{"schema":"http","addr":"undress.nubeeai.xyz/","fqdn":"undress.nubeeai.xyz","domain":"nubeeai.xyz","tld":"xyz"},"ip":{"addr":"172.67.175.164","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"undress.nubeeai.xyz/","fqdn":"undress.nubeeai.xyz","domain":"nubeeai.xyz","tld":"xyz"},"title":"Undress | Nubeeai","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"undress.nubeeai.xyz/","fqdn":"undress.nubeeai.xyz","domain":"nubeeai.xyz","tld":"xyz"},"ip":{"addr":"172.67.175.164","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-03T20:58:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-12-30","alert":"Detects file containing Telegram Bot API","trigger":"undress.nubeeai.xyz/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"undress.nubeeai.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"tenddesigner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"tenddesigner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"tenddesigner.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.blogger.com","ip":{"addr":"142.250.74.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1999-06-22","domain_rank":9514,"first_seen":"2012-05-22T07:35:03Z","last_seen":"2025-12-29T02:32:26.604307Z","alert_count":0,"request_count":1,"received_data":148723,"sent_data":446,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nubee.ai","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-05-15","domain_rank":0,"first_seen":"2023-05-19T20:35:47Z","last_seen":"2025-09-15T04:45:10.78974Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":521,"comment":"","tags":null,"fingerprints":null},{"fqdn":"raw.githubusercontent.com","ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":22021,"first_seen":"2014-03-01T07:08:08Z","last_seen":"2025-12-29T18:09:08.165483Z","alert_count":0,"request_count":1,"received_data":674182,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-28T22:17:10.032556Z","alert_count":0,"request_count":1,"received_data":3277,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"undress.nubeeai.xyz","ip":{"addr":"172.67.175.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-11-13","domain_rank":0,"first_seen":"2025-09-15T04:45:10.359615Z","last_seen":"2025-10-12T09:30:24.139017Z","alert_count":5,"request_count":4,"received_data":96973,"sent_data":1809,"comment":"","tags":null,"fingerprints":[{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i.ibb.co.com","ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"unknown","domain_rank":469940,"first_seen":"2023-08-10T14:30:45Z","last_seen":"2025-12-27T21:52:19.554563Z","alert_count":0,"request_count":7,"received_data":730305,"sent_data":3143,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tenddesigner.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":3,"request_count":1,"received_data":0,"sent_data":453,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"undress.nubeeai.xyz/","fqdn":"undress.nubeeai.xyz","domain":"nubeeai.xyz","tld":"xyz"},"ip":{"addr":"172.67.175.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"38ee2f6ddbe8a478e5795030e72ba35d","sha1":"d332319b04b273e3b9a93ffa22ba9036d59b8e99","sha256":"97d98978d5864e77cd83bd79a0d31ced40631a6134a154e8f049bcc20f49a319","sha512":"15610a3ce0ff69817776e355c350aebc006a7744a941c1258fe16a2e73445d964fd94885bd4b50bb2e9ea773a5f95bf1aa124fd90a3252ab2769d2870e5fbb95","ssdeep":"","tlshash":"20d02ef7f4d5ac218809a3200865e9083032e6feb3a08de094c0063a488a8ba9306fa0","size":275,"data":"","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-04-04T12:41:59.134499Z","times_seen":96705,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"undress.nubeeai.xyz/","fqdn":"undress.nubeeai.xyz","domain":"nubeeai.xyz","tld":"xyz"},"ip":{"addr":"172.67.175.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-30T20:57:51.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nubeeai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:26:21 GMT","end":"Fri, 20 Mar 2026 06:23:30 GMT"},"fingerprint":{"sha1":"E4:D3:AF:40:DC:BF:B2:5D:BB:61:FE:58:1F:E5:15:CF:93:1E:AD:24","sha256":"D2:13:09:D9:66:DC:8B:48:C3:3F:51:3C:D9:A6:B9:55:10:47:5C:61:E4:8C:CF:43:3F:94:1E:8E:98:7E:7E:F8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: undress.nubeeai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 20:57:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Tue, 30 Dec 2025 20:57:51 GMT\r\ncache-control: private, max-age=0\r\nlast-modified: Tue, 11 Nov 2025 00:07:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lCUlv2FHOPCI3FtgERBKauYskhE6kiQ6KkXOu1yHhFKvD1E%2BRmrHQHfvtPPykXjdON68psTdGtMZ1GACQ1PYf0GhjKknoex68Ci3Op%2BsrMSi\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9b6473af38700afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67779,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (35943)","md5":"7dd0b8500a2ef46df7709871d49c839b","sha1":"3c551f63c1784760a766f546c216bd6a8d8c14a7","sha256":"2fc31c2974cb936107b8b676dd3e03714be2468e90b37a9fcc61c49b56bd1ac4","sha512":"8b808eaabb2974c16a1dad2477f6b086f888f2338cd1370c64beb1b6cd993f42474167068357ae1c0f625c58583fc384d07e989639259ab042e9f32abc781db7","ssdeep":"1536:lkhi6FetMd0MISFNnVjsAwLBnl/dYoPSC+3lB7Grt9t:l0UvFW7Gx9t","tlshash":"6963b7b32980121723435aee747fefd8d01e958efd85a55cf7682c6082cdaa1e5e17b0","first_seen":"2025-12-30T20:58:20.215338Z","last_seen":"2025-12-30T20:58:20.215338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":81,"dns":56,"connect":1,"send":0,"wait":333,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-12-30","alert":"Detects file containing Telegram Bot API","trigger":"undress.nubeeai.xyz/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"undress.nubeeai.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co.com/LJx7VZY/1000108730.webp","fqdn":"i.ibb.co.com","domain":"ibb.co.com","tld":"co.com"},"ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://undress.nubeeai.xyz/","date":"2025-12-30T20:57:51.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 07:17:47 GMT","end":"Mon, 16 Mar 2026 07:17:46 GMT"},"fingerprint":{"sha1":"DD:3D:A5:50:70:7F:39:42:46:31:C9:98:9F:15:65:82:62:1B:CB:64","sha256":"F9:9D:18:4C:82:20:26:63:14:76:0A:30:CD:96:1F:CE:F9:77:EB:76:34:EC:DF:EE:6E:54:50:88:39:05:C5:C2"}}},"request":{"raw":"GET /LJx7VZY/1000108730.webp HTTP/1.1\r\nHost: i.ibb.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://undress.nubeeai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 20:57:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59722\r\nlast-modified: Tue, 05 Nov 2024 13:21:52 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59722,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2e56ab931e333dfa8b49efd3c3be124b","sha1":"33b59e68aa7960ca20adcb1915e8431a8a4f216c","sha256":"89446c7c00b06b1b63ba25f831069d0fec776ddb6adc5bf732e17ac0200cb992","sha512":"87837c40f2741d0b8abad4a99ff850eeeaf81bea2025ccc206adc2c1affab5ef5518f585f44646eabd36b4bca7ba08f4732f6cd2f80bf1e42b67d007b6af90d1","ssdeep":"1536:Z4nZB5twkMMBP3aplG6a22GqPLW/VtI4U6HP9VOd:Z+ZBwMaY6a7a/VXTa","tlshash":"374301e2df6f60829637f4aa84c692ecf243710564885756246e35be8d4ba61b30c1cd","first_seen":"2025-09-15T04:45:14.664326Z","last_seen":"2025-12-30T20:58:20.217292Z","times_seen":3,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":115,"dns":0,"connect":0,"send":0,"wait":125,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co.com/bR94nH5/1000108731.webp","fqdn":"i.ibb.co.com","domain":"ibb.co.com","tld":"co.com"},"ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://undress.nubeeai.xyz/","date":"2025-12-30T20:57:51.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 07:17:47 GMT","end":"Mon, 16 Mar 2026 07:17:46 GMT"},"fingerprint":{"sha1":"DD:3D:A5:50:70:7F:39:42:46:31:C9:98:9F:15:65:82:62:1B:CB:64","sha256":"F9:9D:18:4C:82:20:26:63:14:76:0A:30:CD:96:1F:CE:F9:77:EB:76:34:EC:DF:EE:6E:54:50:88:39:05:C5:C2"}}},"request":{"raw":"GET /bR94nH5/1000108731.webp HTTP/1.1\r\nHost: i.ibb.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://undress.nubeeai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 20:57:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 86132\r\nlast-modified: Tue, 05 Nov 2024 13:21:53 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86132,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2160x2160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"235c5ed969c6b86859bb14800122cd2c","sha1":"76c104353ecdb291043c762d33665f02e8a2c24f","sha256":"94d4a146aec34bfe1b837f4a2e7697f6243761e60e64b251a355478b74b40191","sha512":"4b99432880e14000f2331362ed0f5fc36cc4b508215553decc9c476b8d43d1abbc9ae7e4bfa9220bfaad33d78abd713cca7aee0627eeaf10628bd077f877ecf7","ssdeep":"1536:rKKvSPrLkprCR9l3EQqmB3sbJ9lkMCITe/Eq/44ACnXW7oedK6NfIReWI:rKhsrCR9l35vB30JfCI61/44TXWOgfIY","tlshash":"c283bf61b2027c1ff50fb6a9433ab8338debd1587039d96024f8f6761253e575c2aea4","first_seen":"2025-09-15T04:45:14.665446Z","last_seen":"2025-12-30T20:58:20.218668Z","times_seen":3,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":128,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co.com/hcC0wTd/1000108732.webp","fqdn":"i.ibb.co.com","domain":"ibb.co.com","tld":"co.com"},"ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://undress.nubeeai.xyz/","date":"2025-12-30T20:57:51.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 07:17:47 GMT","end":"Mon, 16 Mar 2026 07:17:46 GMT"},"fingerprint":{"sha1":"DD:3D:A5:50:70:7F:39:42:46:31:C9:98:9F:15:65:82:62:1B:CB:64","sha256":"F9:9D:18:4C:82:20:26:63:14:76:0A:30:CD:96:1F:CE:F9:77:EB:76:34:EC:DF:EE:6E:54:50:88:39:05:C5:C2"}}},"request":{"raw":"GET /hcC0wTd/1000108732.webp HTTP/1.1\r\nHost: i.ibb.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://undress.nubeeai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 20:57:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 95636\r\nlast-modified: Tue, 05 Nov 2024 13:21:54 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95636,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2160x2160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5ee871f859d548c602c51979aa6b8bf5","sha1":"c43620a83c9ef7177ddae050faebd98327515b4d","sha256":"d7496f79a182a615976bd4b906254a8b6db9a68ec754ccb2f535633898126bbd","sha512":"9d9f06c5ca6c1d9a3cfed57ab95734c535eb86681bb8c734e4999c7bd61cc4a1dc2778fe8e35232e25ee36991d50d757e422dcf0b5985d0a9d9e9c4bb6ae23fb","ssdeep":"1536:V/QnKq1qya1YGKahsNKJmIYYfxRqPL2BLX4N+lLZK5x7NwzK4iGFS:BQnFkyQYU2Kn4N+DK59NwLiGE","tlshash":"7393be3f8b49b02aef216dfd29508ed2c21b0818f76c94c43ac0d43e792595daa75e5b","first_seen":"2025-09-15T04:45:14.657304Z","last_seen":"2025-12-30T20:58:20.220009Z","times_seen":3,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":128,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tenddesigner.com/d0/d2/88/d0d288ee3f2a9468150f01c5470cc042.js","fqdn":"tenddesigner.com","domain":"tenddesigner.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://undress.nubeeai.xyz/","date":"2025-12-30T20:57:51.785Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /d0/d2/88/d0d288ee3f2a9468150f01c5470cc042.js HTTP/1.1\r\nHost: tenddesigner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://undress.nubeeai.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T12:49:17.462299Z","times_seen":13332134,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":255,"connect":299,"send":0,"wait":0,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"tenddesigner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"tenddesigner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"tenddesigner.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/382300504-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.74.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://undress.nubeeai.xyz/","date":"2025-12-30T20:57:51.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:48:49 GMT","end":"Wed, 25 Feb 2026 15:48:48 GMT"},"fingerprint":{"sha1":"F9:7C:27:6C:AA:48:B7:0A:FB:BA:F8:DF:B1:4E:FB:2F:85:8F:B6:55","sha256":"10:CE:32:3D:AF:05:98:EA:B1:1F:4D:0E:30:D6:BB:E4:EB:81:E8:EE:6E:CD:CB:19:A4:9F:41:AB:BD:8A:4D:7C"}}},"request":{"raw":"GET /static/v1/widgets/382300504-widgets.js HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://undress.nubeeai.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 52331\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 29 Dec 2025 01:55:22 GMT\r\nexpires: Tue, 29 Dec 2026 01:55:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 154949\r\nlast-modified: Wed, 17 Dec 2025 23:52:45 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":148005,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4084)","md5":"7708dbfdfbc3c12859cb2d79c0c19a15","sha1":"1e587ae8cc9bf66d1b7ac46003eb0affc5d6fa5b","sha256":"24629b0062cbc10b96c558e1c2620c99c0ffbbf55126420b7c77aa071e553de5","sha512":"f52cd9a4710599d93633784583a014ed11fbb1be8c2ea23edf40063507e818b2257d533eba4f5e986c7941ca6ad87be276d7c771b4ebdd8779b527d0ad857dcd","ssdeep":"1536:WFLo5vRqzJMjGnWQ8nTI/B6QDeanqh2VsGrAGLKm/vTMaglSWk6oocU6xDpGo3/p:mJMjbDQDeCyGrZKYXgSRl3Gwb/JdJ","tlshash":"46e3f9c8b79270628373b4b5003f010ff13ab9aae848896cb588d9e57d749695277f7c","first_seen":"2025-12-16T00:27:42.249419Z","last_seen":"2026-01-07T01:11:48.713345Z","times_seen":13757,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":9,"receive":12,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nubee.ai/assets/Bruh-Regular-BtrGIIvW.woff2","fqdn":"nubee.ai","domain":"nubee.ai","tld":"ai"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://undress.nubeeai.xyz/","date":"2025-12-30T20:57:52.261Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/Bruh-Regular-BtrGIIvW.woff2 HTTP/1.1\r\nHost: nubee.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://undress.nubeeai.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://undress.nubeeai.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T12:49:17.462299Z","times_seen":13332134,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"undress.nubeeai.xyz/favicon.ico","fqdn":"undress.nubeeai.xyz","domain":"nubeeai.xyz","tld":"xyz"},"ip":{"addr":"172.67.175.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://undress.nubeeai.xyz/","date":"2025-12-30T20:57:53.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nubeeai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:26:21 GMT","end":"Fri, 20 Mar 2026 06:23:30 GMT"},"fingerprint":{"sha1":"E4:D3:AF:40:DC:BF:B2:5D:BB:61:FE:58:1F:E5:15:CF:93:1E:AD:24","sha256":"D2:13:09:D9:66:DC:8B:48:C3:3F:51:3C:D9:A6:B9:55:10:47:5C:61:E4:8C:CF:43:3F:94:1E:8E:98:7E:7E:F8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: undress.nubeeai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://undress.nubeeai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/x-icon; charset=UTF-8\r\nexpires: Tue, 30 Dec 2025 20:57:54 GMT\r\ndate: Tue, 30 Dec 2025 20:57:54 GMT\r\ncache-control: private, max-age=86400\r\nlast-modified: Tue, 11 Nov 2025 00:07:50 GMT\r\netag: W/\"1dc8d416f7a08bc0003158f18250018bc8847aef0629b2ccb735b1a9a3c37da4\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2116\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F4pxygGVzq8anHeO2Fxz%2BdtPy1VJN%2Bgy%2F0rcsemkfJiEFfiD5A8fjQ9jfBFHwaNMCQQ1tM1s0KXEyT7G7Qul0ZQAD5Ww1TIH%2BemLquZ5g14v\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\ncf-ray: 9b6473c0280d568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9662,"size_decoded":0,"mime_type":"image/x-icon; charset=UTF-8","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"7af4ac05639d79f59a4f54ad456d0a4e","sha1":"669e5282a936dfd6f7f2fad414a68185cc2ac6b0","sha256":"060e9fa15b65c35c8e151a5d1d4557d6b9229845a335bbfa91c6fda4527e23bb","sha512":"5b484a1f4dfc5fdb2b8455ebf57cb7f7888a7a4da3bd80f2ccf6483eca2e13cd1926d5d90f2e599bbb13fec01017f946cd0ec716ab8e3d192e31c70d2d0912b1","ssdeep":"48:9lPZSHp4+K+mAlNKh9WArup3dneunr3IOChmAjQ2a7BRHMLv/KZws9Xtt2isuvsK:9lRCl1vUxjQHLMLUXEiLGY5","tlshash":"9e12714619caf8a4c54731f71f21e8bf7a18d17a437094924d2bb074ee752e1dd0b139","first_seen":"2024-08-20T13:49:48.755273Z","last_seen":"2025-12-30T20:58:20.222294Z","times_seen":6,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"undress.nubeeai.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co.com/Hq6PZgF/1000108798.webp","fqdn":"i.ibb.co.com","domain":"ibb.co.com","tld":"co.com"},"ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://undress.nubeeai.xyz/","date":"2025-12-30T20:57:51.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 07:17:47 GMT","end":"Mon, 16 Mar 2026 07:17:46 GMT"},"fingerprint":{"sha1":"DD:3D:A5:50:70:7F:39:42:46:31:C9:98:9F:15:65:82:62:1B:CB:64","sha256":"F9:9D:18:4C:82:20:26:63:14:76:0A:30:CD:96:1F:CE:F9:77:EB:76:34:EC:DF:EE:6E:54:50:88:39:05:C5:C2"}}},"request":{"raw":"GET /Hq6PZgF/1000108798.webp HTTP/1.1\r\nHost: i.ibb.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://undress.nubeeai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 20:57:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 58504\r\nlast-modified: Thu, 07 Nov 2024 05:58:33 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58504,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47c689690c36917f2ec183d15fc1411e","sha1":"340dae11f7f0abf418f19c37899eeb0e6c09eae7","sha256":"10946994de12f5678fab2551f505275228a8b8c6aef7e02298040ce82223f249","sha512":"70cef7ff14b7675f799bc5c28614c53d0573f2ba4987825df2369ea98930ed73044930309f585adeb802230dbbd90b0665bb7c070f26f4fcf3dd917abc5cd83e","ssdeep":"1536:6/ZW7UgZ0rjcZ8BwqtxWDYEOu/dtGNAUc5Mq:6/ZcRwrcP1tqc5Mq","tlshash":"2143125da167beb0dc3e72e071b86887155b09f2512e6c4408ee47ad36722aef4240bf","first_seen":"2025-09-15T04:45:14.656005Z","last_seen":"2025-12-30T20:58:20.223451Z","times_seen":3,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":118,"dns":0,"connect":0,"send":0,"wait":54,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co.com/8PHqNx9/1000108733.webp","fqdn":"i.ibb.co.com","domain":"ibb.co.com","tld":"co.com"},"ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://undress.nubeeai.xyz/","date":"2025-12-30T20:57:51.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 07:17:47 GMT","end":"Mon, 16 Mar 2026 07:17:46 GMT"},"fingerprint":{"sha1":"DD:3D:A5:50:70:7F:39:42:46:31:C9:98:9F:15:65:82:62:1B:CB:64","sha256":"F9:9D:18:4C:82:20:26:63:14:76:0A:30:CD:96:1F:CE:F9:77:EB:76:34:EC:DF:EE:6E:54:50:88:39:05:C5:C2"}}},"request":{"raw":"GET /8PHqNx9/1000108733.webp HTTP/1.1\r\nHost: i.ibb.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://undress.nubeeai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 20:57:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 129468\r\nlast-modified: Tue, 05 Nov 2024 13:21:54 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":129468,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2160x2160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ae73d11f40ed981c33bb93203677a89f","sha1":"2404f9f5e3af8fb05349afb3853334e3c3affd35","sha256":"316656e3d8b920be40c254abc4cd49019e9af3a1bb3bb98f89e1b4e523f90da6","sha512":"23d90f94f81573e54bc5729ecf90087e88efb4e91f4894b539656dee16af8167601a34884708eedd5ac8e9b61de07bbcd462b053b22c7b5aee9d597b5e982932","ssdeep":"3072:eiLrVbcGhNZBmf/zz+TkgqWLyM9kMo3q7pbWlHn:eWrW7r6TVDkMo0NWlH","tlshash":"9ac301b26e7861e0dbb1e0348d49eb128ae4ef9b060cf7861f72ccd16e7150dc1599e6","first_seen":"2025-09-15T04:45:14.669416Z","last_seen":"2025-12-30T20:58:20.224532Z","times_seen":3,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":127,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co.com/pJy1WHH/1000108734.webp","fqdn":"i.ibb.co.com","domain":"ibb.co.com","tld":"co.com"},"ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://undress.nubeeai.xyz/","date":"2025-12-30T20:57:51.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 07:17:47 GMT","end":"Mon, 16 Mar 2026 07:17:46 GMT"},"fingerprint":{"sha1":"DD:3D:A5:50:70:7F:39:42:46:31:C9:98:9F:15:65:82:62:1B:CB:64","sha256":"F9:9D:18:4C:82:20:26:63:14:76:0A:30:CD:96:1F:CE:F9:77:EB:76:34:EC:DF:EE:6E:54:50:88:39:05:C5:C2"}}},"request":{"raw":"GET /pJy1WHH/1000108734.webp HTTP/1.1\r\nHost: i.ibb.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://undress.nubeeai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 20:57:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 129528\r\nlast-modified: Tue, 05 Nov 2024 13:21:55 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":129528,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2160x2160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"87ce6610eb727a148e5d939ebc76211e","sha1":"b2f7e3be74c6fc04f9e337fa36827e25c8e18ccb","sha256":"f644513cd67b32c9d7f4434dae0ebcd287ab1800a3b40e6c845a5d4242675ca7","sha512":"f9a3bde427ccb65f33d1d726b37078f577933b8932fdd4d865b2adf633f3c892067c933d1b3a52735b0d484b8b0f31e632d54690ac64326012921dc3e111a9b1","ssdeep":"1536:gZNOAt7Nr24pv1kQ4GAPhQDvgv9YP9bVSZv45NNFfstEcT1+BqY64C4h1D1juUgA:gmAt7NS2kQnqCc6+Eo1+0Y6h48UO/7vQ","tlshash":"afc3f15c6f96227ecfd883719ba726c8d6092dabc1129900af70c795244fc7e39c24bd","first_seen":"2025-09-15T04:45:14.666553Z","last_seen":"2025-12-30T20:58:20.225678Z","times_seen":3,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":110,"dns":53,"connect":24,"send":0,"wait":23,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/Tarikul-Islam-Anik/Telegram-Animated-Emojis/main/Symbols/Check%20Mark%20Button.webp","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://undress.nubeeai.xyz/","date":"2025-12-30T20:57:51.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /Tarikul-Islam-Anik/Telegram-Animated-Emojis/main/Symbols/Check%20Mark%20Button.webp HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://undress.nubeeai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/webp\r\netag: W/\"ab7d5a41b55d1d3526e65bb6df7dce798cb560e550429f6e49b9d337093ea08d\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: DC4D:AE87E:7EC5DB2:905F5C0:6954225A\r\naccept-ranges: bytes\r\ndate: Tue, 30 Dec 2025 20:57:51 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410025-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1767128272.931168,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: eac12c7691d4c562ba39dc356cc52955d747622d\r\nexpires: Tue, 30 Dec 2025 21:02:51 GMT\r\nsource-age: 67\r\ncontent-length: 673306\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":673306,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7940415e1cbb42ab84249bb668f0ad9c","sha1":"d3b76ef424c65a086c9487eb030a1ce089b20f80","sha256":"df32b8fd1bd209882a93f4abf1a991c71570eb811ccfa0dcd1893ffd0fb2b3d3","sha512":"0453fbc45c7f362dc470be3d41196a233e190b993060393c88d2aadda0c88e66cfe7a513fc99cc1dafd70deeca9c961210fccc83d88d8748a203d44c4a5b7caa","ssdeep":"6144:9gAPTBl2XDKxfGV1/0+ODjD5ZAMWukYR9UWsx++Eb+qHGwo8hCYQwuD:9g6wDKx6H+hMukyuWp+VOoesND","tlshash":"ede4232d203450d1d511e0bce1beb6e8867b2d7ef211bb8a3e60f50e2e775c1bd85689","first_seen":"2024-08-20T02:34:09.898369Z","last_seen":"2025-12-30T20:58:20.22716Z","times_seen":4,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":103,"dns":1,"connect":13,"send":0,"wait":15,"receive":72,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"undress.nubeeai.xyz/favicon.ico","fqdn":"undress.nubeeai.xyz","domain":"nubeeai.xyz","tld":"xyz"},"ip":{"addr":"172.67.175.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://undress.nubeeai.xyz/","date":"2025-12-30T20:57:53.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nubeeai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:26:21 GMT","end":"Fri, 20 Mar 2026 06:23:30 GMT"},"fingerprint":{"sha1":"E4:D3:AF:40:DC:BF:B2:5D:BB:61:FE:58:1F:E5:15:CF:93:1E:AD:24","sha256":"D2:13:09:D9:66:DC:8B:48:C3:3F:51:3C:D9:A6:B9:55:10:47:5C:61:E4:8C:CF:43:3F:94:1E:8E:98:7E:7E:F8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: undress.nubeeai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://undress.nubeeai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/x-icon\r\nexpires: Tue, 30 Dec 2025 20:57:54 GMT\r\ndate: Tue, 30 Dec 2025 20:57:54 GMT\r\ncache-control: private, max-age=86400\r\nlast-modified: Tue, 11 Nov 2025 00:07:50 GMT\r\netag: W/\"1dc8d416f7a08bc0003158f18250018bc8847aef0629b2ccb735b1a9a3c37da4\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self'\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2116\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ly03YUYWlEeTpSDiEK%2Bfr%2FbpCaB2oyl3BAGFUdO37dpLqVlVI5vCSxLrn6Rfzqb8lHF%2BCS0Ydc8FR4jrBEnQWc%2FZqrlpmohMQXVx%2BKDvvrEf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\ncf-ray: 9b6473c0280e568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"7af4ac05639d79f59a4f54ad456d0a4e","sha1":"669e5282a936dfd6f7f2fad414a68185cc2ac6b0","sha256":"060e9fa15b65c35c8e151a5d1d4557d6b9229845a335bbfa91c6fda4527e23bb","sha512":"5b484a1f4dfc5fdb2b8455ebf57cb7f7888a7a4da3bd80f2ccf6483eca2e13cd1926d5d90f2e599bbb13fec01017f946cd0ec716ab8e3d192e31c70d2d0912b1","ssdeep":"48:9lPZSHp4+K+mAlNKh9WArup3dneunr3IOChmAjQ2a7BRHMLv/KZws9Xtt2isuvsK:9lRCl1vUxjQHLMLUXEiLGY5","tlshash":"9e12714619caf8a4c54731f71f21e8bf7a18d17a437094924d2bb074ee752e1dd0b139","first_seen":"2024-08-20T13:49:48.755273Z","last_seen":"2025-12-30T20:58:20.222294Z","times_seen":6,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"undress.nubeeai.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co.com/7zK9F4Y/1000108735.webp","fqdn":"i.ibb.co.com","domain":"ibb.co.com","tld":"co.com"},"ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://undress.nubeeai.xyz/","date":"2025-12-30T20:57:51.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 07:17:47 GMT","end":"Mon, 16 Mar 2026 07:17:46 GMT"},"fingerprint":{"sha1":"DD:3D:A5:50:70:7F:39:42:46:31:C9:98:9F:15:65:82:62:1B:CB:64","sha256":"F9:9D:18:4C:82:20:26:63:14:76:0A:30:CD:96:1F:CE:F9:77:EB:76:34:EC:DF:EE:6E:54:50:88:39:05:C5:C2"}}},"request":{"raw":"GET /7zK9F4Y/1000108735.webp HTTP/1.1\r\nHost: i.ibb.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://undress.nubeeai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 30 Dec 2025 20:57:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 168764\r\nlast-modified: Tue, 05 Nov 2024 13:21:55 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":168764,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2160x2160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ab01e7374b204478f013fcb8b63a4667","sha1":"c74149f8578c6159fc70784c47b6d660e1ffa4da","sha256":"4c344fa278fd39915a901d3c790e530e4be2be4824c850f976c5132b0827f599","sha512":"875c7ea87323fce303ed7b7b4dcea8b6566ff529c192dea5b3fd4334a8ee9b2a9a112d868070a8af3b68305461a0d1e6e386bb3fc7891eb1c41f56f76cda31ab","ssdeep":"3072:ocLX0L3BpohE+nLhdQ6aavb7wKqqQigyT9E6KdH6xoXk0:ocLX0L3Bpoi+nLh1vPrQypE8xw","tlshash":"def31292ca9073d4dcb37c77c1c71768556b636ee7843949ec2d82ce4a52d0e8c9cb8a","first_seen":"2025-09-15T04:45:14.658616Z","last_seen":"2025-12-30T20:58:20.228199Z","times_seen":3,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":106,"dns":0,"connect":0,"send":0,"wait":54,"receive":269,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?display=swap\u0026family=Inter","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://undress.nubeeai.xyz/","date":"2025-12-30T20:57:51.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?display=swap\u0026family=Inter HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://undress.nubeeai.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 30 Dec 2025 20:57:51 GMT\r\ndate: Tue, 30 Dec 2025 20:57:51 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2591,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9d33c368b1953007af7f8e1e764b9afa","sha1":"b223227038aec4d016f8a661c5dc6f384321897f","sha256":"30086b4121cb5ce7d7c0e67ee103f0766c19e4cd006eb223972aaa1a17d8b2b6","sha512":"9d077158ce61acd90abe6bf5b6e2b6456e9427a31dcc303d049d94994216a62951cb03ac6620fc9cae76b8284842f05594a33994120d2b5858e0c9b4bb81c4f2","ssdeep":"","tlshash":"5451bfd2002b9500da471dc623cf3f35aede22842085d5b95ffe0dc5acdad268369b8e","first_seen":"2025-09-10T19:52:18.465821Z","last_seen":"2026-04-04T12:49:46.620289Z","times_seen":1699,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":86,"dns":1,"connect":22,"send":0,"wait":30,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"undress.nubeeai.xyz/js/cookienotice.js","fqdn":"undress.nubeeai.xyz","domain":"nubeeai.xyz","tld":"xyz"},"ip":{"addr":"172.67.175.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://undress.nubeeai.xyz/","date":"2025-12-30T20:57:51.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nubeeai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:26:21 GMT","end":"Fri, 20 Mar 2026 06:23:30 GMT"},"fingerprint":{"sha1":"E4:D3:AF:40:DC:BF:B2:5D:BB:61:FE:58:1F:E5:15:CF:93:1E:AD:24","sha256":"D2:13:09:D9:66:DC:8B:48:C3:3F:51:3C:D9:A6:B9:55:10:47:5C:61:E4:8C:CF:43:3F:94:1E:8E:98:7E:7E:F8"}}},"request":{"raw":"GET /js/cookienotice.js HTTP/1.1\r\nHost: undress.nubeeai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://undress.nubeeai.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2026\r\ndate: Tue, 30 Dec 2025 20:57:51 GMT\r\nexpires: Tue, 06 Jan 2026 20:57:51 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 30 Dec 2025 15:49:28 GMT\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nx-xss-protection: 0\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: 9b6473b28f87568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6513,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-04-04T12:41:59.095343Z","times_seen":109174,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"undress.nubeeai.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}