{"report_id":"0e86f799-aed3-40d2-ba9e-bb9403b74599","version":6,"status":"done","tags":[],"date":"2026-01-07T21:34:20Z","url":{"schema":"http","addr":"ohsexylist.top/feeder_in.php?feeder=makexxx.com\u0026sid=741187","fqdn":"ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"162.120.71.2","port":0,"asn":62240,"as":"Clouvider Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"ohsexylist.top/","fqdn":"ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"title":"OhSexyList - Best collection of amazing porn videos","dom":{"size":44,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"73956d6ebea072659493bd6a2b58c593","sha1":"729b2f4da55d3b13b793a00fa20bc8ec10c63ed0","sha256":"7b8dc4dc541347fb74e4933dd718adb981e124bae2cded37d903791df90aafb3","sha512":"bac2a7efaaf047493b9f0d095fc259a63b44c9b6312684b01b99d709920138f7cb268a4513a6f10444c3ec14bf1f2347005dd95b00939fc1cc259a0a0dc7b4a6","ssdeep":"","tlshash":"109004fdd4d1100d5c7035d00cc113d10c14437430114f00ddc1747cd405115dc031d4","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ohsexylist.top/feeder_in.php?feeder=makexxx.com\u0026sid=741187","fqdn":"ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"162.120.71.2","port":0,"asn":62240,"as":"Clouvider Limited","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-11T21:34:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-07T21:34:00Z","timestamp":1767821640,"ip_dst":{"addr":"162.159.207.0","port":3478,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":56456,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2026-01-07T21:34:00.237888+0000\",\"flow_id\":1163020525412672,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.27\",\"src_port\":56456,\"dest_ip\":\"162.159.207.0\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2026-01-07T21:34:00.237888+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-07T21:34:00Z","timestamp":1767821640,"ip_dst":{"addr":"Client IP","port":56456,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"162.159.207.0","port":3478,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2026-01-07T21:34:00.238539+0000\",\"flow_id\":1163020525412672,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"162.159.207.0\",\"src_port\":3478,\"dest_ip\":\"172.18.0.27\",\"dest_port\":56456,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":74,\"start\":\"2026-01-07T21:34:00.237888+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"7je7m5wphnod.n4.adsco.re","ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2026-01-07T21:34:21.215439Z","last_seen":"2026-01-07T21:34:21.215439Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":440,"comment":"","tags":null,"fingerprints":null},{"fqdn":"7je7m5wphnod.l4.adsco.re","ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2026-01-07T21:34:21.201579Z","last_seen":"2026-01-07T21:34:21.201579Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":440,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn4ads.com","ip":{"addr":"216.59.63.128","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2020-04-18","domain_rank":44268,"first_seen":"2020-04-19T20:21:04Z","last_seen":"2026-01-05T18:15:32.882373Z","alert_count":0,"request_count":1,"received_data":257,"sent_data":1742,"comment":"","tags":null,"fingerprints":null},{"fqdn":"6.adsco.re","ip":{"addr":"104.16.83.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":91627,"first_seen":"2018-01-15T04:15:29Z","last_seen":"2026-01-02T15:58:02.609061Z","alert_count":0,"request_count":2,"received_data":1185,"sent_data":857,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.cdn4ads.com","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2020-04-18","domain_rank":441594,"first_seen":"2020-04-19T20:21:04Z","last_seen":"2026-01-05T18:15:32.948506Z","alert_count":0,"request_count":1,"received_data":42470,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"4.adsco.re","ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":95532,"first_seen":"2021-01-04T16:47:52Z","last_seen":"2026-01-02T14:18:55.851749Z","alert_count":0,"request_count":2,"received_data":1049,"sent_data":857,"comment":"","tags":null,"fingerprints":null},{"fqdn":"7je7m5wphnod.s4.adsco.re","ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2026-01-07T21:34:21.205914Z","last_seen":"2026-01-07T21:34:21.205914Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":440,"comment":"","tags":null,"fingerprints":null},{"fqdn":"adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":3069,"first_seen":"2017-04-03T03:11:30Z","last_seen":"2026-01-07T08:30:25.72585Z","alert_count":0,"request_count":1,"received_data":1790,"sent_data":448,"comment":"","tags":null,"fingerprints":null},{"fqdn":"c.adsco.re","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":100769,"first_seen":"2017-11-29T18:42:15Z","last_seen":"2026-01-06T22:50:36.55198Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":414,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.ohsexylist.top","ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-25","domain_rank":0,"first_seen":"2026-01-07T21:34:21.206105Z","last_seen":"2026-01-07T21:34:21.206105Z","alert_count":40,"request_count":40,"received_data":935661,"sent_data":17920,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ohsexylist.top","ip":{"addr":"162.120.71.2","port":443,"asn":62240,"as":"Clouvider Limited","country":"United States","country_code":"US"},"domain_registered":"2025-11-25","domain_rank":0,"first_seen":"2026-01-07T21:34:21.199878Z","last_seen":"2026-01-07T21:34:21.199878Z","alert_count":3,"request_count":3,"received_data":29561,"sent_data":1541,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ohsexylist.top/","fqdn":"ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"162.120.71.2","port":443,"asn":62240,"as":"Clouvider Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e969e6981adb7ab1cb174994a5c8c627","sha1":"5f534a259a6f3754d1d392028fd4cbb344fb6563","sha256":"5cb18f9c0eebf644c0bc27e5224177984121b4c4a3f8189861a6d797a15a2e7a","sha512":"10bbe815bb6e4ade10d00a42a82dd10b668e95e275161cb0a637b2ea95785f8f7fc72b31bb48ac9c1dfad03d811912c0683941a3c09357525f164915d5b033cf","ssdeep":"","tlshash":"a380000a88a8a0222a30a0228c020200202e822080ee208083f2032020c283c022b802","size":30,"data":"","first_seen":"2024-02-12T20:00:22Z","last_seen":"2026-03-06T11:55:01.514986Z","times_seen":20053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohsexylist.top/","fqdn":"ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"162.120.71.2","port":443,"asn":62240,"as":"Clouvider Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b7d8a1a33a77fcd0328d3c709c5a9eb3","sha1":"e8ea90d66488aae87f231079141b02b04cc26f05","sha256":"3f06772f212125287a824492bf133d5fc6ef851b8478c081406f650716869cde","sha512":"b92d0879e95318270c892770db71380d6f66efbeb8e4c9a8155e82b09e66a0a90844a4d0e38ede9b6bd536d8926ab4359e3bcc5266594f04136fa66295bbc9c1","ssdeep":"","tlshash":"f37000082080000200200002020222003202203080c82002a2000a3020ea08b8020080","size":20,"data":"","first_seen":"2023-03-07T16:36:56Z","last_seen":"2026-03-06T11:55:01.489296Z","times_seen":4296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4ads.com/gawercarwoocejyvd?alWiQRtH=BQOCAAAAAAAACZUAAvk-0KG-KLAOFMy2bOhO8yS8cRECOhXPG8iZn2oLJYQQ4vxJB3fY-EMiYIilcuJgBRrIHc89scFdxzyUz9PxMJh0Ez-tRZXkp042HCZ7hXiDa6Iw0dH11sIy93ptBcVAFVlv83afOmVp7G0f9KYgHttVOxuP9FYLyTgQXuVZBXiHatIyZ6TjNGFWNAg0xDaUTR1Wcqo0_xUTbkmURa0Ag8mX7fVmiVoTyX3a51s_XUr9hHKpspQxRbNzJ57btSU6EBGjK67_5LZ2Gz0vyWGF-NDhZBx9-CNSc9_24wW-DYbXY35dhGbsTHAuwEptgIjVhAYw25yzEoHZmMEzdeF03a53tDrZi8ij-HU7dTftasrlC77HEXyi1ff9VLhyMLvSfpHFFosLrefgn87BBPuUMBCMoSO9a2i2e_70QCPFaso83yd4VeHdMhaUyrT3BWqygdy2bJh9nSKYxepTspuY76hsPyn_rwZOHV_OgkEd6gkWJI17_bkuYGpg1rK3_9bFU0W8-FupJv0XJraRM1BrGJtnHfg59YoufDn4-o5gVMFaj9rDq6JSd8bvMqyYs5PBMzvRcIViUWAK8BTEk1r8GVDtzJwBWZDLeoKtXlpPHDDZ4P8f8qMtuXP7roHZ0sHLltEw2DyCPIvkGEoVAVG9d_24Vn7XV1P5graX3NONGijJEHO88SqHBpv9f5ppAp26Qb3MAgqUNk14jryCt536RxkctrXCAZi99KzA6rJv6B_aZG15xayDcLSqtLWSWdSxg2BlF1we3kIfXZPxHeLvM9BnLGK73hIBaH4Wi_7iRwpXBQL83F8SfLgZFrLshkLj9ZnkZITltxDo9CqfbelBc1RW7dG8BNOes8mFZBno6UVJgrKRRKKCTyf5z9Gl4pT1RRdVHlB41ARmiEkXlx6L9qcObjKo05EiSrysNab4TkXNu5TWdfgRbNjSUhZR5Ji9RbynXkN_bAUvZi2GfXwGXWXYqEd2rVylLYPboDrRZI566Py2SHEzd5uZLnFK6MlQu-cdrYHuP2SqZIIw1G2vbt0rHve9tQcDp2VTxlALJy7rscf7hPzPc-ebN-BqjnDs8lEC9s2xPMMnS82mpuhchIxCMzUmD08euBOpI-xNadoVWcURgtE-a-shpog-ARReXzawu4ctxwdw7AUOjQFHIRUX0p1TxIkVHiEq9hpcWe9U\u0026fKEmABTo=4\u0026OeRZgYhN=5262794\u0026uLeDpSkm=\u0026kwZitxDY=0,0\u0026zkfgojmy=\u0026tNeBLnPQ=\u0026FRIKZmse=1280,1024,1,1280,1024,0","fqdn":"cdn4ads.com","domain":"cdn4ads.com","tld":"com"},"ip":{"addr":"216.59.63.128","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","size":44,"data":"","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-06-04T16:46:24.748115Z","times_seen":24708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohsexylist.top/","fqdn":"ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"162.120.71.2","port":443,"asn":62240,"as":"Clouvider Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1dad91e6bbfdd2880543a6cc9917ed67","sha1":"fcf6961970ab15ab46d64171281af4ea1b21bf46","sha256":"a7dc60bd6993c201941ea0bfc5218f7fea0bc015ee5dc88e658db78d98f8d98a","sha512":"923649c90232f1ce25ed7df3a58a797b501d15698828eeac4f3ee25f2ec6b32a91ddb26d7f5cf2ac1e03969535d923e58905b2f9fe18850f7473d40d223ed08b","ssdeep":"","tlshash":"a9800411c100010353f5054c30c751414140d30441015c430c1c50c1550511351f0d0d","size":36,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-05T19:16:16.51249Z","times_seen":13614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cdn4ads.com/aqW/wpKB/tjson3.min.js","fqdn":"www.cdn4ads.com","domain":"cdn4ads.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee01cbd9378f22cd39d70d51b5b5e9a9","sha1":"9d2dcf4f9824c9406433ff39175a352c3f3ad1df","sha256":"f33801610e3365f9a11ba5cb84d1cb4f50460a13dfb6203f06042cfe9551e429","sha512":"1963e92f9774381148b84a8397f425c49f8690dfe9114a7aeb441f65724d7fbbbd47ba3f3ecce3efb0ddf5c2e2cd799e2bac5bd21f40f436a373e857cc29de69","ssdeep":"768:bt9rqAYKKuZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCbD0Cntlqod:bb9ZzFQ9JsTgZvfzmMzhYrTscpJZw","tlshash":"f2132aaab286282601e741b9503fb316b23305167912d458fcb9cdf96e3de86117b7fc","size":41922,"data":"","first_seen":"2026-01-07T21:34:29.074192Z","last_seen":"2026-01-07T21:34:29.074192Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohsexylist.top/","fqdn":"ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"162.120.71.2","port":443,"asn":62240,"as":"Clouvider Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fb440b8133f21c3e5d3e39624e7bda94","sha1":"1b46d8568f9bd8a2be944d6a61924a21ec0b6e4f","sha256":"a5e2bc908c3bd3196d273564d073484f9905d13817490eca5aa249e701139cdc","sha512":"f874692932aab2be754d763a3998c5cd3c654a5bcd78c5d839fe0ba506f9a9e563d3cecba0ca71a6b0db35ff94943f6fa8bb0292f10c1aeb7df2704ea6d85fbf","ssdeep":"","tlshash":"047000000000000820200802220322083822223002cc0002220a083022ea00b80282a0","size":20,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-06-03T20:44:49.687167Z","times_seen":24319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohsexylist.top/","fqdn":"ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"162.120.71.2","port":443,"asn":62240,"as":"Clouvider Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"abebb491d8ff148c9d3c319d69f02811","sha1":"e05292d543a499813938b402c2ae551de95ebeac","sha256":"2edf0f149304b547641719e55dcb4745fd26609aa25626e7ac61e5d144ac3d66","sha512":"9adc89ffc7c18c76d554f2092a2cbe4198d10fdee061e09eaf232b65a655efc97b977db00ba1fe3c323f38cd3b6fbbddcc96962fb946bc71735f3e9f66c2af94","ssdeep":"","tlshash":"8301862c2c09a21a62e574fc65fbf804b93692ce4b106cb468efd1c59b359c71852fde","size":845,"data":"","first_seen":"2026-01-07T21:34:29.098938Z","last_seen":"2026-01-07T21:34:29.098938Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohsexylist.top/","fqdn":"ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"162.120.71.2","port":443,"asn":62240,"as":"Clouvider Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"41310478a380eaf7e07dbad9b4f81a97","sha1":"1714b6ef86e90b5b23e2aaa1e7728ed9c59f4d34","sha256":"848e5342d9196c0f64861ab926a3c5aecce9294750febbd22e5d8df859bdb144","sha512":"7b93f330547524ce01b8f888a8d56c19cd4432fbee43db16aab33fc1aecd77243762c5e7dd5ce767e38c0fdf9d58bc629caf106d77689c1ef90ebeb09406580e","ssdeep":"","tlshash":"d37000000000000b203c00020a023a003003003000880800820808302ae800b802c0a0","size":23,"data":"","first_seen":"2024-02-12T20:00:21Z","last_seen":"2026-03-06T11:55:01.500018Z","times_seen":19951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohsexylist.top/","fqdn":"ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"162.120.71.2","port":443,"asn":62240,"as":"Clouvider Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6a3a87259b05ca92285705ce8130b937","sha1":"da88f069d6ef7b1896517ea514ee293a8103fb1e","sha256":"423946cdca01d4915fdc795bb03491ce4251b32ed1717a7c0146ce14c838d373","sha512":"5df914e87a5ea1dc91ea5b5cc7dbe5c06ee78e01682465cac29f7f29820a5d96688c3344fff92e711a09b982f9e3a8968d49b3ea22a05cd7ed3a3234211c3634","ssdeep":"","tlshash":"419002a4801208e1033009039e06232b7022808cad0a7a977700c0b02401f0bc621080","size":47,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-06-03T20:44:49.650941Z","times_seen":14892,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohsexylist.top/","fqdn":"ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"162.120.71.2","port":443,"asn":62240,"as":"Clouvider Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d720eef71edef78b948a643d5712ec07","sha1":"ea5eb334bd6ddb0f04abafb700dc2ecb30070c76","sha256":"2daa1a91b2430e9867296c9cb26d1483785954a9bdd66f79b2c754bab7092cae","sha512":"63368ff1fef849df7f849af23bc2f24698893bd3d58300282427a76665b2d5c94f097d409f93173ad9c36944b4fffc2e37fa03a91f81e4e04f3737f9b73d2d6f","ssdeep":"","tlshash":"5f6000c00000c00c0000ccc3c00300c030000030c0cc3c0003003c3300cf00ccc00033","size":15,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.51255Z","times_seen":24260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"javascriptURL","is_inline":false,"md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-04T17:36:26.577265Z","times_seen":76167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-tfae5646079822f.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-tfae5646079822f.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19645\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:33 GMT\r\netag: \"69300b6d-4cbd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1116338\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tzBWmGyUFs9f730EBCdBitKfJ5%2BzkeFDSIyO7Wzb23qr%2Bh%2BiF5sKV36HIrnRu1Myps15rkMBW6OO8Gylhnf6ESzkai2uI844O8VdXLDE1KM%3D\"}]}\r\ncf-ray: 9ba69394384d56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19645,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"a7a833eb3e769102a996da12f947e092","sha1":"68849b39c7982597bb846abe7ecdca14c1b4af80","sha256":"199be1771b18bf74856742db0bf2aaf4878bba2767ef0d6ce070ab124cb2ecdf","sha512":"aabf495e05c4c18fd1362ee807f0ff9a44c13994a7c1f1c5c31b0f7c725799a764bd293f8bb2c36896cf606fd085f7acb8a183df7894786c2bef209e4991e558","ssdeep":"384:NxCrYAAw9oqOrH6RAJ3owOnxq2jKrqEGx7wSN0t3eO2Px4q6iD9UqR7xo0NDw:NxCruw9eCAJYwk0dE7WtuO2PoiD9Y0NU","tlshash":"3f92d0f877070ae8dce6c6621a974fd2d0a685439170bd9da2b19ec1ce1333724657cb","first_seen":"2026-01-07T21:34:28.999768Z","last_seen":"2026-01-07T21:34:28.999768Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":39,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-ta31c3e6ea5db0e.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-ta31c3e6ea5db0e.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19168\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:42 GMT\r\netag: \"69300b76-4ae0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1172500\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XyqRHx9ENogHQjgHVOp1GQnpvOCI18xCMky40x0lXnMuWDssgDzTog8rauWrkhrvpPY%2BAdcmKNducibwoxle39jVEM5uat2itTSVEfsOrbI%3D\"}]}\r\ncf-ray: 9ba69394281656c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19168,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"c27109cd867b837f040539c93f2e9543","sha1":"87b2664c692ddafabf4877856cc96fffc57b4def","sha256":"a660c27570c383c27be9768e1e546a1029431f9ab0619cb987eab7b856b378aa","sha512":"433ad2f36dacbe58856ef3a8568d5285e1d9c459ba87405f7d4dc0454cbdc26b8c6336c49fb7c07dab865097241c1bc7d9988ecb11ed712d6fbbd7cb1861f7c7","ssdeep":"384:5xvvC/fkuxT7C2gVX1Qoc1gkACg/asm8DkdE/cKX4Oc1X8lyj1:5xvUsuxT7K66vrSsmrCXfc1X8kR","tlshash":"e182e100fef2b19bc9490b1612646b2aab4c8425560becf8b17828745ec19fbc75ecd7","first_seen":"2026-01-07T21:34:29.001392Z","last_seen":"2026-01-07T21:34:29.001392Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":33,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t0dbf9afa058712.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t0dbf9afa058712.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18014\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:10 GMT\r\netag: \"69300b56-465e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1124623\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9G0Q1V1cpYXJ%2FTOIRQPXGVHC3doTrvt2FyztMOKWt99wetN2lczxrWmljqO%2Bua%2BVuNXBA4Kbhe0MNba%2FZc7yorR4OdH292zQR81Xi8wyKZw%3D\"}]}\r\ncf-ray: 9ba69394383156c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18014,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"036c7f2d551084bc9df88bbc4312555c","sha1":"ccedc2154b7c93e3f4e71c5c6b9a7676f442b9cf","sha256":"16ac8b41734147db48d9a61d8417edb0e05903e52a7d5dd7c256966adda3a09e","sha512":"b441e0fb10dc937bceae0b8642b0b87ce96bec88dbcb8aaf1273d47245e17996b48f58f6c87bc6037c7c7fe57195bdd4decfec9140286dadf8bf9667ea66c63d","ssdeep":"384:xFFQLDq3D7rUdFh8ByLmby7Zgq0HITByn4Kn61TPArQOKgT89paW:xFFQLD2HvB60UyqFR1TYhZCz","tlshash":"0382d0d39b04e4a1e6fe2d3923e60044caad931b8241191e8b452fd7bf9aae1056f1dc","first_seen":"2026-01-07T21:34:29.00472Z","last_seen":"2026-04-25T18:19:44.891633Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":36,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t21dd2877e3320a.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t21dd2877e3320a.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20088\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:10 GMT\r\netag: \"69300b56-4e78\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 531268\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GfZfouBlVhe1beGX9D6Y0SQWu7d19HJ6rAbBx9KTXscTC3cPAhk%2B4rbdZJycK1zcnjcESq7D851cVL8gNoThhuWNBrkVUKDfE3G%2BZQekE4U%3D\"}]}\r\ncf-ray: 9ba69394383a56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20088,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"193742295d58952476439c2a2d2218bd","sha1":"72fd9554a9ef56d3cec102ccca4c706ce8fc58a3","sha256":"b632db689231e436955a4bb115f6c6c9134f4ffea04d9169e9269b6cce0bcf08","sha512":"efa816ccc14a44429119b3fcf76988dc08691d4b1cb47604b149a84c32e2e4ad39fd02d35554807e6f32826447657b81b31aa90863f16cf89c2d511c14dd1cdb","ssdeep":"384:7ezIv5iysj/uLkxlJXZ3zPWzUfNDP81mvqAiaMSegN:6Qi5uLibXZbW4fNDP80vqASSegN","tlshash":"c792e1ac879b4dd361687eb1d900f14549402a769b37ac8b7822bff493603dff455728","first_seen":"2026-01-07T21:34:29.006763Z","last_seen":"2026-04-25T18:19:44.884019Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":40,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"7je7m5wphnod.l4.adsco.re/","fqdn":"7je7m5wphnod.l4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:59.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.l4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 09:14:30 GMT","end":"Wed, 11 Feb 2026 09:14:29 GMT"},"fingerprint":{"sha1":"44:4A:2D:C5:7F:AC:E8:4E:70:9B:91:5D:F6:AE:99:5F:66:18:51:46","sha256":"3B:1C:F2:20:1E:BC:6C:00:04:8F:3E:30:B9:AC:DE:26:B1:D4:73:CB:C2:6F:2F:F4:1C:E8:C4:A5:FD:38:8D:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 7je7m5wphnod.l4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ohsexylist.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ohsexylist.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:59 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 02 Jun 2023 14:03:32 GMT\r\netag: \"6479f6b4-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-04T17:49:05.69935Z","times_seen":16118648,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":137,"dns":63,"connect":24,"send":0,"wait":24,"receive":2,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4ads.com/gawercarwoocejyvd?alWiQRtH=BQOCAAAAAAAACZUAAvk-0KG-KLAOFMy2bOhO8yS8cRECOhXPG8iZn2oLJYQQ4vxJB3fY-EMiYIilcuJgBRrIHc89scFdxzyUz9PxMJh0Ez-tRZXkp042HCZ7hXiDa6Iw0dH11sIy93ptBcVAFVlv83afOmVp7G0f9KYgHttVOxuP9FYLyTgQXuVZBXiHatIyZ6TjNGFWNAg0xDaUTR1Wcqo0_xUTbkmURa0Ag8mX7fVmiVoTyX3a51s_XUr9hHKpspQxRbNzJ57btSU6EBGjK67_5LZ2Gz0vyWGF-NDhZBx9-CNSc9_24wW-DYbXY35dhGbsTHAuwEptgIjVhAYw25yzEoHZmMEzdeF03a53tDrZi8ij-HU7dTftasrlC77HEXyi1ff9VLhyMLvSfpHFFosLrefgn87BBPuUMBCMoSO9a2i2e_70QCPFaso83yd4VeHdMhaUyrT3BWqygdy2bJh9nSKYxepTspuY76hsPyn_rwZOHV_OgkEd6gkWJI17_bkuYGpg1rK3_9bFU0W8-FupJv0XJraRM1BrGJtnHfg59YoufDn4-o5gVMFaj9rDq6JSd8bvMqyYs5PBMzvRcIViUWAK8BTEk1r8GVDtzJwBWZDLeoKtXlpPHDDZ4P8f8qMtuXP7roHZ0sHLltEw2DyCPIvkGEoVAVG9d_24Vn7XV1P5graX3NONGijJEHO88SqHBpv9f5ppAp26Qb3MAgqUNk14jryCt536RxkctrXCAZi99KzA6rJv6B_aZG15xayDcLSqtLWSWdSxg2BlF1we3kIfXZPxHeLvM9BnLGK73hIBaH4Wi_7iRwpXBQL83F8SfLgZFrLshkLj9ZnkZITltxDo9CqfbelBc1RW7dG8BNOes8mFZBno6UVJgrKRRKKCTyf5z9Gl4pT1RRdVHlB41ARmiEkXlx6L9qcObjKo05EiSrysNab4TkXNu5TWdfgRbNjSUhZR5Ji9RbynXkN_bAUvZi2GfXwGXWXYqEd2rVylLYPboDrRZI566Py2SHEzd5uZLnFK6MlQu-cdrYHuP2SqZIIw1G2vbt0rHve9tQcDp2VTxlALJy7rscf7hPzPc-ebN-BqjnDs8lEC9s2xPMMnS82mpuhchIxCMzUmD08euBOpI-xNadoVWcURgtE-a-shpog-ARReXzawu4ctxwdw7AUOjQFHIRUX0p1TxIkVHiEq9hpcWe9U\u0026fKEmABTo=4\u0026OeRZgYhN=5262794\u0026uLeDpSkm=\u0026kwZitxDY=0,0\u0026zkfgojmy=\u0026tNeBLnPQ=\u0026FRIKZmse=1280,1024,1,1280,1024,0","fqdn":"cdn4ads.com","domain":"cdn4ads.com","tld":"com"},"ip":{"addr":"216.59.63.128","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:34:01.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn4ads.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 04 Apr 2025 00:00:00 GMT","end":"Tue, 05 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:E8:5F:67:E6:26:22:D5:AD:B6:B6:67:7C:38:20:45:99:C6:B1:7F","sha256":"7B:DB:ED:86:83:B7:92:84:B5:0C:52:DE:81:DC:EB:28:C6:80:A9:EC:C7:FA:B5:BB:A7:55:6E:17:99:E5:84:B6"}}},"request":{"raw":"GET /gawercarwoocejyvd?alWiQRtH=BQOCAAAAAAAACZUAAvk-0KG-KLAOFMy2bOhO8yS8cRECOhXPG8iZn2oLJYQQ4vxJB3fY-EMiYIilcuJgBRrIHc89scFdxzyUz9PxMJh0Ez-tRZXkp042HCZ7hXiDa6Iw0dH11sIy93ptBcVAFVlv83afOmVp7G0f9KYgHttVOxuP9FYLyTgQXuVZBXiHatIyZ6TjNGFWNAg0xDaUTR1Wcqo0_xUTbkmURa0Ag8mX7fVmiVoTyX3a51s_XUr9hHKpspQxRbNzJ57btSU6EBGjK67_5LZ2Gz0vyWGF-NDhZBx9-CNSc9_24wW-DYbXY35dhGbsTHAuwEptgIjVhAYw25yzEoHZmMEzdeF03a53tDrZi8ij-HU7dTftasrlC77HEXyi1ff9VLhyMLvSfpHFFosLrefgn87BBPuUMBCMoSO9a2i2e_70QCPFaso83yd4VeHdMhaUyrT3BWqygdy2bJh9nSKYxepTspuY76hsPyn_rwZOHV_OgkEd6gkWJI17_bkuYGpg1rK3_9bFU0W8-FupJv0XJraRM1BrGJtnHfg59YoufDn4-o5gVMFaj9rDq6JSd8bvMqyYs5PBMzvRcIViUWAK8BTEk1r8GVDtzJwBWZDLeoKtXlpPHDDZ4P8f8qMtuXP7roHZ0sHLltEw2DyCPIvkGEoVAVG9d_24Vn7XV1P5graX3NONGijJEHO88SqHBpv9f5ppAp26Qb3MAgqUNk14jryCt536RxkctrXCAZi99KzA6rJv6B_aZG15xayDcLSqtLWSWdSxg2BlF1we3kIfXZPxHeLvM9BnLGK73hIBaH4Wi_7iRwpXBQL83F8SfLgZFrLshkLj9ZnkZITltxDo9CqfbelBc1RW7dG8BNOes8mFZBno6UVJgrKRRKKCTyf5z9Gl4pT1RRdVHlB41ARmiEkXlx6L9qcObjKo05EiSrysNab4TkXNu5TWdfgRbNjSUhZR5Ji9RbynXkN_bAUvZi2GfXwGXWXYqEd2rVylLYPboDrRZI566Py2SHEzd5uZLnFK6MlQu-cdrYHuP2SqZIIw1G2vbt0rHve9tQcDp2VTxlALJy7rscf7hPzPc-ebN-BqjnDs8lEC9s2xPMMnS82mpuhchIxCMzUmD08euBOpI-xNadoVWcURgtE-a-shpog-ARReXzawu4ctxwdw7AUOjQFHIRUX0p1TxIkVHiEq9hpcWe9U\u0026fKEmABTo=4\u0026OeRZgYhN=5262794\u0026uLeDpSkm=\u0026kwZitxDY=0,0\u0026zkfgojmy=\u0026tNeBLnPQ=\u0026FRIKZmse=1280,1024,1,1280,1024,0 HTTP/1.1\r\nHost: cdn4ads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ohsexylist.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npopads-node: wb5\r\naccess-control-allow-origin: *\r\nasf: 9\r\npopads-ec: ASB\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 44\r\ndate: Wed, 07 Jan 2026 21:34:01 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-06-04T16:46:24.748115Z","times_seen":24708,"resource_available":true,"data":null}},"time_used":739,"timings":{"blocked":301,"dns":1,"connect":93,"send":0,"wait":137,"receive":0,"ssl":204},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t6ca448148069f2.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t6ca448148069f2.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23306\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:33 GMT\r\netag: \"69300b6d-5b0a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1167591\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ckqrz3ezCQa5jgMhvExxy9NtKSA8FhXgr415ROYILhKop2p9zeWMgWW5nC8V2V6MyJIAHSWUh%2BZ0UduBubVhS0z4%2BOYLCyyzJVs5kHGSRw%3D\"}]}\r\ncf-ray: 9ba69394383f56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23306,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"fb9e170a43cae033c27446b62b4f1680","sha1":"5891c3bede2d321de8c3e6bcb9c5f50cc6705bf4","sha256":"4d6c7e1e379e8a646f356a38eba95ba26a731a50a89d7a2e7f47e9de2757040e","sha512":"1bd966a2f66812d3c5c2dd89318fe05832c95e817cdfc3b896337093f59e6298d34f475b4a922b77ae6339a9b507f3ff9fb20208b03421589c853e2e81607396","ssdeep":"384:Q+nH+TScbF6ORKdJcSNg/cNNpXgzt8QZlMNVXTFs35/SZ46G5EESF4oOrsv6EnLd:Q+H+TXbF6OUc8S8wz/ZGzXa35a+zEZFN","tlshash":"41a2e13738df6e3b5fdbc239542dad435036b209697f9b44826215fe010c93a28dcad6","first_seen":"2026-01-07T21:34:29.011785Z","last_seen":"2026-02-22T14:15:55.60207Z","times_seen":2,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":39,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t2b1c8518ed3226.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t2b1c8518ed3226.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25220\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:42 GMT\r\netag: \"69300b76-6284\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1133850\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sKHCJzUPAyl1cJIhh9E2j9tzzzPGsQp5ap2Gm2t5l9ZBDijUZv9EkDPZv%2Fk23thRteJsfK8S2uvJb93IlkTvSeEXH%2BE9F8R6YIewj0VIAic%3D\"}]}\r\ncf-ray: 9ba69394384256c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25220,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"6c7b59873b3d533035f3bce635dd3ef4","sha1":"a8ae2023dce0c5193204fee982cf608831d895a9","sha256":"14abd6982ab7973215236df028f30b3c4f5832a65ba906b5c195120c3c43ecf0","sha512":"5b32bb0736c2c65130c551749c757941a648ab98a0164f3677991444d022a469d4252b2959be126b5d19b6ca3d141f2efa9162fe76357f377de83a6530fbcbce","ssdeep":"384:7352INkfT7pn3cSwGkWRvHv1aWHTMufsPHf8SKu+33GMU5T/rvMn/iB1z7KZdmXr:7J2RJwC8ITMmsPkEmW7eiX6ZsX8e8W+y","tlshash":"2bb2d1b91c28c0198c5ebde35416b31f8505e9c8653e56a8dc2b65f6430f1eb911fbb3","first_seen":"2026-01-07T21:34:29.013856Z","last_seen":"2026-02-22T14:15:55.55296Z","times_seen":2,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":39,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t2dd813cc671ac2.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t2dd813cc671ac2.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18149\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:10 GMT\r\netag: \"69300b56-46e5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1610869\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e99tBBZ7VdR6vaoPlYGBTNETMoiXVZDfrW2Y2Q%2ByK5uM%2FoKDL%2BBGrlKM%2FK%2FL76enrKP8yttD4HoX4ggyRpfC%2Ba3OPfVoceXUO1EY5HfB5j4%3D\"}]}\r\ncf-ray: 9ba69394385056c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18149,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"fb52af7c68abf4fc56e361965312314e","sha1":"cf5679fdd31093f3312b7e517012b8dfad4e5d7a","sha256":"9ee46c9ac6a88f48f831d328dadee851efc78e21262f8b0fb194ab4d69513827","sha512":"8639aea04371c0fe138a92d805c960e928d2b38c0eef4cccc671277c92877ddf1d201de12f3c81b01e34e7a2fffd2d1ed3a5b9264999944010105ac79d065029","ssdeep":"384:JTZnOeUhVLjKkePTIGV2nIOunHFY1JjYPAk0zqsgAO+Z3L2NMGt:J9nahVjKkm0GV2nIpnHifwDoqsnO+Z3e","tlshash":"ff82d01d6103441cc6e9527decf323a94d3ff59ba253c1293d451fe954722ae2d72056","first_seen":"2026-01-07T21:34:29.017106Z","last_seen":"2026-04-25T18:19:44.936725Z","times_seen":4,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":39,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t25d32a52bc07ef.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t25d32a52bc07ef.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27393\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:10 GMT\r\netag: \"69300b56-6b01\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 621234\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2FEPYWJuqgTDl1G5ovJXetnAZJkP3bIakMN8u4S12AL5ZQJu8U4pFfijwfjc5oZ8e%2B%2Bh6rk0yzTiah%2Fqr%2B8rEmhpmPhDXgkj2blcri4xKUY%3D\"}]}\r\ncf-ray: 9ba69394280f56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27393,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"c5a4d33e90d72500f0864a1df11b0ab0","sha1":"98cc8dff2a8898ea502e5ffcd99652b3a92907af","sha256":"175f12d585bd77a4e019cc7899596c92708defa960ee7eac2463489cdab34504","sha512":"b808c061debe1e55c6ef41871824a034bef5c42d84e626c38026ed21bfc734e2463f3c8e855c435960927d8fa6b6019a4c5b7989d280b7aa657a48420f5c63a0","ssdeep":"384:jNAzY0jkj+wYGTHR7W2jF8UoMYpZ7B5/otNTzB0zskQbLX3EKS67jY8GGjY5R:Kkj+wHTx7W2R8lZ7B9mHB9bUaBfjY5R","tlshash":"07c2e010249abb83ac6c5402c876f0cc65502db681abb3bdd3a3b6d5643c17b56e934b","first_seen":"2026-01-07T21:34:29.020149Z","last_seen":"2026-02-24T20:23:23.790932Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":25,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t76fcbeec9666ec.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t76fcbeec9666ec.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27001\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:10 GMT\r\netag: \"69300b56-6979\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 465653\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qWYlmKFrp403ZZZHFWmsAwgP3Ctfd7lcziJOTAN6g2SLRH21CwThro7j1BlhtFl2km%2F5y3RPRZa%2BVrfBeFdlWydDDqRQDLALvLtRGr2RIbY%3D\"}]}\r\ncf-ray: 9ba69394282a56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27001,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"9a4fc7770e4e9150e3b12297033b3c40","sha1":"fea7ecc41c695a0bb1fec0b90c84d1b0e04f1e51","sha256":"0ba81a516707bcc047d4a85219d0a681a0e84165c854a02566331f8789825559","sha512":"f4413c540906d4bf5b08c54cdf6c10bc2337f355dfdbab4d58f506a2502fbc44b1840c9901957d9ae83b50c0fbf1fa35f361e942ce4ceda8edbbbdaa914e8c05","ssdeep":"384:XFwTzxSkB40DaLQ6IrOpW09gNbmcnma4/SwaSCWA/Mnho/RELgnpoLG7DSxoySd0:XFwTzxuc5K9gNIV/eSCWE77NixoyA+l","tlshash":"10c2f194526a8e8f4914233d37edcaf9139247a5ea19b1e530c41cec90adbcbbb34911","first_seen":"2026-01-07T21:34:29.021257Z","last_seen":"2026-04-25T18:19:44.928186Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":34,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohsexylist.top/assets/css/main1.css","fqdn":"ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"162.120.71.2","port":443,"asn":62240,"as":"Clouvider Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 09:16:26 GMT","end":"Tue, 03 Mar 2026 09:16:25 GMT"},"fingerprint":{"sha1":"25:91:9F:BF:A9:4E:27:E9:FC:63:59:F0:21:26:C8:CE:D8:F3:F2:9F","sha256":"24:24:C4:24:35:DF:C9:18:F6:9D:60:1B:7C:50:35:D9:E3:CA:42:0B:41:3C:D7:B9:08:49:3F:34:B6:FF:7B:3F"}}},"request":{"raw":"GET /assets/css/main1.css HTTP/1.1\r\nHost: ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: axtid=3f87c138-81b7-4baa-a2a4-a927d76595df; axtsd=fr\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Jan 2026 21:33:57 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 03 Dec 2025 09:23:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6930019a-1710\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5904,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d4388f2e5419423fc840a9c2ea57cf0b","sha1":"67a1c1f1c9f7d988ba4141bce4d1c33ecfdf6b58","sha256":"1d0a1dd03440fe1d9e85e37ef7b958fbadb64d45c5b28f429418c0d78841d980","sha512":"036ca962dbf8c90d024033ffae717d5c79be6c9b720b7349ba478a5fe72c560644cc553d747fdf3710bb345d06af25d5ba153c996b0c6b9ec762c3ad4d61148b","ssdeep":"96:4hHaoOW8xPgTJE/APjqkYNczVEso7VOJIvN//12IsaXiDKrfaHNwttRZ4miVFIG:4hHhOWdTLGrNczVEsoROJMHgcez","tlshash":"29c1dd239b401c8da00aa1e9ded96ea5772f0553af8f0ee7b86031edd9cd58446334dd","first_seen":"2026-01-07T21:34:29.022416Z","last_seen":"2026-02-22T14:15:55.563648Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t2fe1045395a077.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t2fe1045395a077.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15621\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:53 GMT\r\netag: \"69300b81-3d05\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1144778\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=50GJS3SI0djEzlmGf%2BPhJDVNmt5Di3KIyu3MlMZA7olmNBPnJxSuhVSEr5LJQfZl6pcX8FElhqxGpZRtXyCoPclO3BYAlPshF7cuHEuYd1Q%3D\"}]}\r\ncf-ray: 9ba69394384056c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15621,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"93ecc7ca89b94f2117d61dd91d4fe636","sha1":"fcd8d6fe89233fb21fc852beaae37715150c1564","sha256":"e17c7fa890151b736946efe6855ed0ffb9a6dded562d02f5c0687ef75e37b257","sha512":"de8f9d2af5eea26189ae4c2c02f12d40741e4b65f00144f98848bcb00fd144a4b8801e45e471959409884bf13727553bdc722465d2bc558637ab53a992a1945b","ssdeep":"384:pntwLYmjFHLKhxNQ9xBekvcI8Zghwd5UXqSgjfpUaA6:pmsOFXMt/KaUXjgjJD","tlshash":"5162d03c45d1f71d9f65f07bd8b2397c9641382b6f89a2e78061a8e60158ff00467c9a","first_seen":"2026-01-07T21:34:29.025333Z","last_seen":"2026-02-22T14:15:55.565588Z","times_seen":2,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":39,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t04b21a9af5098e.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t04b21a9af5098e.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20296\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:53 GMT\r\netag: \"69300b81-4f48\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1504387\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1HSYWkkPZ%2BvbCWz8arB7noY73%2BNU4HYYscUZS%2FeMRLg4oeoAln6Xz%2BxaMH9HOfeqFmYm9S6mX3A7XQEvrWBmZ%2BrprkfrPxnEW0ds5yCgrrc%3D\"}]}\r\ncf-ray: 9ba69394385656c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20296,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"e8abe0e0cd1dcf3c2203050b3df2e81c","sha1":"753cd58963afedb4615439c2f2387066f09f7f42","sha256":"88c80738546830b17866e1f4a1791f8fc0bbf936b2a01e2396067cf29e4cccea","sha512":"d0e8baa2f0a828cf7312afa857248292be3e0c95c0c600113939f54fc8a700cb55e7574c50398d5d4d5bb987599f05633682cb0956d28308bdf3f47904a33013","ssdeep":"384:RgVNcNXXHqIfrfeKCJN1mcnSUInKJSxx0iVrV8hEoaXtIRIKGAE:RgsFXjrfevWKIZXYEfWRZE","tlshash":"9192d0d2d321afd6c6637262035743099d89fc3af9794a27780f708268bb8fc1768630","first_seen":"2026-01-07T21:34:29.02848Z","last_seen":"2026-02-22T14:15:55.568563Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":49,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t422f9b13511c6a.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t422f9b13511c6a.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25283\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:06:01 GMT\r\netag: \"69300b89-62c3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1142215\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Df0khhA%2BczNWjcEmR2nHBj4CEmSTKX8c5Pb5VjwSoAID1tNVWWxfmiE3zBCYODPBNHu%2F%2FbYzQ3%2FWAZc7HqZRm2am8cLcTZShQTI6laM9e6s%3D\"}]}\r\ncf-ray: 9ba69394281356c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25283,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"e9e576245d89ff25df97d388b961dc9d","sha1":"d7798ffb749e798a8683410e7ea12ff9d637c8cb","sha256":"e511f541dd8b53a3b2e01e4e7d416899013be2ba7426688c96375c94fbbb89fa","sha512":"236238efe683700944033a155e4633e29920c1e8c735d288abf58d7f5ef3dd66a4d73f35d252a74f95acb0bb90ef478c6f692a3731de7d249445c9dd9c48792c","ssdeep":"768:/7xjdL5Q33Ax8amRlERN1jEDKDOxq73kZCJ0n:/L5QnA1m3ER8Dy7UZS4","tlshash":"1fb2e13663a7a784be70b8721168140a71097174b548be7fe07bbecf6f2925a16df103","first_seen":"2026-01-07T21:34:29.029821Z","last_seen":"2026-01-07T21:34:29.029821Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":32,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t891163502c6377.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t891163502c6377.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21352\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:10 GMT\r\netag: \"69300b56-5368\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 640\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WJDCMjjGwRc3QP7npSEp5Ib%2FsY0g54%2Bqr1AxWozsa4VGdeFNWWqAOcTNNK88ghy2I1eHQaQWa%2Bmd9iPBvhOYXSHrOF5CSqPHuKfGnckGzVY%3D\"}]}\r\ncf-ray: 9ba69394383656c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21352,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"c7a640f37e77fd1b87120a4d553d3ff9","sha1":"1636e766115ea345437424d5d4e2509d2a24a6bb","sha256":"fa852d7f0b3b84ac737b82821d69a00693dae03c76ed99597e9c5ce52be12831","sha512":"0bdbcaeed7a5772e92667b39b17ec9f2489973708ffbb1afe82b84b87dcc692096892b458fa4c9f182ee2493217e570b97740fba8caab647c87f3a531caaaec9","ssdeep":"384:nOU850sNHxVIRRhhyHQt0lOCdDli5TKGCTqQelviTh9427IX+t0XZ1qsg:nOU8tzVIRr0wsV7HqQMIh9427xt1sg","tlshash":"c8a2e0a3b341f6f2bddb565e53ca5d14f6e0528224fc28bc88a230cf18d41507689be9","first_seen":"2026-01-07T21:34:29.033584Z","last_seen":"2026-01-07T21:34:29.033584Z","times_seen":1,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":44,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t35201dcdee6779.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t35201dcdee6779.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19653\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:10 GMT\r\netag: \"69300b56-4cc5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 4664\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=psoJ1jFdbVH7L2dBcnG8wb48h4W5zZvKz7J6PeJ7BFvLHbb3kGnhwgLWS7EjQKMjhRisN%2Fr6QcuBpVcozmXgsJYBA98%2FV7ur5aJsoleWDDU%3D\"}]}\r\ncf-ray: 9ba69394383d56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19653,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"a845b991c6675f1661cac3307ef7a515","sha1":"11c1c9c5cab5cc15c0c3d33ae15094ef4a8f96c0","sha256":"1f58f09dae8d3b4a306798ff5475fa0e1fd6adbc77a17d522aa9ab83e4f061ae","sha512":"a440b85b43c0b9591cb6b81fdf705ae3d0dab01cfcf11cf01f90ce417e90e93dc4703e4954966f1b8de689d49443b3a9b380132ad5e7137983295d4211894ccf","ssdeep":"384:JJb2lwMn1I6cFEwzOScNfcjCasPLBU3aK+19TjeqvY98+pE01itMFg:JJb2RtHSyEertgaR7jeIY9LEntMFg","tlshash":"c792e1f5f909c3e0dda19ef0aba5adb8d2ad10ea04f8495631f06bb4144108b27fe557","first_seen":"2026-01-07T21:34:29.036071Z","last_seen":"2026-01-07T21:34:29.036071Z","times_seen":1,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":39,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.83.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:59.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ohsexylist.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ohsexylist.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:59 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 9ba6939ced1bb4ed-OSL\r\naccess-control-allow-origin: https://ohsexylist.top\r\ncache-control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":45,"dns":33,"connect":1,"send":0,"wait":19,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-td61dcf344d8f95.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-td61dcf344d8f95.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30141\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:42 GMT\r\netag: \"69300b76-75bd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1133761\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FfzQMIiDUBQ6Kq%2FGDw699%2B0SpYJ7U8tcSUr4hkE6Py0Fp0PDerf%2BQsE7y%2B%2FZaHo5t%2BmTP88OQvazbta4FtLnNe%2Bge%2BbQ4s2ybcDzB42hxJg%3D\"}]}\r\ncf-ray: 9ba69394385c56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30141,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"01c1e17aa81c5bcd44c8ed8fc52e0d87","sha1":"bc2e1ab3b76303aabdefae0bc8009fe4e9686d1b","sha256":"2783d9616f8086ff6fee776f9aaf3a92951b2185981131d7122a193e27098f57","sha512":"b209223613a7a15548433dc4eb292b5c2476deeef5bc4348e00bc3ebd15e6b7eb8a763c2a72997e79e977c36036a38c6cfb7d9f06c19dd749acac099b073f136","ssdeep":"768:mkolDQ0zQ7ZPAMY6wOivVBaWvSOiAcyMuOXuUGX:mkoXEAMYZp/BpouOJg","tlshash":"42d2e17e5c9b58da39453ee1be85631d78abdf0cd2181a48c90c9de05b713e24a74f38","first_seen":"2026-01-07T21:34:29.044397Z","last_seen":"2026-02-22T14:15:55.594893Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":49,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t17a76142f23c12.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t17a76142f23c12.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18381\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:10 GMT\r\netag: \"69300b56-47cd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1116719\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=itDnRB5RLBQhSuB7MPnNK%2Fo9ZGUsmTpNkdgM3kOVXvvrc6dh%2FK%2BmLYcN8Uyo90NMhDmZfmCjkvlG%2B5%2FxcHeDm21LGzx0o3hnGSp%2Bzz1XHHE%3D\"}]}\r\ncf-ray: 9ba69394180056c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18381,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"339d8724dc0dfcd2dc90714e201b913a","sha1":"33bd7048aeac3baaa2f26b92a2ea71b90b1eafb0","sha256":"5856ffe32344054fc64c4b34028959148c1a9090d598d7cef948d40731226979","sha512":"207308d90627fe19fa09696f1682e1e3631a2fe54c16161204414261b6942d5913679c25a3ecdb74ad1bb31125d8d90308ad26c0d5dde505c347e5614cc74fb2","ssdeep":"384:TfBxNCqHRTV14wz28EUG3IXO6inKycLWJbSL7pAZAQN1KtQgJ9i3JRR:Tf9C0TPlEUWYO6HS+LF8AaKAp","tlshash":"2282e151bf4631e9fa784e9835c0f775bf02d498a8546fec805a89c5e98103bcdd01cb","first_seen":"2026-01-07T21:34:29.046041Z","last_seen":"2026-02-22T14:15:55.592199Z","times_seen":2,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":51,"dns":34,"connect":1,"send":0,"wait":37,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t3cc5cd7dc4b10a.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t3cc5cd7dc4b10a.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24683\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:42 GMT\r\netag: \"69300b76-606b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1121819\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c9wSUHKY%2BSQ9%2Bx6SA1giZ5dI72ZQoSEQwYQkrarN11fqMPGp0CiDPf9wsyiM0opav%2FNr4Zzac5jNfZKJUsXJhqwwDKKrZAPzMdzFprOVMKw%3D\"}]}\r\ncf-ray: 9ba69394180256c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24683,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"3890a0d00dab295a473f2e8c4cf09575","sha1":"2db50a2aaa51f696790f3f709027611a86527e81","sha256":"0be6ba07e5ba63520923c391788868b1c5e0186c29eae017f1493c664e1d1397","sha512":"1c54c7c96d99149711b07c6d565b9f61c3bed1f927034b643b596753608d44c74accd739534b038334ac7ee6454d3177f23e4bf96082194f76eb50b6133e9fe3","ssdeep":"384:xmTBe0imc4UmwRyfVGcMR6GIeZHU7h9hzvr2SAqOrFNAFcf816g95P77E+a9qlqs:xq5Rc4oJcqIeZHMzvip+68RP/ElQjUM","tlshash":"a9b2e18a8d254fdd49aac19756f51c97b000890dbeeca69457fb12e88f433d30f8c62e","first_seen":"2026-01-07T21:34:29.049067Z","last_seen":"2026-01-07T21:34:29.049067Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":36,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-tfcd383605ecea0.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-tfcd383605ecea0.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15331\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:53 GMT\r\netag: \"69300b81-3be3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 786924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h9uUP%2Fjbvt2yA7TzuVfJh0q0EtV92MLL1H3WGDtOQQ5Ja63AH1wko%2Fafdl%2BqCE%2ByHZiNzAV5Vl02qsNlQkGiYWYUQwd2njBv6RSefpoRowE%3D\"}]}\r\ncf-ray: 9ba69394180856c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15331,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"2e65317808e38e91f6bd660b5774aa77","sha1":"62c388d1967f4b1f9f9507e86441a01776c4b498","sha256":"6ee4e5d439bc3122c282bb857b09a1bce104ea68ccf56c37764c4d55761952db","sha512":"9e47915442b5060eced75e168e9fe503b201c3e49e1fea55c4457c2cee44969e17192d1da52df486c1feae8045eb9bd6387457b3a19bd430294af712df7c4fd8","ssdeep":"384:kCaV09bXHz/Ig852iYWsXnB9OAUR9f7awtes:V9bDwgIhNETOrjaZs","tlshash":"9b62e08672458460f29b5f292e659f330c74fb6a72ebbd0e803e59ddf8e430501a1a1c","first_seen":"2026-01-07T21:34:29.05192Z","last_seen":"2026-03-03T09:53:07.399315Z","times_seen":4,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":36,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t32d69d9be982f4.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t32d69d9be982f4.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28583\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:53 GMT\r\netag: \"69300b81-6fa7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1139873\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nOR17CHPLTJ7iPwO%2BFUrBQ7ev6MFaKWEA8e9990pTfl%2FB3aKK9vAjhg15KZXT9LqG3M55uIERSuYIffG78sqHQ1QwT5%2FJNKDe4OeSxty56g%3D\"}]}\r\ncf-ray: 9ba69394280b56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28583,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"c6cae03d3718dede63ef04f0a8d4c702","sha1":"1675a997cacab7049096dc4397b0d8649c280226","sha256":"ce1b9155394e0a0ae8e8894ad9b75ed1d0083a15f57cff6c998631bec3e301b5","sha512":"e804396209d869fcdbf8ac82026fe1a5f1953e035d37a20d7b5406ae808f2b3bc842c47f87e88177f9fbb3111511a9bbf99a6cc91bc59f32f7623290c9465a66","ssdeep":"768:/AMfYaSbgO/s/h9SnL+MkyBV52GW7gWS24:/dYhgO/+h9SLnygWX4","tlshash":"6bd2e11363aa3ec3a680966d50eb86425225c5f420798a5b07b0cdc19cbe1bb99bcf43","first_seen":"2026-01-07T21:34:29.055679Z","last_seen":"2026-03-03T09:53:07.373351Z","times_seen":4,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t89b9a3e680049f.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t89b9a3e680049f.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28351\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:42 GMT\r\netag: \"69300b76-6ebf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1061500\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3TEMfjgFd2df3t0CQhbMSEyyv%2Bo%2FjrVFZuYbz8UbYn7gjPRupDMBU98sKGcy6W9yRuMq%2FsvKZnDa401DaEgGLEFAeEwwNB9Hp07%2F2VSJfes%3D\"}]}\r\ncf-ray: 9ba69394281a56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28351,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"dd36e01280766c776a9563f9fc34f4ad","sha1":"67ae6ba26f52b292d4edbf502655f716b3c7a46f","sha256":"81ad7ffe50ea2f06aba61944c21e1e651df187d018b36fbcdf8abbbdca320b7b","sha512":"b2642748df1df5bf7dcca8ad7ff39c45375f18a80e4e7ab75284c40ed0dcf43971dbefde5d7d72021aa369557d66721679724c46ef12c046fe8acf634fde4030","ssdeep":"768:+2AJXgQbYDXW7fTiT0lOkjUM/s2yI6Yl6w/x+J5OcYM:zAzAWDe8hjpk2eYlxx10","tlshash":"fdd2f2916a2964a4375186fc85c72db168f03bba97a758120b8f2dcdaa3e6f01f01c5d","first_seen":"2026-01-07T21:34:29.058211Z","last_seen":"2026-01-07T21:34:29.058211Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":33,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t6b411ba04cb4cb.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t6b411ba04cb4cb.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25469\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:10 GMT\r\netag: \"69300b56-637d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 617626\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LnjQR7gY6wqmDNmeTi8XMX6XhKsJocVSFgy1UMgh9R3IDqy2qfcJhegUG2CW9oxm3AA2%2FQoNHUJQy460TA5wGoAmYvJIiCzAjKSlwGWVX10%3D\"}]}\r\ncf-ray: 9ba69394383356c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25469,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"0e7d13214652e9c618b589b80bbe3698","sha1":"40ed9a161f052a57f8847fb669c973d6f6198a5b","sha256":"0c4b04fd411b866caeea8af4f9c314088e0c429f1ec48a4b11c425b13ca1816e","sha512":"ea6ea5217379d997b279f572fb97dcd1552d178643d5b999e41081dfef14dc0b3e9aa83a933c36cd0aba5f91f3267d787c8229e0ff1a6a15a4bc7e6d8155f59f","ssdeep":"768:J2ZSofZ3D1cOidfZYMaJ4UIc6a9HKeT80mvWLdp:J2bt1cYh0c6aMeEvWpp","tlshash":"51b2e1528b5b87ac65251a9c2f73946e4b3520b3d029e1144246fbdfdaf07276c11e2b","first_seen":"2026-01-07T21:34:29.059276Z","last_seen":"2026-01-07T21:34:29.059276Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":44,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re:2087/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.83.77","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:59.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ohsexylist.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ohsexylist.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:59 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 9ba6939cfa46dfec-OSL\r\naccess-control-allow-origin: https://ohsexylist.top\r\ncache-control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":2087\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":36,"dns":28,"connect":3,"send":0,"wait":20,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t5e8420ed1301ab.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t5e8420ed1301ab.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27827\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:33 GMT\r\netag: \"69300b6d-6cb3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 9577\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dBTT8CVLR9eVCwWXDidt0HFi74hczZzfUr6cVBpBhz1IcLpYar%2FnxX3rF%2BPiwgrpGp3wP%2BBGjNoik3O0Vh49hIW3lbKgj7PfuC%2FWK7Y%2Bg4k%3D\"}]}\r\ncf-ray: 9ba69394180756c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27827,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"26e47c854412cb0489179ca1cdc4e0f3","sha1":"29397dd155a31709cef50afa6f54320c849b875d","sha256":"aa9095632dcb9fec593496333d75e8d145ed7faa06fc2b7e6ddb076317313388","sha512":"9b585dcdc436eacf76f7d9d498ebcf62db5da64841beaa148b74a3d596a5b840374839d191784648d737d0528396bb1220abc0ff7153b370cc7d7dbce6afe7fd","ssdeep":"384:aUF+fKsFh0nlu2KGJPYzgj+45jef+vWdHlfmeYyfF2Jqwgg85iJUgCCTtI:6fKsz0nHYkj55jU7tMJJPUx","tlshash":"9ec2e1e9012185752f400b3cf6e0b4ab81727fd258ca552a33c6fe9d37a9f8a5d36613","first_seen":"2026-01-07T21:34:29.060297Z","last_seen":"2026-01-07T21:34:29.060297Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":37,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t0f86c78920adfa.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t0f86c78920adfa.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21230\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:42 GMT\r\netag: \"69300b76-52ee\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1132072\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bvdzIuhkdI8%2Fr%2BF0wwxWWXr6TcvTBZNJVWs7PezE2zfm%2Fc4RuEuv0s28OaDcAPmrtVYCkSfix0c4jnNP5Z%2BpAgj87Tz%2FAcwgKFsWCRbDxOQ%3D\"}]}\r\ncf-ray: 9ba69394280d56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21230,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"a5d1b83efda363337c7a22bceccd16df","sha1":"06d4a38887a4c5c22caea0039a67b4af8a1e91eb","sha256":"eeb0ad48c0afc9628706589122e1c30e4c9bdb4109de5c3f27136a06416ca77a","sha512":"515cba51bd59231b30f5d4e5c20fcee61405d0aee14ffa0be5b01f6feb2ad402ebcc49bbec01a79f260df2637765637c3081c00a8fc8d1711701c9e2b6660874","ssdeep":"384:C8PAKcQPQ2PNtdWJcfyd/5Le5YDKhBGvgxJnReyEbSnxKXQF1/FuWQX8QYvmzP7Y:C8q0QJUU/zKhBGvgJXEbSndwykF8yn2","tlshash":"5c92d06dd91e02b37583a64c3179dbe8a8b3224bf9da884720db5afc90f145470cd36e","first_seen":"2026-01-07T21:34:29.061418Z","last_seen":"2026-02-22T14:15:55.604279Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t757a6f37983dd1.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t757a6f37983dd1.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21031\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:10 GMT\r\netag: \"69300b56-5227\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 7\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n2uU3jta%2FxduErLbMQQVznUfsrG29yR4MXvpA4tGTNcUcZ%2BVcCWyEYXAdn9DtED2llx0pWrG8ySR6TtOFWp3B8EWwB26BMz0YU2vSFQu5YE%3D\"}]}\r\ncf-ray: 9ba69394281056c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21031,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"c1d5763291aa1d4aed73bb1b1b7bcf62","sha1":"5c69edef5bb7e72e3c372978f1e686209cdc966b","sha256":"fe0b9312f921e1ca449049f324df65febce987a237dbbe04a054dfdec3e627c2","sha512":"00f7e45a6990becae9733d1515ff65969b4d05c0bebfd04dbaa83fbf7ccf0c23a0c069c08698707bc774785b5e2ed350e8fa37e61d80f518c595902a7e0a41c4","ssdeep":"384:T3ZCemp0pjEhFH/TL9EKtoNjm4t3EG/qGx05YD4lAzHa3BUc+:TpCxpugXfGoSFyZG65ln3B3+","tlshash":"0a92e13747489817afb24924925378f3bfd086e91cbc52c0abc07dc8aa585be1ebe051","first_seen":"2026-01-07T21:34:29.062368Z","last_seen":"2026-01-07T21:34:29.062368Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":32,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t0f250e63ddf8f7.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t0f250e63ddf8f7.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22668\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:06:01 GMT\r\netag: \"69300b89-588c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1167591\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gs0rfAEt4%2FLw4FCyp7KJuuq1N5XoA4EDuDjq%2FhpdaMa68aDa5V5PeRz0YPLsHX7zGxDY60Vzs%2BnHjkq1EtpXxxwC86LYOaZOdlSwYnJq%2FSw%3D\"}]}\r\ncf-ray: 9ba69394281456c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22668,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"7d41fc3867dfe7123c6984d3c94aec1a","sha1":"f9635da08082709a261977afe63bf7860025381d","sha256":"180a10a0018f3b9ebedb60b02f9f08a7549e1703186a0db921d613d76bf18c54","sha512":"d4a7e27d25e3a483e6f46b9c46b8c81955d8a3cb756a54ff313d3cb15d1f4385d400d90b5e734958ff56c5d647e7f295d416ffec369875cb9f328717b8eea539","ssdeep":"384:D5WxSu/YmipsDeT97doZH2YfFE1A3tHpaa5+H9ZwUQqHcdHpWw+hxZ:D5WAugdseo/fFOAXapdZwnHU1","tlshash":"42a2d089893cd709d5e809ef38cc7341d0c7d9389be23acca1dad5e50a5afe7b490069","first_seen":"2026-01-07T21:34:29.063308Z","last_seen":"2026-01-07T21:34:29.063308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":33,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-tfa8b7f65a6a93b.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-tfa8b7f65a6a93b.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21607\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:42 GMT\r\netag: \"69300b76-5467\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1138632\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eSzDfcH%2BKtheXbTZPH%2B6vmrZotakhCYUmW4Y2zs7tivNvbjuIQIwdmJSLfF4vlZbme8we5sEPsQmiH%2B9aTMX0TuZ%2F415et4mkGGMaJv8r0o%3D\"}]}\r\ncf-ray: 9ba69394281956c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21607,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"b83916bcd5ac450c4e94a5f1d0753db8","sha1":"3a17473e269ad6136c05eb2a6b57e0717b5ea427","sha256":"1ea31c9b0d8a15c4b55bca13f43c7c8388b39af0e4fc62ca2ed02d4f5ab00cf5","sha512":"7d7c9c30fc143d09078d3ba8f92492e88052ebe345f227bd4cc21d82c07d6f441e43ff94fb701f8a7d5b13c5a7d2d2de41ee1941a5e972ea5210322072d3f4ae","ssdeep":"384:1lHc+12ibhIJcyIg8Tr56E6ScgEhItYinssLVxPxiHs+DQrBLVVipRvpuUEdkHG:1lHc+12ibGJOXr5pghqYinsSVlxg9Qrp","tlshash":"aca2df70b0cf83e3e463e0762fe2ebea9f262f905c995ca988c055cdb1136675683535","first_seen":"2026-01-07T21:34:29.064135Z","last_seen":"2026-01-07T21:34:29.064135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":33,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t3c0644a6e8827c.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t3c0644a6e8827c.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16716\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:42 GMT\r\netag: \"69300b76-414c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1054824\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f3iENy7ap7qBpicJ1AthrOD2kRHGFDwLf1TeKBi9x7%2BEtOvc5ibETnti1UX2hw%2B5sovNZn95tqgMDWuYXkjYN1G8xhsd6Rgv6ShVfarh614%3D\"}]}\r\ncf-ray: 9ba69394281c56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16716,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"0d7d762fe6d8796f0567c587405bfb38","sha1":"1ae50f315a46412806676f61807317d1d275632b","sha256":"a1bfed1a6a1bb24ee123998dc2e1602abc212e4adb0e6a94495e429132f69727","sha512":"58124ac92e50b8a9289e289f3c9f548d2c67d8d96f8e82e54d8ec6ba6d35f09b0a9667174bf6a7c9ff8de4aa9ea749545e1c2a6d3d0fc92df198f6eb8fd789c2","ssdeep":"384:PVpztTqqwoEeQAqFEc4e1hOztyDuz8QpQEywKZ1ylT8NHItQE4t6f3d8B9AUA:PVxlwosV1iyD+8Bdmd8BItQE48KBW/","tlshash":"e372d01e6b8fbd56813300bd51a6f5080fa05188cfad4e759fd438fd2eb226054057a9","first_seen":"2026-01-07T21:34:29.065389Z","last_seen":"2026-01-07T21:34:29.065389Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":35,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-tc1e1b53b18f5bb.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-tc1e1b53b18f5bb.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20206\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:10 GMT\r\netag: \"69300b56-4eee\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1172500\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eayDf%2F3DoXcSgFBd3nnSiMQBMxqYoNk6jk1wYuyM04R5lM1HSHdbQ85IK7%2BxQDTb%2BWlHys6bEBIvWdsnko%2FldE9qn9qsgg88zTnS2OLsIsw%3D\"}]}\r\ncf-ray: 9ba69394282956c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20206,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"81c52e91ed893ab442d837689ed7af03","sha1":"2cf97d78d7dac4893ac140a0d551790d3cf399aa","sha256":"a2bcf01db58cbf04d4b39745228917157576b60e84cc48dc7df2ea71d7694f0d","sha512":"f11d85255c3f63072aa37f58e892bc69e49780bc3ca47a3fe341a0770ccd846426a758af5ad7e7bc8c4e59a93d17967e98465f595868e23772ca5e28293de9cf","ssdeep":"384:rhgklGPBSrCZdmaadm6YtdPpLGzPYKtCz6pXPQFO6/2EegLAYu89:dgkly1jAWdPUnCsXPQFOqxbr","tlshash":"1592c0b2d161b84fe352697b2a1849ac83aa5d18d772e4189c4572e4c179c70efb2ec4","first_seen":"2026-01-07T21:34:29.066429Z","last_seen":"2026-01-07T21:34:29.066429Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":35,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t9f174d472d1421.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t9f174d472d1421.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26239\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:10 GMT\r\netag: \"69300b56-667f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 273\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=apjz7y3gCczS7%2FxMeaVVLr6uLUywFYVDdk4v%2Fhl97Wtdo9aH9LmZ6j%2BIHdR9BkPEEYO3HMG5bu6oMKQGZBGFRI5%2FGFNYNKMxEQujxoHb8jc%3D\"}]}\r\ncf-ray: 9ba69394383956c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26239,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"69e7a61630ff9d4b6d2be55412ac224c","sha1":"4ef1f517781e69846e0c02a2772b79136ca52363","sha256":"7f6ea431999e3f7470f1baff14c08dd4ef6666fe26e896a54f1316a6760a3db3","sha512":"4eab5b68bb7fac4544b803a4e33797d6a0d75fbd1822beadde91ba9ab7441cd138d49573139f8936c6a69ea14bdd799590a27b2d957091d861889d75dda5415c","ssdeep":"768:H7xlG4nQG9u3msh2MUAIuXdAImqsM+KR8p20a3aU02z:bvQgu3oMUiXdAQoKq20aKiz","tlshash":"27c2e046e0b0fe24e12c66bbe15f23e5c0adb4d9866b0971a4f3d1ebdd00c96a9c8355","first_seen":"2026-01-07T21:34:29.069931Z","last_seen":"2026-01-07T21:34:29.069931Z","times_seen":1,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":40,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohsexylist.top/","fqdn":"ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"162.120.71.2","port":443,"asn":62240,"as":"Clouvider Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T21:33:57.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 09:16:26 GMT","end":"Tue, 03 Mar 2026 09:16:25 GMT"},"fingerprint":{"sha1":"25:91:9F:BF:A9:4E:27:E9:FC:63:59:F0:21:26:C8:CE:D8:F3:F2:9F","sha256":"24:24:C4:24:35:DF:C9:18:F6:9D:60:1B:7C:50:35:D9:E3:CA:42:0B:41:3C:D7:B9:08:49:3F:34:B6:FF:7B:3F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: axtid=3f87c138-81b7-4baa-a2a4-a927d76595df; axtsd=fr\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Jan 2026 21:33:57 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 3753\r\nConnection: keep-alive\r\nSet-Cookie: axtsd=fr; expires=Thu, 08-Jan-2026 21:33:57 GMT; Max-Age=86400; path=/\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22759,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (810)","md5":"e35ed1488e81d3500784870f6bbd71b0","sha1":"4cc4599948400d2ccef125ac89cc5e33719cb74e","sha256":"79fb0b0c865c14dc98f9ae7233464d56e81c21e48b99558e2fc0a5b57d5d8c4c","sha512":"bb407f44d8418724f7f0d400661918cdbe13bb4adb5af702d9e915b1236dc9cd808b99682de0428aa66f2ee954a6ee19f2fc6437eeca9da7e01021a7cda207f0","ssdeep":"192:ebHobjZXgbKyNoKCKUK7gQKnKrKCKSK16KLKe/KIK34KxKJKwKQxKrlKoKnKgKt6:uAwhN+h1Mf++RQiVzjan","tlshash":"2ea2fa9047cd4dbf051223c2da6067b8f48b5d22d59345a3e3bf93c642cdd82b67b49a","first_seen":"2026-01-07T21:34:29.070918Z","last_seen":"2026-01-07T21:34:29.070918Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t21622059554038.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t21622059554038.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25773\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:33 GMT\r\netag: \"69300b6d-64ad\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1172500\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DLzGxViaYcFSqRsvUHR9QgBDYm3GZzSNAdYRDp437%2FjiQ%2B5xY8lltO4pUo511QG4RICFkMT%2FLX4JMfvvkQ%2BHu1OzBJGJNcBjZ221yFiH7Qk%3D\"}]}\r\ncf-ray: 9ba69394385456c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25773,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"19dfdf558e181f6659a142133168338b","sha1":"7a4c83a47301b9fdce49309e093cda1723da95fc","sha256":"5d94eb1f828f20ee4d580cb13d30379be5fe6d76b7ba76ecd1c71bec13eec5fc","sha512":"50a5f4b9ab0192037c6dc52b99ef691463606773568a19ddccab64c200dc606f28dd0c819de2f585a49da76a4e6556221a98f16c760bf34fd36c8d7e470b3182","ssdeep":"768:aJnSokML3v1F+zegO+3VGxLTB/c5K79tzxrzw00i:aJnSokMLTPOFATBU5Y9dtw00i","tlshash":"d0c2d1dfdfe3ff42d2725492ee328488b50bba931236634c9e9894d1dfa0b49484449b","first_seen":"2026-01-07T21:34:29.071915Z","last_seen":"2026-02-22T14:15:55.586439Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":39,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-teec907dfb0742d.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-teec907dfb0742d.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18060\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:10 GMT\r\netag: \"69300b56-468c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1093514\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XeRYCGrS13zlm2V3RNRLZuI5sP8PeAFH1NIfCWSihltblgiZfXwnaoPzB6KaGhvdVzq9L%2FkO648xGY4HeBI2GEcz4yYaQ9CDHqchId6gKv0%3D\"}]}\r\ncf-ray: 9ba69394180556c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18060,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"9adc86e070d2f244c056bedbeb51ba93","sha1":"d95b9c5d88e98eaf0bad6f9a756932e9c6b5d212","sha256":"ce5cc5fa57cfe5c198ade5cc7ddf739c0b87770a9d5d5da66331c4d71f6d78f3","sha512":"72a1dc710f1c2cafc59c3ea8ae83c9ccef4e1926bd101cd8e844830f9270a7a7d459a62e206640254048c30c77661db839f77becf7dcfd9b524eb48846f5dc9d","ssdeep":"384:/4F+HFwqPd34D0996usZS7/glDjLJVEZ0n2+ynJjq6GP8cak0Rf7d6KV:/4l+w094wbglDBuZG2JJc8caky56M","tlshash":"4d82d0000f3419958d16edb2d44c669043dfe8845482dd97faf2f9e2e2d38a13c9ee69","first_seen":"2026-01-07T21:34:29.073063Z","last_seen":"2026-04-25T18:19:44.970752Z","times_seen":3,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":37,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cdn4ads.com/aqW/wpKB/tjson3.min.js","fqdn":"www.cdn4ads.com","domain":"cdn4ads.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:58.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1037973644.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 14:38:09 GMT","end":"Tue, 10 Feb 2026 14:38:08 GMT"},"fingerprint":{"sha1":"A0:57:5F:15:42:AC:10:94:C2:93:0A:71:50:CD:A4:70:48:15:E8:4D","sha256":"18:6A:15:2A:B8:EB:FC:88:BE:D9:89:BC:69:B1:A5:B3:99:8B:A5:20:F5:5C:BF:69:F8:63:94:75:61:B8:80:0A"}}},"request":{"raw":"GET /aqW/wpKB/tjson3.min.js HTTP/1.1\r\nHost: www.cdn4ads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ohsexylist.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ohsexylist.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:58 GMT\r\ncontent-type: application/x-javascript\r\npopads-node: wb9\r\nexpires: Thu, 08 Jan 2026 17:24:50 GMT\r\naccess-control-allow-origin: https://ohsexylist.top\r\nlink: \u003chttps://cdn4ads.com/\u003e;rel=preconnect\r\ncache-control: public, max-age=604800\r\nx-77-nzt: EwwBX63NDQHXFyMIAAwBuUwKAQH3TAAAAAwBJRPCVwGzgToJAA\r\nx-77-nzt-ray: 2a494a155e603eda6bd15e69f558382e\r\nx-77-cache: HIT\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\nx-77-age: 533271\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":41922,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1568)","md5":"ee01cbd9378f22cd39d70d51b5b5e9a9","sha1":"9d2dcf4f9824c9406433ff39175a352c3f3ad1df","sha256":"f33801610e3365f9a11ba5cb84d1cb4f50460a13dfb6203f06042cfe9551e429","sha512":"1963e92f9774381148b84a8397f425c49f8690dfe9114a7aeb441f65724d7fbbbd47ba3f3ecce3efb0ddf5c2e2cd799e2bac5bd21f40f436a373e857cc29de69","ssdeep":"768:bt9rqAYKKuZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCbD0Cntlqod:bb9ZzFQ9JsTgZvfzmMzhYrTscpJZw","tlshash":"f2132aaab286282601e741b9503fb316b23305167912d458fcb9cdf96e3de86117b7fc","first_seen":"2026-01-07T21:34:29.074192Z","last_seen":"2026-01-07T21:34:29.074192Z","times_seen":1,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":53,"dns":46,"connect":6,"send":0,"wait":11,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-tc03a91b678b747.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-tc03a91b678b747.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26123\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:53 GMT\r\netag: \"69300b81-660b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1504387\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tcvGtsFqG88bgQ8hZJ9LAwUCOpQXIpGG%2FIzgNLnUJefo0fk8w5oJYUvgMzQsdtdbEK0u6BgdUlHGtM4kmnSxsaJT64ekpYOmeK%2FCoWjKclI%3D\"}]}\r\ncf-ray: 9ba69394180956c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26123,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"8c7329d2b34eeb1ec3f77058ef609f1d","sha1":"0fd2ce0b74b4760a7b595d90fd0dcbb6c9e285c3","sha256":"13da4e94f08b16a71a9635fdb8353a1fffa0f0cd0210e9a17764e107f918b175","sha512":"a71c46db7398361505febaf7bce84b33ec2dcb65f03a8dc7face621f4d4405126e522f538e312713a0a4e42a506197a812cfafdbd2b3d204079a05f96f003515","ssdeep":"768:t3Dl8Xmc8G4HzZV7VgGLB1zA+bNDhxAh5fnGZSr:hDaXEzZfLLBBN1Gegr","tlshash":"4bc2f10056d2da444c5a71a0d06b1ecfd2efcd76eaf2785cf08b50e9c70cb9d924b929","first_seen":"2026-01-07T21:34:29.075785Z","last_seen":"2026-03-03T09:53:07.358265Z","times_seen":4,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-tb802661939a641.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-tb802661939a641.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27439\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:42 GMT\r\netag: \"69300b76-6b2f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1172500\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dIXK719Ury9MQnR9Zm4L0wlcT2l1HOIa%2FNkruiZl3AoFzL1U%2BQf38ZiBW7SIYU0EHQr7VaE%2FJiAQtR8cz9o%2F7y%2BeR1kIWTApAllGY3TEahA%3D\"}]}\r\ncf-ray: 9ba69394281b56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27439,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"d1a25b477ceff6cb83e50b726546cf23","sha1":"054ed58103a5b5e6c15e712e4418e57243e75328","sha256":"a2e457640de10c4a2a0a5aa3c107ad690c17e291cc479d8b6cdd57e209969ae4","sha512":"4b9448e3926b2e6aa8f633f131f2f0fd159ff79392731801d984e5c4b924cefa536bc3a09ca030ec26975db69d6545cfd2cd49433c17ee1fc1e84d46036709e9","ssdeep":"768:Q4fWFLf5kjlJbkszv8GL9EJgvCNFpl32sQZ:QzFL5WlJbxz0GxEJgvCj9k","tlshash":"c1c2e16fb4cc98287d14ff749961444e60d9380a9217cb87db20d4ed242572addce0db","first_seen":"2026-01-07T21:34:29.077167Z","last_seen":"2026-01-07T21:34:29.077167Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":33,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-tc53b3a81095cb0.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-tc53b3a81095cb0.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 42546\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:10 GMT\r\netag: \"69300b56-a632\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1124623\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qyb7rUGWTWlPW5w6K5HnYAH7Ig13Y2NOCBp8t65MWNyFRHhUzhceQcyZEWNr3Rtl54nUTNrvj3CsFe7CkU15rSMMPBXv0wFwUr%2BjPB9Ka2A%3D\"}]}\r\ncf-ray: 9ba69394383856c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42546,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"b0dd7af9460a8d9485f56c4835eb88e8","sha1":"6e31e8852bddb6f4f7be4cfa19a9a6509f3251e1","sha256":"e903abf9eaa4050cd3edea94922b427ea2c6a605f07373fac31e395a284f0d53","sha512":"c8817ab4da1d2cecbf51c15d6a2d5dd5ce16aadb68658f0afca4faceada38c16fdc5a7a4e30c2e8e1aef6cd6ee662ed0301bd049fd8dc2bf62648cc2ffa59e26","ssdeep":"768:oydVxM8Dsj1htZ1XL9gLkXdzIOWwpfwMZVzIJDPnWUEPmOuhJf:oyVifZ179ldzBlwAyJDONPmOuhJf","tlshash":"b913f172fe115b13fb4f32960c4e002bd3f0d62a1a4113ab8ab95fd41617fb9d29830a","first_seen":"2026-01-07T21:34:29.078667Z","last_seen":"2026-04-25T18:19:44.925094Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":44,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohsexylist.top/favicon.ico","fqdn":"ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"162.120.71.2","port":443,"asn":62240,"as":"Clouvider Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:58.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 09:16:26 GMT","end":"Tue, 03 Mar 2026 09:16:25 GMT"},"fingerprint":{"sha1":"25:91:9F:BF:A9:4E:27:E9:FC:63:59:F0:21:26:C8:CE:D8:F3:F2:9F","sha256":"24:24:C4:24:35:DF:C9:18:F6:9D:60:1B:7C:50:35:D9:E3:CA:42:0B:41:3C:D7:B9:08:49:3F:34:B6:FF:7B:3F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: axtid=3f87c138-81b7-4baa-a2a4-a927d76595df; axtsd=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 07 Jan 2026 21:33:58 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-06-04T17:49:13.411081Z","times_seen":521687,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re:2087/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:59.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ohsexylist.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ohsexylist.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 21:33:59 GMT\r\nContent-Type: text/plain;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://ohsexylist.top\r\nAccess-Control-Expose-Headers: *\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":105,"dns":1,"connect":28,"send":0,"wait":30,"receive":2,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"7je7m5wphnod.s4.adsco.re/","fqdn":"7je7m5wphnod.s4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:59.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.s4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 09:14:21 GMT","end":"Wed, 11 Feb 2026 09:14:20 GMT"},"fingerprint":{"sha1":"7A:03:26:53:17:4A:DA:4B:6B:97:17:4A:3D:39:18:9E:5A:E0:99:3D","sha256":"BC:B6:01:45:97:52:31:7E:50:44:A4:6C:B3:E7:A3:3D:8E:5A:1E:32:79:2D:E0:BF:94:ED:5C:36:3A:0D:94:6E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 7je7m5wphnod.s4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ohsexylist.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ohsexylist.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:34:00 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Tue, 03 Oct 2023 13:29:59 GMT\r\netag: \"651c1757-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-04T17:49:05.69935Z","times_seen":16118648,"resource_available":true,"data":null}},"time_used":1113,"timings":{"blocked":-1,"dns":353,"connect":187,"send":0,"wait":188,"receive":1,"ssl":383},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:34:00.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"POST /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 2742\r\nOrigin: https://ohsexylist.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ohsexylist.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 21:34:00 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAS-P-1: OK lon123\r\nAS-P-2: OK\r\nAS-P-3: OK\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: no-transform\r\nAccept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\nAccess-Control-Allow-Origin: https://ohsexylist.top\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1212,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (1212), with no line terminators","md5":"0ff6bd002f7037e0c46126e47ccc2183","sha1":"a9af45f8965c96b5d76a06dc9710162266567342","sha256":"9adee9fbe3dad8f5d3f4863c2ce91920a176d90c5d678a78b130ed6f73168df6","sha512":"76368fe9ea5a422495add9d4a837e9a3421982b9f936bb9583050db92d76f3c72c43f0043b1213f854d7d1f6ab52b9b248444826dedde18bd4634b879d7a85bb","ssdeep":"","tlshash":"022184432a014d0966e6366b488d61df0c7158cbfc4ba523869a81b2aacaa1ce41be5d","first_seen":"2026-01-07T21:34:29.081137Z","last_seen":"2026-01-07T21:34:29.081137Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":85,"dns":0,"connect":26,"send":0,"wait":50,"receive":1,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-tcdba071c54d23b.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-tcdba071c54d23b.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22367\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:53 GMT\r\netag: \"69300b81-575f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1126232\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KIqE%2FrozJvpqGhO1b9UAzlTiR8Ok0mHpDkQp%2Bz80cQpRjHAfxKSTxgtw4nNJDYCgTstEoOKIA4PGARInuywGLY1f%2FZ%2FIPPImjuGAOyh9REs%3D\"}]}\r\ncf-ray: 9ba69394384556c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22367,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"42e75f0d744c5142289cd85ed1313c77","sha1":"442296e0e630a7d7fc1bbed8b73267591c3cf1a3","sha256":"dd7634aa1481d5a1dc8435606ac40b5c2ecb0bb8e7e49357123741510898a42d","sha512":"d5a553505cd2b50cf01f0d4375ff2570c31ccf9b1ca26873ed72eba9663f15621f5074d887d89baa0efebd3cc58d323a0d12b802de36b4d067ecc4c83ee72d6b","ssdeep":"384:XBmZa/rOTEgKW/ZAKZHKGMhe2cNeJzltimdCua97Ud6v1O3MrvEYbzD304:XBh/UEg7ZAqqp/Jzlw2Cu+I6v1QMjEYJ","tlshash":"62a2e1c2e233fdadae34db3195a00c3561bc1d0c7e521360fe0057e2999a499b817bec","first_seen":"2026-01-07T21:34:29.083976Z","last_seen":"2026-02-22T14:15:55.559119Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":39,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t1c2ddb07628355.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t1c2ddb07628355.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13544\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:33 GMT\r\netag: \"69300b6d-34e8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1091587\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PqtcYAySTCI%2F2gKrxxR1SNKeZIRKO8aNyMUFcXmyZEq3JZIWN1A27w9XAAC4W1XyVk0oW0thAaGNZheZ2ivlwXKp%2FTICerehRLOvqrWlduY%3D\"}]}\r\ncf-ray: 9ba69394384956c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13544,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"f2055d6b9a4d1cf9532ccbdb103a62e9","sha1":"282d86e42d175ecc96ee0dcfed6782d313bc6e59","sha256":"de26ccfbe1fb9fd57af1ef996f6de18c06135641b7902c7f0b3265509139cf37","sha512":"ffeb00ebdbe787eba580c613da28249bd70a3a3c4ecde0ffc47a457c175fa5ea480d48c107940250a1dfc788236978c6ff999414e5ee311ec5cfc327fdbe6e69","ssdeep":"384:eKbckX2JDDgLWgntKJ5NVCV7FDtHs6poZmYlwY8V4:eKbc4wgLWgngNgbDtHs6poZuYe4","tlshash":"dc52cf5543229928ccb062e9313aa4fd030fb1602256aecc8f79e7e7554172d2f0ab38","first_seen":"2026-01-07T21:34:29.087828Z","last_seen":"2026-02-22T14:15:55.574319Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":39,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t97a2f7c6413f52.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t97a2f7c6413f52.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16311\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:33 GMT\r\netag: \"69300b6d-3fb7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 891138\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SpMMafPzX%2FFZ2bRbO%2BWm1IUocsJCCx9YElcSIQSMeigQpIymsPEy5%2BojDxvYMk205fffAn7iAGFsZK9at%2F%2FeRxymJwgZFcc167T4UWXie6w%3D\"}]}\r\ncf-ray: 9ba69394281156c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16311,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"de7fbe9cfbfc989cabc8b960edf62f94","sha1":"1ed3ad4086302ab35bbaa53dd1dd486f8b1c90f2","sha256":"e86ed1bef582cf04a12bcfc8c64adaf7751cac64d5f72d3d84a7cd94fe84a229","sha512":"8c8d118c79a209f92575e199d951db10d2a36d3646c8551091d04528bc943380874b76626cb7197859bdaaecf145e8a29001b591d6274931b724c8dc910e83bb","ssdeep":"384:FgnSumy933Nhr52eOayf8I7WTNp4i8UGSrDT4iln:FgSE3l9OHvWTYXSnLn","tlshash":"f372e0965bbc1116b4f4d14a9b5cc85706b8bfa73482700852a3b4efd05eb23e700e3e","first_seen":"2026-01-07T21:34:29.088889Z","last_seen":"2026-01-07T21:34:29.088889Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":32,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t03f37f65cc203e.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t03f37f65cc203e.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21825\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:10 GMT\r\netag: \"69300b56-5541\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1145388\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xjKDaEUvJEVhRaRWxfYBVsarEHVjFXM40nOb4lfbZjV1uFdAXGQQSNRQwTa%2B3k%2BbUZ%2BhteRI5xOQNWkXA7vj%2FSEahhh1HGaIWTN5xM5P4dU%3D\"}]}\r\ncf-ray: 9ba69394282756c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21825,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"67a72edadfbd9c109c2abbb4163522c0","sha1":"2424262e710bbbdfef938317c2a6c54973f25ac1","sha256":"0035d69a619aaa30a9c40ba13c61c2fb1c512e5dc8e6e1720a60910d582efbe7","sha512":"e78d3efd6c2bcb3e9022756d63761556bb955f3b6a8fa87d5d785d8e7fdb3cb3bd60b055d9daa2adc56d024782064b05ca6ff8564a10968dd06d5f55e4a85fb7","ssdeep":"384:L9Yj+hYw/9uP121TQ7NiwA/FuZRhTxZEUyZTFfRS3PoGG8WUpyQ4NU/tiIYrl:L946Y5g1khi+RhPVLvG8WUpyQ4NYwPl","tlshash":"1aa2f14b9e4cc44f610f66b11e19b2d430bb7297eb209b7ca51532d6e03c2dbeb1c598","first_seen":"2026-01-07T21:34:29.089923Z","last_seen":"2026-04-25T18:19:44.893178Z","times_seen":3,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":35,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:58.835Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ohsexylist.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-04T17:49:05.69935Z","times_seen":16118648,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:59.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ohsexylist.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ohsexylist.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 21:33:59 GMT\r\nContent-Type: text/plain;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://ohsexylist.top\r\nAccess-Control-Expose-Headers: *\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":114,"dns":1,"connect":42,"send":0,"wait":30,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"7je7m5wphnod.n4.adsco.re/","fqdn":"7je7m5wphnod.n4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:59.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 09:14:20 GMT","end":"Wed, 11 Feb 2026 09:14:19 GMT"},"fingerprint":{"sha1":"FB:34:12:01:B6:D1:B3:BD:9C:64:10:4B:29:6B:C7:44:FD:21:82:69","sha256":"D8:BD:52:A0:9E:11:2A:7E:51:D4:43:1D:9D:F7:F0:66:68:70:DF:0B:20:4A:38:60:4C:B5:37:82:2C:42:01:6B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 7je7m5wphnod.n4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ohsexylist.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ohsexylist.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:59 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 16 Jun 2023 08:37:42 GMT\r\netag: \"648c1f56-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-04T17:49:05.69935Z","times_seen":16118648,"resource_available":true,"data":null}},"time_used":889,"timings":{"blocked":396,"dns":131,"connect":88,"send":0,"wait":89,"receive":0,"ssl":181},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-tc7aece9a73bb03.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-tc7aece9a73bb03.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23228\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:42 GMT\r\netag: \"69300b76-5abc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1172500\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bj0p2EIR2LfgLTRlJAU28%2BqU4qkIlKwDoEg6cvUQsFw9SDE4eSHFxTpO%2BfqC54dfJmCqvhxTh1SByag%2F8kPBsmoQ7VtC%2FCsUViQt3E%2B6miw%3D\"}]}\r\ncf-ray: 9ba69394384456c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23228,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"66faec1e27c2356247884d18c0c7bee3","sha1":"6d283df65cb1fa0f0fea0c0a8a732f586eb03315","sha256":"371fad2def3d74854925866403503b6629fe261c239f7fc47e7abcab4e7a95c1","sha512":"21e1116879a0a4a4e93bb61361dabb21c5ec146ffa8827ce427f47559437cfc37e86e831046d08d99bb134ebfcb22a0ea4b3a5d86ee58e1dc95193e4562a6596","ssdeep":"384:fiCpalg6eIfD0KIsIqDvtvzXa42bklnOFbs1egHjqdxI5gMVwy3Fdc0MFXFR:fiCpalTfAqDtvzq42XFboegud+FhqVb","tlshash":"21a2e114f8e426b5518c8bf015237eb6ab41cd1022bbe8549e697fe61e20c17ee4f352","first_seen":"2026-01-07T21:34:29.090743Z","last_seen":"2026-02-22T14:15:55.584907Z","times_seen":2,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":39,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ohsexylist.top/tf-t0a2822494a790a.jpg","fqdn":"cdn.ohsexylist.top","domain":"ohsexylist.top","tld":"top"},"ip":{"addr":"172.67.199.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ohsexylist.top/","date":"2026-01-07T21:33:57.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsexylist.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 03:31:13 GMT","end":"Mon, 23 Feb 2026 04:29:56 GMT"},"fingerprint":{"sha1":"33:57:F7:1E:8B:CD:FB:4E:E9:11:85:FD:D1:63:5F:4D:F3:E0:31:12","sha256":"B8:44:78:0D:9D:73:CC:9E:00:0E:6B:E7:C8:9A:C4:AD:AB:B1:BC:09:56:C1:5F:FF:C7:D4:0E:96:90:07:40:D4"}}},"request":{"raw":"GET /tf-t0a2822494a790a.jpg HTTP/1.1\r\nHost: cdn.ohsexylist.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ohsexylist.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 21:33:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20745\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:05:53 GMT\r\netag: \"69300b81-5109\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1129029\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=24USaeshrIRmtQpSInqMF0924IVTYSY1DEb%2FmepfP1W8diu7nsg5aRUDeBmyaicL1W90Qv1zr2asLvV11mN3IYyd92esRjeLAo6GjYIHcvk%3D\"}]}\r\ncf-ray: 9ba69394384756c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20745,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3","md5":"6cbf6d2b400dfde8244f9ac3089a5b46","sha1":"6cd382934a7caf2299f578e28113556441db1f0e","sha256":"daf0a1fe555ed2088ef3b496cfef9bbe895fd596e27741afe858398afcf7e01d","sha512":"86a6cdf52cf0790de8c6e763d3cbb4b7b2f9a248e16f4b8442c840c5ded612deb31764d4b5ce9215cb3b576f680bc7af8f174833b9c75c17e4f20605071130ca","ssdeep":"384:Lip1jkRzEtD0n/8Csv9cer37WwK/5X1ic2+Junq/NijMX+:WAzEN5Lv9cEywE5Xgc2fnq/oja+","tlshash":"2192e13c44f79077e941e9970ce7b46b35608688bcf1a681a59bd3ac7c8f2eb604d4b4","first_seen":"2026-01-07T21:34:29.091769Z","last_seen":"2026-02-22T14:15:55.607792Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":39,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"cdn.ohsexylist.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}