{"report_id":"0fbca1ff-d0f3-4916-ba96-c4de0d0b0e2f","version":6,"status":"done","tags":[],"date":"2025-10-08T03:32:50Z","url":{"schema":"http","addr":"richardlipsey.com","fqdn":"richardlipsey.com","domain":"richardlipsey.com","tld":"com"},"ip":{"addr":"172.67.193.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"richardlipsey.com/","fqdn":"richardlipsey.com","domain":"richardlipsey.com","tld":"com"},"title":"逼痒滴"},"submit":{"url":{"schema":"http","addr":"richardlipsey.com","fqdn":"richardlipsey.com","domain":"richardlipsey.com","tld":"com"},"ip":{"addr":"172.67.193.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-12T03:32:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-08T03:32:29Z","timestamp":1759894349,"ip_dst":{"addr":"108.181.20.35","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.4","port":55712,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Observed File Sharing Service Download Domain (files .catbox .moe in TLS SNI)","source":"{\"timestamp\":\"2025-10-08T03:32:29.869705+0000\",\"flow_id\":725114417937887,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":55712,\"dest_ip\":\"108.181.20.35\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2038639,\"rev\":1,\"signature\":\"ET INFO Observed File Sharing Service Download Domain (files .catbox .moe in TLS SNI)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_08_29\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_08_29\"]}},\"tls\":{\"sni\":\"files.catbox.moe\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":918,\"bytes_toclient\":305,\"start\":\"2025-10-08T03:32:29.556511+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-08T03:32:29Z","timestamp":1759894349,"ip_dst":{"addr":"108.181.20.35","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.4","port":55712,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO INFO .moe Domain in TLS SNI","source":"{\"timestamp\":\"2025-10-08T03:32:29.869705+0000\",\"flow_id\":725114417937887,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":55712,\"dest_ip\":\"108.181.20.35\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2827579,\"rev\":7,\"signature\":\"ETPRO INFO .moe Domain in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_08_17\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Moderate\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"files.catbox.moe\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":918,\"bytes_toclient\":305,\"start\":\"2025-10-08T03:32:29.556511+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"img.gayzyimage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"img.gayzyimage.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"files.catbox.moe","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"v.ddnew10.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"thumbs4.imagebam.com","ip":{"addr":"212.63.223.225","port":443,"asn":50827,"as":"SpaceDump IT AB","country":"Sweden","country_code":"SE"},"domain_registered":"2006-09-22","domain_rank":1507442,"first_seen":"2021-05-23T15:28:49Z","last_seen":"2025-10-07T22:51:36.473565Z","alert_count":0,"request_count":4,"received_data":3566827,"sent_data":1816,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"richardlipsey.com","ip":{"addr":"104.21.84.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-19","domain_rank":601374,"first_seen":"2015-12-21T08:45:42Z","last_seen":"2025-06-17T20:34:12.100486Z","alert_count":0,"request_count":8,"received_data":260598,"sent_data":4863,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-10-05T22:15:09.164871Z","alert_count":0,"request_count":10,"received_data":532176,"sent_data":4959,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"z20241124.com","ip":{"addr":"67.21.65.234","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"domain_registered":"2024-11-23","domain_rank":1525043,"first_seen":"2025-01-18T18:34:20.610374Z","last_seen":"2025-08-15T05:00:10.082012Z","alert_count":0,"request_count":1,"received_data":39888,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]},{"fqdn":"m2.cffpic.com","ip":{"addr":"104.21.69.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-27","domain_rank":0,"first_seen":"2025-09-22T16:19:53.398399Z","last_seen":"2025-09-30T08:54:23.247657Z","alert_count":0,"request_count":1,"received_data":1059799,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img.ml0987.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-05-11","domain_rank":2003221,"first_seen":"2024-12-18T15:06:36Z","last_seen":"2025-10-07T08:02:26.950853Z","alert_count":0,"request_count":4,"received_data":37197,"sent_data":1776,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tuaskbgnekr.com","ip":{"addr":"64.112.76.12","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"domain_registered":"2025-03-12","domain_rank":193855,"first_seen":"2025-03-16T23:57:53.559575Z","last_seen":"2025-10-07T04:52:04.279887Z","alert_count":0,"request_count":1,"received_data":6909,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"user-images.githubusercontent.com","ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":70744,"first_seen":"2017-06-06T20:44:17Z","last_seen":"2025-10-06T18:16:08.360721Z","alert_count":0,"request_count":1,"received_data":107655,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"int.ucloud110.xyz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-04-02","domain_rank":0,"first_seen":"2024-06-05T09:54:54Z","last_seen":"2025-04-21T17:29:19.350417Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":447,"comment":"","tags":null,"fingerprints":null},{"fqdn":"biu37.xyz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-11-27","domain_rank":921823,"first_seen":"2025-01-03T22:40:20.197198Z","last_seen":"2025-09-27T13:31:34.169732Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":473,"comment":"","tags":null,"fingerprints":null},{"fqdn":"m1.cffpng.com","ip":{"addr":"104.21.29.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-23","domain_rank":6560888,"first_seen":"2025-07-24T04:18:42.68678Z","last_seen":"2025-10-07T10:14:59.427925Z","alert_count":0,"request_count":5,"received_data":1276460,"sent_data":2248,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-05T22:12:07.052692Z","alert_count":0,"request_count":1,"received_data":425009,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.7","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2025-10-06T03:33:36.947933Z","alert_count":0,"request_count":1,"received_data":118365,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"images2.imgbox.com","ip":{"addr":"212.63.223.227","port":443,"asn":50827,"as":"SpaceDump IT AB","country":"Sweden","country_code":"SE"},"domain_registered":"2009-02-09","domain_rank":384284,"first_seen":"2017-10-24T18:55:51Z","last_seen":"2025-10-05T02:02:07.27827Z","alert_count":0,"request_count":3,"received_data":747925,"sent_data":1350,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.gayzyimage.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-07-25","domain_rank":6963674,"first_seen":"2024-11-30T20:52:24.375218Z","last_seen":"2025-09-27T13:31:33.55622Z","alert_count":4,"request_count":2,"received_data":0,"sent_data":960,"comment":"","tags":null,"fingerprints":null},{"fqdn":"poweredby.jads.co","ip":{"addr":"92.222.100.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2012-05-17","domain_rank":172301,"first_seen":"2019-12-04T10:34:12Z","last_seen":"2025-10-06T17:31:45.254744Z","alert_count":0,"request_count":1,"received_data":4009,"sent_data":418,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn77-pic.xvideos-cdn.com","ip":{"addr":"185.76.9.8","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2017-08-25","domain_rank":75108,"first_seen":"2018-09-06T22:43:13Z","last_seen":"2025-10-07T07:39:26.360938Z","alert_count":0,"request_count":1,"received_data":10373,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"img.tphsck.com","ip":{"addr":"185.34.146.28","port":443,"asn":7488,"as":"CNServer LLC","country":"United States","country_code":"US"},"domain_registered":"2025-02-10","domain_rank":0,"first_seen":"2025-04-16T19:26:22.415715Z","last_seen":"2025-10-02T18:11:33.893748Z","alert_count":0,"request_count":1,"received_data":19694,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"files.catbox.moe","ip":{"addr":"108.181.20.35","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"domain_registered":"2015-04-06","domain_rank":519029,"first_seen":"2015-06-29T23:27:11Z","last_seen":"2025-10-07T09:12:51.65845Z","alert_count":1,"request_count":1,"received_data":39925,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"v.ddnew10.com","ip":{"addr":"216.18.195.10","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"domain_registered":"2025-09-11","domain_rank":0,"first_seen":"2025-10-08T03:32:52.205292Z","last_seen":"2025-10-08T03:32:52.205292Z","alert_count":1,"request_count":1,"received_data":215,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-08T03:32:29Z","timestamp":1759894349,"ip_dst":{"addr":"108.181.20.35","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.4","port":55712,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Observed File Sharing Service Download Domain (files .catbox .moe in TLS SNI)","source":"{\"timestamp\":\"2025-10-08T03:32:29.869705+0000\",\"flow_id\":725114417937887,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":55712,\"dest_ip\":\"108.181.20.35\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2038639,\"rev\":1,\"signature\":\"ET INFO Observed File Sharing Service Download Domain (files .catbox .moe in TLS SNI)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_08_29\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_08_29\"]}},\"tls\":{\"sni\":\"files.catbox.moe\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":918,\"bytes_toclient\":305,\"start\":\"2025-10-08T03:32:29.556511+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-08T03:32:29Z","timestamp":1759894349,"ip_dst":{"addr":"108.181.20.35","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.4","port":55712,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO INFO .moe Domain in TLS SNI","source":"{\"timestamp\":\"2025-10-08T03:32:29.869705+0000\",\"flow_id\":725114417937887,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":55712,\"dest_ip\":\"108.181.20.35\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2827579,\"rev\":7,\"signature\":\"ETPRO INFO .moe Domain in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_08_17\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Moderate\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"files.catbox.moe\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":918,\"bytes_toclient\":305,\"start\":\"2025-10-08T03:32:29.556511+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","size":3769,"data":"","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-03T13:53:05.141441Z","times_seen":2503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/1.12.4/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97163,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-03T16:30:55.527106Z","times_seen":78702,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richardlipsey.com/static/x_v7/js/app.js","fqdn":"richardlipsey.com","domain":"richardlipsey.com","tld":"com"},"ip":{"addr":"104.21.84.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a102535bf30cef87958e4eac628146e","sha1":"0c82e0d8d33cdf96c07839f35fae06f35c5265c5","sha256":"e07a48837d73d1cb0c77e090dc14db4723cbb7f84eabf2757a8c293d1479ac1c","sha512":"b0df210d8c0fb56bad20a807b9af035aed2365e30ca4a5dfa7566ae4f5e8a6ccc5d3289bff134d265542b79734bbe0bb8408593474f02236056a7e73f2f04572","ssdeep":"192:eGbF3nG40Irp8Pxsw+rEpnCYb273wUkdXtcxUT/R4CgCrcO5DhCOL:lF3G40VupvkddhWCgCAO5dCOL","tlshash":"1762a5c9f16aa0b542b3363a0a3f550dfa3ba877a0039258f47c44d07fb069c9652e7d","size":14534,"data":"","first_seen":"2025-01-03T22:40:24.600173Z","last_seen":"2026-03-23T13:20:56.323375Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richardlipsey.com/","fqdn":"richardlipsey.com","domain":"richardlipsey.com","tld":"com"},"ip":{"addr":"104.21.84.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"40f5d4e5649c039f27951208a7e17376","sha1":"1110881cdc813deffc8638eb61ce08a5fadc8896","sha256":"7f3fc0689f9e2d5a492eb2b290ec78cbc3d2305ca5fcd035cb7652bb41637bf3","sha512":"f271748f5342b491243dddaa4d38756ebc54e0478991408f78c364585e242f7ae8e94b04587f71c5be40a7dc703cb05a63c7d594d28bee53dd73b657534636e0","ssdeep":"","tlshash":"b7a002b7b582603c442271b41729758df9bf0954c790285957016a31a0b13d77615049","size":64,"data":"","first_seen":"2023-03-13T05:35:00Z","last_seen":"2026-03-28T15:57:02.187559Z","times_seen":249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richardlipsey.com/","fqdn":"richardlipsey.com","domain":"richardlipsey.com","tld":"com"},"ip":{"addr":"104.21.84.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-03T16:58:04.183962Z","times_seen":92712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richardlipsey.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"richardlipsey.com","domain":"richardlipsey.com","tld":"com"},"ip":{"addr":"104.21.84.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-03T16:53:21.202667Z","times_seen":359233,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richardlipsey.com/","fqdn":"richardlipsey.com","domain":"richardlipsey.com","tld":"com"},"ip":{"addr":"104.21.84.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e478afb2f9f3ec276bc4ac22698e1e23","sha1":"ae9d546cbfc4e8b7f91fe0c5fd584075e9d6d994","sha256":"531cdd0378f03a35d9f29c34add807f33faffbffddb3240eb7b897efe342aa9e","sha512":"86c97e0617f49f569c43b0900d2d17824f41574ef0612d7bda8dce3b5c3ef40b085c87c3b59b5a720d7eaf57bbec144e66279d1c5faa801fdf7cb093f3245f1e","ssdeep":"","tlshash":"1031ae0cb4c4cf2e90f17922aebe740d29567dc9271a980ba10db0668fb41a93543bad","size":1694,"data":"","first_seen":"2025-01-03T22:40:24.608075Z","last_seen":"2026-04-08T05:00:30.303842Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/layer/3.1.1/layer.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"060444af631570264c5b3f957e26f5e3","sha1":"8278c4d47ac985481da0e5efb922457eaaf1dc0c","sha256":"7ed41c1149adf244bf700213886bfe8648d164942eb68527a7476bb7955c5af9","sha512":"d18a2c4bc192c90219776b9658d1c6f7942037c90f37a5819a38f36a4a1345f742b74602989b361c78a217ab661b09e037f7d9f891fddf3152916d9cbf9b865b","ssdeep":"384:qefWYREmwZAxlh2K1mM+8leJLCgO7TKVJO7:ffBuF0lh2smMNeP4","tlshash":"1da2b46a314035a7621390a9d14fbe0f71b21d24e7174128f12af4bc1dbdda9a2b7f4b","size":21713,"data":"","first_seen":"2023-03-07T15:24:24Z","last_seen":"2026-06-03T10:40:16.09203Z","times_seen":391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richardlipsey.com/","fqdn":"richardlipsey.com","domain":"richardlipsey.com","tld":"com"},"ip":{"addr":"104.21.84.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d043fd40c83dc0df460018bad619f98d","sha1":"e8580119510dbcd4c7487c700009790db43c9b94","sha256":"123434de97cb5cd48cefae481c9c9ef8c39228c2aa6466eebb2be9a0f9aa9beb","sha512":"5fb9514e7b06016dee151472729a93a26c84ec6b6ee9bb4304d05979c29991e4570f8ca451041ab0d70916cedfca5149a84be94bb6723860e8b24ff744904b34","ssdeep":"","tlshash":"9401f1487489ac2895621bb97dbf03cc3c313d207261d1c5904cd9756520e6a242bfae","size":805,"data":"","first_seen":"2025-01-03T22:40:24.609252Z","last_seen":"2026-04-08T05:00:30.304735Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","size":37045,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-03T16:50:39.998404Z","times_seen":89615,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richardlipsey.com/","fqdn":"richardlipsey.com","domain":"richardlipsey.com","tld":"com"},"ip":{"addr":"104.21.84.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6414ce546e4a4a4c7c0ab76925749fe","sha1":"c9097d4e26968060cedfde84f25ed06a1f1205a5","sha256":"93fa875b21816a6d86b99d14414718121717fe85f51b35ae97dcb707fecdfb36","sha512":"01f0fbfb83ed0cb7b9f72f98968be712bd8e889879c59f7678b80ba6e433b44665763ac426a6783afe8bba62ff0158d778fe72f003412d4febadff5e2916e091","ssdeep":"","tlshash":"61c02b9c22030c7017f73b440bafb300b011321094941c31081133845531c03a705810","size":144,"data":"","first_seen":"2024-10-23T23:24:44.624106Z","last_seen":"2026-05-23T17:20:14.331802Z","times_seen":335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LFDMM5L089","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9841536cc20de58a5766547528ee7d5","sha1":"fcad2a8d38b044f43401478e68609ef1e18542ca","sha256":"a0e9ad0735c8832b52a7318900b1a685ed9457a6afa4f0942847a3dc746221a5","sha512":"368a8af931da02043c12074758c5c8e97be9ef82e1d406bdc66aed3e97bc5d6fc5e2528cb844919274b7d4fc4254f91c2a40e714d1ef47b97f73bf424be1b3db","ssdeep":"6144:PBRwep2itv0njCnzGwXV4rvoB6bEGBQ5w0yN+Xy:5tY8snjYGdo3zy","tlshash":"d7940ade73d674225396f478503f018ba57b28a2b44cc89af189cde42e74a9a4137f7c","size":424405,"data":"","first_seen":"2025-10-08T03:32:59.972806Z","last_seen":"2025-10-08T03:32:59.972806Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"images2.imgbox.com/fb/29/QxzvMOV6_o.gif","fqdn":"images2.imgbox.com","domain":"imgbox.com","tld":"com"},"ip":{"addr":"212.63.223.227","port":443,"asn":50827,"as":"SpaceDump IT AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgbox.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 15 Nov 2024 00:00:00 GMT","end":"Sat, 15 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"5A:6B:D2:2E:15:1B:62:D6:8E:55:AD:38:B3:95:0A:EB:B9:C5:52:86","sha256":"D2:B7:6A:32:B9:55:A8:DD:A8:54:56:C5:ED:5B:DE:60:F1:7B:D2:30:B0:AC:51:21:58:2B:B8:DA:2D:36:D5:25"}}},"request":{"raw":"GET /fb/29/QxzvMOV6_o.gif HTTP/1.1\r\nHost: images2.imgbox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.18.0\r\ndate: Wed, 08 Oct 2025 03:32:30 GMT\r\ncontent-type: image/gif\r\ncontent-length: 675874\r\nvary: x-s-token\r\nlast-modified: Wed, 27 Nov 2024 06:03:59 GMT\r\netag: \"a5022-627debb4ef1c0\"\r\nx-cache: HIT\r\nx-whom: srv1535\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":675874,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"d455ada9d08cdc3769ac6eba64258579","sha1":"398ab82e3092b46f489c3f01178ec2142458c183","sha256":"8c8ce7747169f408c7b2e0a3a0da5275d975e7c2571d8843702bce0e7d2c9b56","sha512":"3a2868334389d109715a5ee8b9333db8aae5eb7348fc7ab772f6f66d17da49b5249638eab24a788fcbe9355d6951ab11386cc5da7b8188712c61adab89fb012d","ssdeep":"12288:0cPdHxx+cldk3bj2Ib0yxddXbNMyHnrpNRVe9jBk1ynlsGLO2tIZrHXjPQCCs+K5:0cPR96j2Ib0SjHnHe9j8ynlsGLtt4HBx","tlshash":"4ae43334a3ea569d14d0d6a6c0e5f54e0380b4233b1bf7c3369a2ca6a98e07f56d0f71","first_seen":"2024-12-01T08:51:18.653526Z","last_seen":"2025-11-10T21:00:51.108415Z","times_seen":248,"resource_available":false,"data":null}},"time_used":1926,"timings":{"blocked":64,"dns":1,"connect":25,"send":0,"wait":48,"receive":1328,"ssl":459},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ml0987.com/thumb/1113530.webp","fqdn":"img.ml0987.com","domain":"ml0987.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ml0987.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 08:54:08 GMT","end":"Sat, 08 Nov 2025 09:51:37 GMT"},"fingerprint":{"sha1":"A3:D2:02:31:42:5C:E7:87:81:7C:BA:7E:3A:0E:17:ED:C3:DB:5C:0A","sha256":"44:31:8A:8E:CE:25:F7:54:0A:79:BF:AA:68:60:83:62:29:BA:96:98:A5:78:C4:F8:7A:BF:07:D4:F6:F3:83:FA"}}},"request":{"raw":"GET /thumb/1113530.webp HTTP/1.1\r\nHost: img.ml0987.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8028\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=31536000\r\ncf-bgj: h2pri,csam-hash\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\netag: \"68879b93-1f5c\"\r\nexpires: Thu, 06 Nov 2025 21:34:50 GMT\r\nlast-modified: Mon, 28 Jul 2025 15:47:31 GMT\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o4%2BbIZrp2cZaQL6z2KdlG5B5569b1jWGDpD%2Fck068l2YmCnwHXi0UiAi6U5tKBX7tYrX%2FmXeep3dbodQc%2BxuOPpelrEt%2B15nAEHKEA%3D%3D\"}]}\r\ncf-ray: 98b29248bdf40afe-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8028,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"30a628623196eb2c22b39f590b6cecbe","sha1":"c2e5c57059ec44b5ded2f94e592a26ea7ff79dce","sha256":"30d1d781b692790d9a30d02e363cd1092fdd3b626fb9659c60709ba0a047cd3b","sha512":"fb718906afac6bbe87ad42650db42f81881764f0a31d99c22d15320a30b9264659ccc9278cefaf6f3b0584f266e8a755e163d03b318d6d3ae6985d44eba6d401","ssdeep":"192:ikXACDtDYHbg3ZBthQoT2QQ0g42PRbJuGpx:VXAfkpDVn9O5Jvpx","tlshash":"eaf1ae180e024beb5433cde2c4869eebb473e58632afd79c50ad9c789f29296443c391","first_seen":"2025-10-08T03:32:59.947246Z","last_seen":"2025-10-08T03:32:59.947246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":186,"receive":1,"ssl":511},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richardlipsey.com/","fqdn":"richardlipsey.com","domain":"richardlipsey.com","tld":"com"},"ip":{"addr":"104.21.84.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-08T03:32:28.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richardlipsey.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 02:54:33 GMT","end":"Fri, 26 Dec 2025 03:52:17 GMT"},"fingerprint":{"sha1":"FA:EE:24:FB:EF:00:97:41:4D:D1:42:EA:F1:98:2A:89:1C:24:8F:D8","sha256":"8C:4A:85:64:FF:DF:88:10:97:C6:0F:1A:56:23:1B:8D:95:8B:43:61:19:C9:84:BA:BB:0A:8D:27:67:3F:6E:8B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: richardlipsey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:28 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=83QfVuRcShKPDpiWhDRJQb7m7uiqQv0ZsN9Ftm4CqOkCcSyuF%2BD5y1ZunI9dg8G6141MBImO%2FYCZueQ3DkXbESPWswN9zucDMqS0s1P8zD7g\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-language: en-US\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nset-cookie: JSESSIONID=pUeUI5XIOHvHp-PKYREnZMS2-EwMiMTOrSWBY8Wn; Path=/\nwxxu=QlU9P1luV0txcQVyTwlEcniyUH2nRvHrPQpuaFN_tl5sukVftkStslFOZlGzZ6RES4umD92mn5NcrQET6U-cvQQ; HttpOnly; Path=/; Max-Age=86400; Expires=Thu, 09 Oct 2025 03:32:28 GMT\r\ncf-ray: 98b2923ccfaeb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79990,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"dd1068d36ebd5b4bcf875629b4f5d0b7","sha1":"b1b23491548b81070dffcc1426e84eb158b664a0","sha256":"70f5db655ed1f5934ffa30b483b1b6367554fec01f3edd0f37f0ee423e19497e","sha512":"77f6757b96139593686fd8bef8c56e7652319ee6b1789a7df9ab493d7efeda3d672635cacf8bb25b28a5c05adf3c850354bdb995f7088cf9c124861a336887be","ssdeep":"1536:AycC/gi5PeFrsIohd0LgpFlzwwAJ6GpjGC5Ycd4:AyccFd0LgpIpSC5Ycd4","tlshash":"2973ea74d3c4df37419b43d09ad6e72ae482e29bcba31a42f5f1b5e24385f61ac1910e","first_seen":"2025-10-08T03:32:59.94888Z","last_seen":"2025-10-08T03:32:59.94888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":93,"dns":15,"connect":1,"send":0,"wait":401,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:29 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 16149\r\ncf-ray: 98b29241df8723eb-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb04010-1d970\"\r\nlast-modified: Mon, 04 May 2020 16:17:20 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 256588\r\nexpires: Mon, 28 Sep 2026 03:32:29 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=d8ZWqyRyJT%2FElhRSD2ogQTZ82ksKWJ2kTJ%2Fbl12mRSK05Bgl2ffnggfEvOSEavhs0%2BoxYIIOUrw7GhpHlnL5uWvPheZcdVLLlVpBH1szbS%2BTeoQDWSovacnvJ%2FckfUlRuS8wsw5K\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121200,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65371)","md5":"ec3bb52a00e176a7181d454dffaea219","sha1":"6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68","sha256":"f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c","sha512":"e8c5daf01eae68ed7c1e277a6e544c7ad108a0fa877fb531d6d9f2210769b7da88e4e002c7b0be3b72154ebf7cbf01a795c8342ce2dad368bd6351e956195f8b","ssdeep":"768:Vy3Gxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:nw/a1fIuiHlq5mN8lDbNmPbh","tlshash":"2cc3c7a0f21031ea7333c55a75d0ed872219a153e56a4fb7f22f25d88f845ca1673f1a","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-06-03T16:50:39.997213Z","times_seen":67112,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":90,"dns":20,"connect":1,"send":0,"wait":10,"receive":1,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"z20241124.com/videos/202411/20/673c66689db76f817962316f/cover.webp","fqdn":"z20241124.com","domain":"z20241124.com","tld":"com"},"ip":{"addr":"67.21.65.234","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"z20241124.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 10:44:21 GMT","end":"Thu, 18 Dec 2025 10:44:20 GMT"},"fingerprint":{"sha1":"5A:1F:69:03:9A:27:D7:C2:55:17:DD:6F:62:6A:E4:E6:22:FA:74:D0","sha256":"66:C5:94:B9:82:8C:CC:B1:BC:85:24:23:D1:54:91:AA:94:15:68:4F:B2:99:D1:80:F2:B7:2E:6D:A8:9C:28:00"}}},"request":{"raw":"GET /videos/202411/20/673c66689db76f817962316f/cover.webp HTTP/1.1\r\nHost: z20241124.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ndate: Wed, 08 Oct 2025 03:32:30 GMT\r\netag: W/\"98f4-19343eff50f\"\r\nlast-modified: Tue, 19 Nov 2024 10:20:19 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: Caddy\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-length: 39156\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":39156,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 426x239, components 3","md5":"5b84a1395cc9399bad3637f52bf5c8da","sha1":"18f97f871d004d45eb0bf8946a773c6f94504cda","sha256":"2af5d28c93818bf30a753f6d941fafeda886146642be8a763c3e52f06dc2975e","sha512":"c8a1d9e7e7b37f3e16eb5174992508bb2e5bc3c636c897b0040ae205bc700e2150ebcb0b0461334f2933468b0493f25d9437af0dc1f5d32029cf7198bbdda073","ssdeep":"768:NedVX7Xym3j2nL0xSZU+GVoNfd1NYitsaaQXO3pmUBrx0YB2jh73BLV2DV:N2X7NqnL0xYU+CoNfDyi6n9ZBBBG13BQ","tlshash":"bc03f133ebe4730093e8527b5bc7a374df8817120619161e7e5a9f7e5801361a2acdf4","first_seen":"2023-09-25T18:56:17Z","last_seen":"2025-10-08T03:32:59.951454Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1117,"timings":{"blocked":218,"dns":0,"connect":173,"send":0,"wait":170,"receive":215,"ssl":326},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richardlipsey.com/user/srcd.shtml","fqdn":"richardlipsey.com","domain":"richardlipsey.com","tld":"com"},"ip":{"addr":"104.21.84.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richardlipsey.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 02:54:33 GMT","end":"Fri, 26 Dec 2025 03:52:17 GMT"},"fingerprint":{"sha1":"FA:EE:24:FB:EF:00:97:41:4D:D1:42:EA:F1:98:2A:89:1C:24:8F:D8","sha256":"8C:4A:85:64:FF:DF:88:10:97:C6:0F:1A:56:23:1B:8D:95:8B:43:61:19:C9:84:BA:BB:0A:8D:27:67:3F:6E:8B"}}},"request":{"raw":"POST /user/srcd.shtml HTTP/1.1\r\nHost: richardlipsey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://richardlipsey.com/\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 2\r\nOrigin: https://richardlipsey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=pUeUI5XIOHvHp-PKYREnZMS2-EwMiMTOrSWBY8Wn; wxxu=QlU9P1luV0txcQVyTwlEcniyUH2nRvHrPQpuaFN_tl5sukVftkStslFOZlGzZ6RES4umD92mn5NcrQET6U-cvQQ; srcd=srcd\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 08 Oct 2025 03:32:30 GMT\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fYxLAPTZBkWV5BUEWNVSbpWazWOZ3e9nyJ2cKdWWtIhhguN1mGpHf0RuEn6g51kFRJQJ8yfmxNHsLl6QWMLIStWEqY8zpokjhDUpvVTreH0M\"}]}\r\ncf-ray: 98b29245aaf4c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T16:55:47.229708Z","times_seen":16084598,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.9.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.9.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://richardlipsey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:29 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 75440\r\ncf-ray: 98b292434cbb0b59-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5eb03e60-126b0\"\r\nlast-modified: Mon, 04 May 2020 16:10:08 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 34277\r\nexpires: Mon, 28 Sep 2026 03:32:29 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qEz73l%2FzLK7QEn4tG2yPMHYYFrkBXWXfagbPAXu9vxcO%2BfZhYE02Y1thjjaCrxdvhJsjn7S3yxEL%2Bt9PHBs186Rg%2FOG%2Fab0HZL7CWbrE6%2FaO%2BmNjTEQBfxQQEmqp2u1hnOYpep1j\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75440,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 75440, version 329.-1049","md5":"b5cf8ae26748570d8fb95a47f46b69e1","sha1":"07bed153d47f9129a944ee54dd72952deed074c8","sha256":"cd398be1a91817126cef10224738e624358edf6f08043abad7e60c1aaeccc8d0","sha512":"f08b9289695cf530094f076b2df4d2b0e1a1daedd00190d123b4179b2c1a1b5e8b2bb988d86fc6dc9eee117d88a58dd5b6dfe7689586c17068f5d2da01904d76","ssdeep":"1536:1Zq/f5ldhNurIqp+jqNT5Fm653lqWppat1Wa4W8TeodjxNrqM:1kvdS7ppFm6JhpgkrW6bGM","tlshash":"6f73028e1719f192f5d6cd177edc20be38f1a7121008f839e2eda6dd5085ab639a3825","first_seen":"2023-04-05T08:48:24Z","last_seen":"2026-06-03T15:30:43.484403Z","times_seen":21672,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tuaskbgnekr.com/20240131/ycN1Dtqp/1.jpg","fqdn":"tuaskbgnekr.com","domain":"tuaskbgnekr.com","tld":"com"},"ip":{"addr":"64.112.76.12","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bfaskbwerve.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Wed, 12 Mar 2025 23:24:33 GMT","end":"Sat, 11 Apr 2026 23:24:32 GMT"},"fingerprint":{"sha1":"17:BE:B5:B6:72:C2:AD:F5:0C:31:68:24:C8:2B:3D:2F:EB:BD:D8:B6","sha256":"6F:0D:C1:02:24:41:CF:D5:BA:7D:A5:37:F1:D3:5A:7C:E7:91:AA:D0:DC:58:29:DB:35:FE:0A:AA:41:37:FA:74"}}},"request":{"raw":"GET /20240131/ycN1Dtqp/1.jpg HTTP/1.1\r\nHost: tuaskbgnekr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 03:32:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6556\r\nlast-modified: Wed, 31 Jan 2024 05:45:59 GMT\r\netag: \"65b9de97-199c\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: public, max-age=15768000\r\ncache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6556,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 395x225, components 3","md5":"d0d2ad2c994ec0e52058486f249c168b","sha1":"17e54c6c300dde9d12e73cf9b7fb90c1079ec96a","sha256":"d0bff7bff5aec22c13e41d4bf6bdf3f70d6096bccbab6b47de572b450fa4b012","sha512":"0398fd70d79529744db0c577f180db1b8f211b2e47db36c9c55a52dd3d6c4694d99a10db6b276835788f1d7e65600f108fb4d426b1e500e3d3f7f648fd543482","ssdeep":"96:GahrEMfffffff9m/xuiyMBnBVwC2xQKsMWG7ik93RcqRNusrD5VFIaaUchhJzs0:GQrQy4DmWG7iCRB7usrl0vhJw0","tlshash":"6ad1d603dd494643aa3213ba6d172f7e124b3f89ec615af310761e89b530db19dee02a","first_seen":"2024-08-19T18:47:53.181284Z","last_seen":"2025-10-08T03:32:59.955278Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1208,"timings":{"blocked":178,"dns":8,"connect":155,"send":0,"wait":148,"receive":11,"ssl":669},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.gayzyimage.com/image/uploads/cd4f321abcb07c633744a9ba8ef23d70.jpg","fqdn":"img.gayzyimage.com","domain":"gayzyimage.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.753Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /image/uploads/cd4f321abcb07c633744a9ba8ef23d70.jpg HTTP/1.1\r\nHost: img.gayzyimage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T16:55:47.229708Z","times_seen":16084598,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"img.gayzyimage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"img.gayzyimage.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user-images.githubusercontent.com/138796159/281945527-621174f1-22c7-4f94-bdc8-6b86d3b7866c.gif","fqdn":"user-images.githubusercontent.com","domain":"user-images.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /138796159/281945527-621174f1-22c7-4f94-bdc8-6b86d3b7866c.gif HTTP/1.1\r\nHost: user-images.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 10 Nov 2023 03:27:50 GMT\r\netag: \"1b49814513dc1ad889d7edb8f0fe3783\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\ncontent-type: image/gif\r\ncache-control: max-age=3600\r\naccept-ranges: bytes\r\ndate: Wed, 08 Oct 2025 03:32:29 GMT\r\nvia: 1.1 varnish\r\nage: 1301017\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 7837\r\nx-timer: S1759894350.631223,VS0,VE0\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; sandbox;\r\nx-fastly-request-id: 2cf26a3d368f8f8c2649023c10306012b7017419\r\nserver: GitHub Cloud\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: https://github.com\r\ncontent-length: 106825\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":106825,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 300","md5":"1b49814513dc1ad889d7edb8f0fe3783","sha1":"4bf8be06d4a92994d7406e4b8ee11575bf241ef9","sha256":"9646a6506f777102a0873a76e28dff82b3752e97306fa50d6a51e83ad1018119","sha512":"282831bbfe4de414ef8a157c3834ec8dfff51f1a4f294a2c2322a8d1e601453b7746a7bfc0e51461a00f96fb504a6dd5677c658d729cab0f2413fcedd8b5fc5b","ssdeep":"3072:Ufc6uHVwwDoOkapJy26fPJJRAqoNGebBsnmt4OJx:51wwcReJ96fPJObBnt4yx","tlshash":"cfa312dec21feb29941c5b78bffe64069d2b910b75906f780ea0e102ce2b5cf6995d10","first_seen":"2023-11-22T08:42:29Z","last_seen":"2026-06-03T07:37:41.806742Z","times_seen":389,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":91,"dns":27,"connect":13,"send":0,"wait":15,"receive":32,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richardlipsey.com/static/x_v7/js/app.js","fqdn":"richardlipsey.com","domain":"richardlipsey.com","tld":"com"},"ip":{"addr":"104.21.84.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richardlipsey.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 02:54:33 GMT","end":"Fri, 26 Dec 2025 03:52:17 GMT"},"fingerprint":{"sha1":"FA:EE:24:FB:EF:00:97:41:4D:D1:42:EA:F1:98:2A:89:1C:24:8F:D8","sha256":"8C:4A:85:64:FF:DF:88:10:97:C6:0F:1A:56:23:1B:8D:95:8B:43:61:19:C9:84:BA:BB:0A:8D:27:67:3F:6E:8B"}}},"request":{"raw":"GET /static/x_v7/js/app.js HTTP/1.1\r\nHost: richardlipsey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://richardlipsey.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=pUeUI5XIOHvHp-PKYREnZMS2-EwMiMTOrSWBY8Wn; wxxu=QlU9P1luV0txcQVyTwlEcniyUH2nRvHrPQpuaFN_tl5sukVftkStslFOZlGzZ6RES4umD92mn5NcrQET6U-cvQQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Thu, 31 Oct 2024 11:47:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67236e69-38c6\"\r\nexpires: Fri, 24 Oct 2025 00:46:13 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 1219599\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dqoBFCLKmwrdx0vtVOoy5yNfkgQ3WAlsWNoWy%2BVpcH1J8T4Kgf6DFxBzUhdG8%2FXzmYfy78rQZZuvfYg%2BPRUsEep2c6VVhXfPxdfiG0OfuAmE\"}]}\r\ncf-ray: 98b292414aeab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14534,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2239), with CRLF line terminators","md5":"5a102535bf30cef87958e4eac628146e","sha1":"0c82e0d8d33cdf96c07839f35fae06f35c5265c5","sha256":"e07a48837d73d1cb0c77e090dc14db4723cbb7f84eabf2757a8c293d1479ac1c","sha512":"b0df210d8c0fb56bad20a807b9af035aed2365e30ca4a5dfa7566ae4f5e8a6ccc5d3289bff134d265542b79734bbe0bb8408593474f02236056a7e73f2f04572","ssdeep":"192:eGbF3nG40Irp8Pxsw+rEpnCYb273wUkdXtcxUT/R4CgCrcO5DhCOL:lF3G40VupvkddhWCgCAO5dCOL","tlshash":"1762a5c9f16aa0b542b3363a0a3f550dfa3ba877a0039258f47c44d07fb069c9652e7d","first_seen":"2025-01-03T22:40:24.600173Z","last_seen":"2026-03-23T13:20:56.323375Z","times_seen":14,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"int.ucloud110.xyz/thumb/1032450.webp","fqdn":"int.ucloud110.xyz","domain":"ucloud110.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.693Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /thumb/1032450.webp HTTP/1.1\r\nHost: int.ucloud110.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T16:55:47.229708Z","times_seen":16084598,"resource_available":true,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":569,"connect":529,"send":0,"wait":0,"receive":0,"ssl":245},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biu37.xyz/20250829/1032250963852787712/1032250963852787712.jpg","fqdn":"biu37.xyz","domain":"biu37.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.744Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /20250829/1032250963852787712/1032250963852787712.jpg HTTP/1.1\r\nHost: biu37.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T16:55:47.229708Z","times_seen":16084598,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.9.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.9.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://richardlipsey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:29 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 9939\r\ncf-ray: 98b29241ec820b59-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e60-da9f\"\r\nlast-modified: Mon, 04 May 2020 16:10:08 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 493308\r\nexpires: Mon, 28 Sep 2026 03:32:29 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Xp2GPBs0PmTWyUSQVkmpo8Qoh2%2BovlyfSMkk68qfUUxerTkrR7O%2FT00UhWR4DnyDGcpH2DiILuDb3JRJ4ISs1dbPnQ5IJ9aKVdoA7w47%2B8o3bmxJ%2BjsWQ5nn7RL2p2flTdpnEFza\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55967,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (55782)","md5":"dbf9d822cefe851ba6f66e1ad57e8987","sha1":"2c43148f7df780e8b40a3ab09c770f03adbf11af","sha256":"533143d96607d94d5d4292838e364aef656d3de58fe74368263776eab9c07542","sha512":"ab779669bc993dcd574c2985fbcfcbb84d68ce9839c719fb88ef3dc9f48e779fe82afcaa2e7828346b31f23abdd98f1e5c9fc847141b102f85192631b64da88b","ssdeep":"768:suC31sPizPq4/vnUAUHJvkQCg/xMQyjJrX759sGZQz5:suTPUC4/vMHBBC8gd7nsDF","tlshash":"85430bb8e54c41c9a731c44fbf82b2bc61baf73ce5910d95f00e691c2ad26a811c5fb9","first_seen":"2023-04-05T23:27:49Z","last_seen":"2026-06-03T13:27:12.916275Z","times_seen":19917,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":104,"dns":19,"connect":1,"send":0,"wait":12,"receive":1,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richardlipsey.com/static/x_v7/images/logo.png","fqdn":"richardlipsey.com","domain":"richardlipsey.com","tld":"com"},"ip":{"addr":"104.21.84.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richardlipsey.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 02:54:33 GMT","end":"Fri, 26 Dec 2025 03:52:17 GMT"},"fingerprint":{"sha1":"FA:EE:24:FB:EF:00:97:41:4D:D1:42:EA:F1:98:2A:89:1C:24:8F:D8","sha256":"8C:4A:85:64:FF:DF:88:10:97:C6:0F:1A:56:23:1B:8D:95:8B:43:61:19:C9:84:BA:BB:0A:8D:27:67:3F:6E:8B"}}},"request":{"raw":"GET /static/x_v7/images/logo.png HTTP/1.1\r\nHost: richardlipsey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://richardlipsey.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=pUeUI5XIOHvHp-PKYREnZMS2-EwMiMTOrSWBY8Wn; wxxu=QlU9P1luV0txcQVyTwlEcniyUH2nRvHrPQpuaFN_tl5sukVftkStslFOZlGzZ6RES4umD92mn5NcrQET6U-cvQQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 1948\r\nserver: cloudflare\r\nlast-modified: Thu, 31 Oct 2024 11:47:52 GMT\r\netag: \"67236e68-79c\"\r\nexpires: Fri, 31 Oct 2025 06:34:11 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 593906\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GTHtqsKrAJMAtPYNDI3ueYdN7uzIajtBGNJRV7j6med5TBeqrARn3HzqNM%2Fau8VUnEroMKsSGzFILa3L6a0TxbJ6m0HrxtO98IG3DIIS2MP6\"}]}\r\ncf-ray: 98b292413adfb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1948,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 40, 8-bit/color RGBA, interlaced","md5":"f999d2c2900d89b42f06137e8b11dbbd","sha1":"beea40dd906c628e5e46a488e977f3b2c9348b6c","sha256":"721175d993cca16e9fc11096fb8de61dc94ac5a3b888f7232a4f8ea945688af1","sha512":"9d1bf1e68df4d3f02f02b0afab6a1da590c503118ae0e5d7b3fffd8b5a79366dd00206dc0a29ebb26d15464bc85a739c5180619cd4499a65576cc67b7e8b9536","ssdeep":"","tlshash":"5141e845d911650a0734ba4b3cfa41335e020cc0d7a8eb65fc8dc8b3491caf59a1e9cb","first_seen":"2023-06-01T20:05:30Z","last_seen":"2026-04-08T05:00:30.283987Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richardlipsey.com/static/images/load.jpg","fqdn":"richardlipsey.com","domain":"richardlipsey.com","tld":"com"},"ip":{"addr":"104.21.84.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richardlipsey.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 02:54:33 GMT","end":"Fri, 26 Dec 2025 03:52:17 GMT"},"fingerprint":{"sha1":"FA:EE:24:FB:EF:00:97:41:4D:D1:42:EA:F1:98:2A:89:1C:24:8F:D8","sha256":"8C:4A:85:64:FF:DF:88:10:97:C6:0F:1A:56:23:1B:8D:95:8B:43:61:19:C9:84:BA:BB:0A:8D:27:67:3F:6E:8B"}}},"request":{"raw":"GET /static/images/load.jpg HTTP/1.1\r\nHost: richardlipsey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://richardlipsey.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=pUeUI5XIOHvHp-PKYREnZMS2-EwMiMTOrSWBY8Wn; wxxu=QlU9P1luV0txcQVyTwlEcniyUH2nRvHrPQpuaFN_tl5sukVftkStslFOZlGzZ6RES4umD92mn5NcrQET6U-cvQQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18341\r\nserver: cloudflare\r\nlast-modified: Thu, 31 Oct 2024 11:46:58 GMT\r\netag: \"67236e32-47a5\"\r\nexpires: Fri, 24 Oct 2025 08:02:58 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 1193394\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=62y7X0Yt%2B%2F8XsJYNyDq3fgCqbk8PFUMhIWjVndSzY04Eb6%2Fq0Vra3yiRObhdNyJaUAr3qsCnce7FuGJWKZRv7j8mBQAF5DD2Aan1O77F1A4E\"}]}\r\ncf-ray: 98b292413ae2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18341,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 600x389, components 3","md5":"b84934511a97331b49e2b6d768501bc0","sha1":"95743d245d8caa2ef10a461c95ae2c2e86fa4b85","sha256":"9229125f9b07014aa5d3b8292bb55320c14a516688e6f918fd55fc80b181ff35","sha512":"3e6c990b064601da36e5e0678e6f1e5dfc9ec4ccb60d8cfbaf8212cb16792a19daa2e13758e792006fc371cee5632a0e06e9d6f8b0c697ab4313eea402dedd36","ssdeep":"384:YfOrhuJyAdIJcmBqj46101GxTDBeq12JCci8/yRdV/DHjGOx3:bhutIJTqc61CGxTd59ci8/yRdBjCOx3","tlshash":"e582d1738aad6fa793e16cf8453e85b1a7c8ac5354c8a70fe08604777a3a42f474d391","first_seen":"2023-05-22T17:27:11Z","last_seen":"2026-05-23T21:32:16.448713Z","times_seen":385,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m1.cffpng.com/20250604_203434223_wiv.gif","fqdn":"m1.cffpng.com","domain":"cffpng.com","tld":"com"},"ip":{"addr":"104.21.29.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f9742aa1.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 12:55:51 GMT","end":"Fri, 19 Dec 2025 13:55:49 GMT"},"fingerprint":{"sha1":"F6:5E:93:B0:B1:16:C2:96:5B:E5:1F:B1:C1:D9:73:B9:F8:86:C0:5B","sha256":"CE:97:A7:27:08:B8:B1:BC:D4:FD:40:CE:00:B5:B2:54:2D:B9:24:32:DA:A7:5B:EF:DE:F5:4B:F4:B6:13:B7:D1"}}},"request":{"raw":"GET /20250604_203434223_wiv.gif HTTP/1.1\r\nHost: m1.cffpng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:30 GMT\r\ncontent-type: image/gif\r\ncontent-length: 467090\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bxn%2FyOSecc0Nb2bZCosGoS2BF3T5u7PADA%2BuQYFHe1t0YrxhbQLbj%2BIuEAFXSNhx1hIWTVD7h8om%2B0L6DRcAgsaZFAyFSbwLMcL%2BQCM%3D\"}]}\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"57023ea55f533f6faa966410593b3692\"\r\nlast-modified: Wed, 04 Jun 2025 12:34:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 1449\r\ncache-control: max-age=14400\r\ncf-ray: 98b29247affeb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":467090,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 300","md5":"57023ea55f533f6faa966410593b3692","sha1":"efe3a1d4385abe83df97d6bd8c6a383951964fc4","sha256":"81fdbf1f34adca3c679133e9e472a9315bd7e8440df864d52ab6d40c1b316d2d","sha512":"6199433cb8c32d75f337dc79e107f9c4aa7081aa67a1fde1b0695672b80e15f126ec024eb94b0e44c5a4eb569d302120eed621830567c1c5f9501f77c92269df","ssdeep":"6144:Am8xOlWhPq8F4b2khydXdNILJWVQUqt4gJUhGvZHnbDaD77kYb3ooc2DPmpzFXGJ:AKohFFyydNmJaDgJz7DaXBDa4q18vc+","tlshash":"42a423a87843f254b01d55af07ae1f9a3fb1ca5a739da7220f88b51d239123b744163f","first_seen":"2025-05-21T16:57:41.187227Z","last_seen":"2026-04-30T00:51:30.264575Z","times_seen":322,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":21,"connect":7,"send":0,"wait":5,"receive":17,"ssl":444},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/simple-line-icons/2.4.1/css/simple-line-icons.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/simple-line-icons/2.4.1/css/simple-line-icons.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://richardlipsey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:29 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 2041\r\ncf-ray: 98b29241dc7b0b59-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03fd2-2af4\"\r\nlast-modified: Mon, 04 May 2020 16:16:18 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 492612\r\nexpires: Mon, 28 Sep 2026 03:32:29 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=i604eoPwzJR%2FBvbNU%2BFArVU5fo4yQGwJ6tQ1Cj3cT9YM6jP0zUGaEri6f1OnmApyoYxgPirRVVkUtB%2BqtQUYzkAguQB6Ti1Dz7ekBpqbVQRWZ2hBknl928y91gspZdlRgYkucBA2\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10996,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (10996), with no line terminators","md5":"faa91fc2b4083ca077878cc01895eb60","sha1":"13fb697e988840200d12465e5455c8b6b62b3fb3","sha256":"eced437d4bb8a726d823bb80013c37e1e0eb81069618e7cc57ff1eadf0d0cff4","sha512":"cb14900e86add8d3d0f54e2629d62b6b660d7a756c9d1b86c55bf2ae2ae6ac32b3c0e77128956a90312f435ee92ff3c9e81ee7da7efb5e6e9deb66cc8c206a09","ssdeep":"96:XjmEEWqaJzRz1uGiozVrYKs29ZbBSNUgr0DXi1MkSI:XPEWFuCdYK/ZgeS","tlshash":"d33253e4e50d41da7732c806c786b309ec99f121dde11c13f1af899c5ff136aa692a78","first_seen":"2023-04-09T11:07:26Z","last_seen":"2026-06-03T16:18:24.396634Z","times_seen":1513,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":88,"dns":15,"connect":1,"send":0,"wait":15,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Feb 2025 00:00:00 GMT","end":"Thu, 27 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"24:45:97:41:80:9C:3B:CE:BB:C3:B5:53:C5:0D:8C:BB:21:C9:56:20","sha256":"5F:96:09:03:1A:50:90:73:9C:60:3F:2D:35:D7:F2:4D:95:02:C6:38:BC:AB:88:FA:78:A4:8B:85:16:CB:F0:57"}}},"request":{"raw":"GET /js/jads.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Oct 2025 03:32:29 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3769\r\nLast-Modified: Fri, 07 Mar 2025 18:31:37 GMT\r\nConnection: close\r\nETag: \"67cb3b89-eb9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3769), with no line terminators","md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-03T13:53:05.141441Z","times_seen":2503,"resource_available":true,"data":null}},"time_used":810,"timings":{"blocked":384,"dns":57,"connect":33,"send":0,"wait":33,"receive":0,"ssl":293},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/layer/3.1.1/layer.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/layer/3.1.1/layer.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6591\r\ncf-ray: 98b29241ef9423eb-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5ed4d0d2-54d1\"\r\nlast-modified: Mon, 01 Jun 2020 09:56:34 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 51164\r\nexpires: Mon, 28 Sep 2026 03:32:29 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZWVA3aBktVEbY3asMBZzwSTNvYmfp4HORJi44p6mutz8PeMUBDL%2BfYGI8sBwLgo6Xv6ag0rx%2B8t7p6hT3%2Fwc8%2BFRzZL4WMosz9MLvrbGwgwgLNcMWMdGezToCkSrJaGTa59Nukx4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21713,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21713), with no line terminators","md5":"060444af631570264c5b3f957e26f5e3","sha1":"8278c4d47ac985481da0e5efb922457eaaf1dc0c","sha256":"7ed41c1149adf244bf700213886bfe8648d164942eb68527a7476bb7955c5af9","sha512":"d18a2c4bc192c90219776b9658d1c6f7942037c90f37a5819a38f36a4a1345f742b74602989b361c78a217ab661b09e037f7d9f891fddf3152916d9cbf9b865b","ssdeep":"384:qefWYREmwZAxlh2K1mM+8leJLCgO7TKVJO7:ffBuF0lh2smMNeP4","tlshash":"1da2b46a314035a7621390a9d14fbe0f71b21d24e7174128f12af4bc1dbdda9a2b7f4b","first_seen":"2023-03-07T15:24:24Z","last_seen":"2026-06-03T10:40:16.09203Z","times_seen":391,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":6,"connect":15,"send":0,"wait":14,"receive":1,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m2.cffpic.com/20250916_190055621_ZdY.gif","fqdn":"m2.cffpic.com","domain":"cffpic.com","tld":"com"},"ip":{"addr":"104.21.69.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"182a1e59.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 16:18:36 GMT","end":"Sun, 23 Nov 2025 17:18:32 GMT"},"fingerprint":{"sha1":"6F:61:A7:81:FE:CB:A9:83:CB:97:5A:64:35:08:DF:61:69:B8:A3:87","sha256":"7C:01:62:0A:31:56:70:CE:C2:98:D0:33:B9:81:2E:5C:61:05:FE:D4:4E:25:F1:4F:9E:28:15:5B:80:6E:B8:8A"}}},"request":{"raw":"GET /20250916_190055621_ZdY.gif HTTP/1.1\r\nHost: m2.cffpic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:30 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1059138\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BF%2FBAXmq8Yj5yvdL0BeVbT2KektLan2lqT9XhbpBSnsGTHNH01W62LrRtD2sarDJoX28la%2F41BMLpbsNwyc%2FhXZUh1WfP1NGVl1r\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"9ba43068ff25f96b5cc668d7265dc839\"\r\nlast-modified: Tue, 16 Sep 2025 11:00:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nage: 1123\r\ncache-control: max-age=14400\r\ncf-ray: 98b29249dc6056c7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1059138,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 450 x 450","md5":"6e422b46cf7ef0922dda2f2047fec62d","sha1":"978ed1d7bf0301b87cce3affe6a1a5e94bff75e2","sha256":"10c6b07f3728101a185cb9f856b2616763b8ea7b3fd2c356d003f231a6c54f1b","sha512":"1f7e39c17c25263489f1c436ee0dbc32fc564c39a16f3488a508b04e66ce2e6ee75f48171da5679a04ed87b0399c56b993d22918d6724eae7ab12102acd2d80d","ssdeep":"24576:6BoNXGyrLloPKI7agka5asK0E+dmZrwolwqB6ufgQYT2/cV:6VWlojw0E+sZrhwZufphk","tlshash":"2a253361d51681489e58889e7e9ccd8e7729d0328fe2591b5afcd2be13dbd3bf800306","first_seen":"2025-09-20T11:55:23.579389Z","last_seen":"2025-10-15T08:40:04.114543Z","times_seen":34,"resource_available":false,"data":null}},"time_used":867,"timings":{"blocked":37,"dns":5,"connect":1,"send":0,"wait":13,"receive":138,"ssl":671},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ml0987.com/thumb/1128709.webp","fqdn":"img.ml0987.com","domain":"ml0987.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ml0987.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 08:54:08 GMT","end":"Sat, 08 Nov 2025 09:51:37 GMT"},"fingerprint":{"sha1":"A3:D2:02:31:42:5C:E7:87:81:7C:BA:7E:3A:0E:17:ED:C3:DB:5C:0A","sha256":"44:31:8A:8E:CE:25:F7:54:0A:79:BF:AA:68:60:83:62:29:BA:96:98:A5:78:C4:F8:7A:BF:07:D4:F6:F3:83:FA"}}},"request":{"raw":"GET /thumb/1128709.webp HTTP/1.1\r\nHost: img.ml0987.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5260\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=31536000\r\ncf-bgj: h2pri,csam-hash\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\netag: \"68c8369e-148c\"\r\nexpires: Thu, 06 Nov 2025 12:52:59 GMT\r\nlast-modified: Mon, 15 Sep 2025 15:54:06 GMT\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: HIT\r\nage: 43083\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GU2X%2F%2F861H0B2mQOYIvo4P6LpM%2F8L6A5TKolCFvljJcwGWlL04zU1hFjQrbS5LCnRvRe6Jkva4h9rBlpsQgrRQjiZbgpwFauiftDIQ%3D%3D\"}]}\r\ncf-ray: 98b292495e160afe-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 168x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2fde68d942c4cc07efb2cf68535627bf","sha1":"37e52e79486d9489e6227a438a8fa2283a0ea26f","sha256":"02ce08b83ca258bd5d83ead0b9d206b851b0210d70cd6dbb81894b48239faf7d","sha512":"50b729e52bfc002efd0a262f82154ca2240c835b55a04a1571c5ea0ab3e1c68108a3a84da881ea7a20e5f40fb5ae73626a046ce2537fbbd993d1981b44ee2278","ssdeep":"96:6FBs6TdL1QQX6hU56hIaMfrEOz9fq7chkRM9klNSGiJSZs2OSXi:29WQX6h12/EIiwqCkl3iYNy","tlshash":"5ab17e6dc4b595e8c01cf3317134894f658ee225ef90c056275aee86d4ef14f67041b6","first_seen":"2025-10-08T03:32:59.970878Z","last_seen":"2025-10-08T03:32:59.970878Z","times_seen":1,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":133,"dns":4,"connect":3,"send":0,"wait":8,"receive":1,"ssl":435},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LFDMM5L089","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=G-LFDMM5L089 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 08 Oct 2025 03:32:29 GMT\r\nexpires: Wed, 08 Oct 2025 03:32:29 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141098\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":424405,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"e9841536cc20de58a5766547528ee7d5","sha1":"fcad2a8d38b044f43401478e68609ef1e18542ca","sha256":"a0e9ad0735c8832b52a7318900b1a685ed9457a6afa4f0942847a3dc746221a5","sha512":"368a8af931da02043c12074758c5c8e97be9ef82e1d406bdc66aed3e97bc5d6fc5e2528cb844919274b7d4fc4254f91c2a40e714d1ef47b97f73bf424be1b3db","ssdeep":"6144:PBRwep2itv0njCnzGwXV4rvoB6bEGBQ5w0yN+Xy:5tY8snjYGdo3zy","tlshash":"d7940ade73d674225396f478503f018ba57b28a2b44cc89af189cde42e74a9a4137f7c","first_seen":"2025-10-08T03:32:59.972806Z","last_seen":"2025-10-08T03:32:59.972806Z","times_seen":1,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":1,"connect":44,"send":0,"wait":46,"receive":56,"ssl":243},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/animate.css/3.7.2/animate.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/animate.css/3.7.2/animate.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://richardlipsey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:29 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 3511\r\ncf-ray: 98b29241dc7c0b59-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03d2a-e311\"\r\nlast-modified: Mon, 04 May 2020 16:04:58 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 32314\r\nexpires: Mon, 28 Sep 2026 03:32:29 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ytSJVs1pynObq9vCV6K%2F8B7sq1GvKHvV9I9lnonEd3wKAPwq05hCj5SdBZpTywKgGdGuUAHh6GMTwNDukSNGP8oQ9SG1VseZHSQSQIGBXcFgLBGRb6S%2F%2BBxqsPLbJG8X2GfiCwNC\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58129,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (57919)","md5":"bc1a6a99c43f5ccc97d2d350bde13f74","sha1":"29a6f54569c193ffd6116f03be3eb42359c60eb7","sha256":"3c770e90f98eb21b0c042fafb49755af93306fbaf42e449524f94fae9fc83295","sha512":"76826b0bfa1c53c546551c773bdf7cd7ed9a6149f77ee5955afa8b8b553eb40d8c595cecc3e3552aad4fac4345d3733e4d804ff763e7614957147d595b41692f","ssdeep":"1536:UkZHPqwQ1OAPkWDL32ye5trKem0OTI6j3rwzlr2c:UkZywQ1OAPkWDL32ye5trKem0OTU","tlshash":"de43f8af5891229991270f66c7cc5ea8873dc66314721cde33866c4b8b46fde33ca617","first_seen":"2023-04-06T01:48:05Z","last_seen":"2026-06-03T16:01:39.798225Z","times_seen":13831,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":93,"dns":15,"connect":1,"send":0,"wait":17,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richardlipsey.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"richardlipsey.com","domain":"richardlipsey.com","tld":"com"},"ip":{"addr":"104.21.84.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richardlipsey.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 02:54:33 GMT","end":"Fri, 26 Dec 2025 03:52:17 GMT"},"fingerprint":{"sha1":"FA:EE:24:FB:EF:00:97:41:4D:D1:42:EA:F1:98:2A:89:1C:24:8F:D8","sha256":"8C:4A:85:64:FF:DF:88:10:97:C6:0F:1A:56:23:1B:8D:95:8B:43:61:19:C9:84:BA:BB:0A:8D:27:67:3F:6E:8B"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: richardlipsey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://richardlipsey.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=pUeUI5XIOHvHp-PKYREnZMS2-EwMiMTOrSWBY8Wn; wxxu=QlU9P1luV0txcQVyTwlEcniyUH2nRvHrPQpuaFN_tl5sukVftkStslFOZlGzZ6RES4umD92mn5NcrQET6U-cvQQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:28 GMT\r\ncontent-type: application/javascript\r\nexpires: Wed, 08 Oct 2025 04:20:28 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pvfRWaERTQBGx2InMbU7yE2jW8LrXL9mP5Xt7SU%2FU2uh8JcmIWJCF3juKR%2FB9%2BtN8hKlw%2BfiZGdHToBv6vSUrzoDDU04ufZiPiylWKFreFHS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98b292413ae4b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-03T16:53:21.202667Z","times_seen":359233,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/g92Ppfv/w-SSw-Ht0-DD3v-Ilqz4p-AZp.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.7","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:17:47 GMT","end":"Sun, 16 Nov 2025 07:17:46 GMT"},"fingerprint":{"sha1":"30:62:E2:16:F0:8D:8F:C4:30:EF:67:44:60:2F:45:29:D1:5B:AF:94","sha256":"EE:AB:93:C9:6B:44:94:94:F6:EE:CA:98:DE:CE:BF:A6:25:9F:C8:76:A5:43:59:77:38:DD:D2:23:F7:9C:B1:70"}}},"request":{"raw":"GET /g92Ppfv/w-SSw-Ht0-DD3v-Ilqz4p-AZp.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 03:32:30 GMT\r\ncontent-type: image/gif\r\ncontent-length: 118001\r\nlast-modified: Mon, 18 Mar 2024 14:11:54 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118001,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 100","md5":"031925005d01a807624df9b1458355b2","sha1":"7115b1929f1225700bb46604c1e83624f375f4bd","sha256":"cba815444b9d210a99635e2fbdcbe2bd5d7764823366ae276b5b0031a5841706","sha512":"0a1d8d910e668c64ff591f6b7d6cbb624cdf7e3ad3fd6b8b25e48759c1170452b1a62cda5d054a6b0359b25c772a86180b9eb13cf246eb9c5966aaec84dc901f","ssdeep":"3072:VLLWonpHwqv2D4OSjO1bmsJgUpeMzvIZ6J:VWKHwN4jjO1bmcgUPIZ6J","tlshash":"0ab3f11f9a587d029188fee859e74cfb6be604c0d9a4e859dc8cc0265f21276cb591cf","first_seen":"2024-08-19T20:36:38.845477Z","last_seen":"2025-11-20T11:17:31.978039Z","times_seen":121,"resource_available":false,"data":null}},"time_used":1333,"timings":{"blocked":615,"dns":83,"connect":24,"send":0,"wait":27,"receive":69,"ssl":505},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/simple-line-icons/2.4.1/fonts/Simple-Line-Icons.woff2?v=2.4.0","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/simple-line-icons/2.4.1/fonts/Simple-Line-Icons.woff2?v=2.4.0 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://richardlipsey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:29 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 30064\r\ncf-ray: 98b292434cbc0b59-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5eb03fd2-7570\"\r\nlast-modified: Mon, 04 May 2020 16:16:18 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 28544\r\nexpires: Mon, 28 Sep 2026 03:32:29 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=alqx9aKSNViW%2BBX%2FnCl5DOGZlxFHFDIZW9oPofzL9b3ZipKUG0lR7Str%2BcIf0E736IoY7lLeAqI3LI12LD9Tx2ixzohcWCDgcBSb2JwTtDCO3a7T7F9axPuStpRleNOhnAuKz3F1\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30064,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 30064, version 1.0","md5":"0cb0b9c589c0624c9c78dd3d83e946f6","sha1":"5da603104d4d6e362824ec9e7db32eb2d617949a","sha256":"104673f4859604362a18fc6294197d8fffb8cb24ad3211e92eb04f655e18cf4a","sha512":"3e5839ac426d1cb1728ed26c5507985e0c0c8da0e09a3391ff5f83c74b4aab56e5a2d2ecc9c5640cd75c0ccb71211e5dff2da6844e45aeb45b8f72d251d6f9ea","ssdeep":"768:C/3cATYncoSGwoSdfQjYvJ8I44idHfZ+4ko19Ux:C/7UbSGiJyYRN4RdBiJx","tlshash":"9ed2f2863406640f1b3397bd3bbb526b1f53a545fa20f2c04d208e074d26e3099f4b5b","first_seen":"2023-04-07T03:26:22Z","last_seen":"2026-06-03T16:18:24.397123Z","times_seen":13152,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m1.cffpng.com/20250604_192227372_uMG.jpg","fqdn":"m1.cffpng.com","domain":"cffpng.com","tld":"com"},"ip":{"addr":"104.21.29.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f9742aa1.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 12:55:51 GMT","end":"Fri, 19 Dec 2025 13:55:49 GMT"},"fingerprint":{"sha1":"F6:5E:93:B0:B1:16:C2:96:5B:E5:1F:B1:C1:D9:73:B9:F8:86:C0:5B","sha256":"CE:97:A7:27:08:B8:B1:BC:D4:FD:40:CE:00:B5:B2:54:2D:B9:24:32:DA:A7:5B:EF:DE:F5:4B:F4:B6:13:B7:D1"}}},"request":{"raw":"GET /20250604_192227372_uMG.jpg HTTP/1.1\r\nHost: m1.cffpng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12093\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=px0AmLxJmdHflnbYVbRcNyq18CIW0q1g35E%2BgC%2BIi%2BHXn1uFjegq%2BXF1UJ%2FyhSXYEC6pcUw4q4rzw90z1YHhENN%2Bmir%2BBSnzvmRUiqE%3D\"}]}\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"802d0785aa99bbfcf02f1a3c75ab14d1\"\r\nlast-modified: Wed, 04 Jun 2025 11:22:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 1122\r\ncache-control: max-age=14400\r\ncf-ray: 98b292481855b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12093,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 200x200, components 3","md5":"802d0785aa99bbfcf02f1a3c75ab14d1","sha1":"b989c243ebd5e2e80f46b8b13861b7ca0cabc3b3","sha256":"a5da169cd311131169b3b4d92941043feb6527c0e600f952d920bf7184ad0a80","sha512":"1b4eeb353200785c1bc9cc1f4bfd22f23baf429ba6e2d0306e8b25280962b53277a5e4959fc29f7d37ea9c70feb3f3a9e0db981c881c55d0e1ed9dc763b7fd26","ssdeep":"192:4uohjhSuHpMbe4Fvq5Ix+7sBophViLyoYwfKLZBYRNSpd2iT/rdvG54vlM9i3tqz:4uolMuH4FkI4VphOyoYOKtBYNSpU6hFk","tlshash":"8342cf640853518be8df2ceb0ffabb98dd69fa32515b4754b886db927cc16584743301","first_seen":"2025-06-04T21:56:59.34556Z","last_seen":"2026-06-03T07:37:41.791629Z","times_seen":284,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":8,"connect":5,"send":0,"wait":7,"receive":1,"ssl":482},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs4.imagebam.com/e9/38/e7/MEXPKC0_t.gif","fqdn":"thumbs4.imagebam.com","domain":"imagebam.com","tld":"com"},"ip":{"addr":"212.63.223.225","port":443,"asn":50827,"as":"SpaceDump IT AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imagebam.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 15 Nov 2024 00:00:00 GMT","end":"Sat, 15 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"B3:7B:BD:C4:71:57:E9:3A:FB:A2:EF:CD:8A:85:14:1C:0C:6C:70:D5","sha256":"FA:BD:AE:0C:A2:F4:BA:CF:95:89:41:83:C6:E0:11:24:51:D3:F7:1D:C5:B2:12:B6:BE:A4:34:EB:EE:FA:06:30"}}},"request":{"raw":"GET /e9/38/e7/MEXPKC0_t.gif HTTP/1.1\r\nHost: thumbs4.imagebam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Wed, 08 Oct 2025 03:32:30 GMT\r\nContent-Type: image/gif\r\nContent-Length: 2862307\r\nvary: x-s-token\r\nlast-modified: Tue, 26 Nov 2024 18:40:22 GMT\r\netag: \"2bace3-627d52e8f80d8\"\r\nX-Cache: HIT\r\nX-Whom: srv1535\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2862307,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 180 x 180","md5":"a76d3ae0a8da9dbd902f6336bb854898","sha1":"7218b0508eac4e50951c2683335584c3567cf0d8","sha256":"479daa5a148cefade349391d8e1667f1d2e1a05375305ef9f0603d4b02542e7c","sha512":"c0e0a81db20b9eed177e45fc0374824e7c73fe0aafee57c10efb4dfcc75f5af2d1d62c3c21c2b1c1242c8643b1489a7715cc4e6467b362ad3df5bcdc23f68fa4","ssdeep":"24576:sYKNTRhF2VsQlnnThsZ7xxmX68HsgOQqnGzuV5InsL:+58VRnNsXxgRHnaKA","tlshash":"db253336c6ab5649c3f3413ac89e852c8ff2fc5dee2054562a07caa4f1f35af14851e6","first_seen":"2025-07-29T23:56:11.981284Z","last_seen":"2026-03-01T23:39:50.094147Z","times_seen":172,"resource_available":false,"data":null}},"time_used":2560,"timings":{"blocked":57,"dns":3,"connect":25,"send":0,"wait":49,"receive":1962,"ssl":463},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs4.imagebam.com/bd/8f/88/MEPKG19_t.gif","fqdn":"thumbs4.imagebam.com","domain":"imagebam.com","tld":"com"},"ip":{"addr":"212.63.223.225","port":443,"asn":50827,"as":"SpaceDump IT AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imagebam.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 15 Nov 2024 00:00:00 GMT","end":"Sat, 15 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"B3:7B:BD:C4:71:57:E9:3A:FB:A2:EF:CD:8A:85:14:1C:0C:6C:70:D5","sha256":"FA:BD:AE:0C:A2:F4:BA:CF:95:89:41:83:C6:E0:11:24:51:D3:F7:1D:C5:B2:12:B6:BE:A4:34:EB:EE:FA:06:30"}}},"request":{"raw":"GET /bd/8f/88/MEPKG19_t.gif HTTP/1.1\r\nHost: thumbs4.imagebam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Wed, 08 Oct 2025 03:32:30 GMT\r\nContent-Type: image/gif\r\nContent-Length: 95804\r\nvary: x-s-token\r\nlast-modified: Wed, 18 Oct 2023 21:46:01 GMT\r\netag: \"1763c-6080490b83af4\"\r\nX-Cache: HIT\r\nX-Whom: srv1535\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95804,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 100","md5":"09687136eb1b102af050ea7f6e2cbaf1","sha1":"7e1337ea1cee457058b384b81e7fef51c12eae4e","sha256":"598fa5256920c4fffee36ea3f1208ca6a0a1a85c03dcf9d8ffaa0b8ae84183c3","sha512":"957cab6e3fcb236894ac97ae561d989099e2cf6c42242b3ec5896d2214a7ae31eceea97860f54559037b994d7a20b7064fbc68c757801981d55a873f27e7eb42","ssdeep":"1536:uFZ5Mymj+nDCYgHUrdBpWLWcPXJQDkcmfgqHlqfIV+KtoPnNprNvs8NW3F/XZLg5:uFZS/ynulUjpOPXJEhmfJMfIV+Kto/Nz","tlshash":"959312a2d548140ef5a25af1100921a0dacf524b8f3eef3b5603a7e378ff1f520e6918","first_seen":"2023-11-05T11:28:18Z","last_seen":"2026-01-15T10:46:11.038642Z","times_seen":267,"resource_available":false,"data":null}},"time_used":655,"timings":{"blocked":-1,"dns":6,"connect":29,"send":0,"wait":41,"receive":51,"ssl":521},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ml0987.com/thumb/1125456.webp","fqdn":"img.ml0987.com","domain":"ml0987.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ml0987.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 08:54:08 GMT","end":"Sat, 08 Nov 2025 09:51:37 GMT"},"fingerprint":{"sha1":"A3:D2:02:31:42:5C:E7:87:81:7C:BA:7E:3A:0E:17:ED:C3:DB:5C:0A","sha256":"44:31:8A:8E:CE:25:F7:54:0A:79:BF:AA:68:60:83:62:29:BA:96:98:A5:78:C4:F8:7A:BF:07:D4:F6:F3:83:FA"}}},"request":{"raw":"GET /thumb/1125456.webp HTTP/1.1\r\nHost: img.ml0987.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5402\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=31536000\r\ncf-bgj: h2pri,csam-hash\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\netag: \"68bae79b-151a\"\r\nexpires: Thu, 06 Nov 2025 09:47:47 GMT\r\nlast-modified: Fri, 05 Sep 2025 13:37:31 GMT\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: HIT\r\nage: 22409\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zIcMl8OKtqy03Ar9amWhXiaIGcKkNWQEGTVvDcLL77VnXi9kx0h8qYToEevyGDXMRIFB9KEHQvB4amXukNPDtkcreuusn0bBuQuoQQ%3D%3D\"}]}\r\ncf-ray: 98b292492e0d0afe-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5402,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x226, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fea7d97dbd627d19a20c69f5f6b711c4","sha1":"10c75e28ab7a75a4b1767daf7ac947011ebc4c63","sha256":"7a160cf8602a16a0620d3af7f8152443b5254a19b150c332b4cc11fe5eb0d338","sha512":"97e35e60eb567e223e3182e2d693c3aebce74fa64a1b9427e85ed0d8a57ef3d6eb6939995dc67881b9a3adfce6f9436559a97b93be0f51b19e889bd951ad1816","ssdeep":"96:rShpunk0KZ3eSZdLGwJXqJ8Q4wgRv/b06AdOo4V5k8QMR4aCv9zTyDn1HMP4Pjoz:rMpunL2ey3Jak9MO75kw/Clmn1sgPkdd","tlshash":"a1b1ae896059ae41d2a3480f75ea48e2e88412d20af1f36cb56d3350090f68ff3a84a3","first_seen":"2025-10-08T03:32:59.984678Z","last_seen":"2025-10-08T03:32:59.984678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":121,"dns":1,"connect":4,"send":0,"wait":10,"receive":0,"ssl":447},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/6f/81/17/6f81175935521b07f4e516ece97f28f1/6f81175935521b07f4e516ece97f28f1.16.jpg","fqdn":"cdn77-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.76.9.8","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 03 Oct 2024 00:00:00 GMT","end":"Mon, 03 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"27:E9:05:C0:A5:FC:40:B1:D6:44:DC:D3:39:EE:11:78:2C:E2:F0:78","sha256":"5F:C0:7A:63:35:DB:CB:28:20:1B:40:83:91:40:36:2B:7A:97:63:77:7A:67:2A:45:FF:4E:80:15:A3:03:3C:4A"}}},"request":{"raw":"GET /videos/thumbs169ll/6f/81/17/6f81175935521b07f4e516ece97f28f1/6f81175935521b07f4e516ece97f28f1.16.jpg HTTP/1.1\r\nHost: cdn77-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9762\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Wed, 30 Jul 2025 22:36:22 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJBgH3lGQ1AAwBJRPCOgH3VRclAAwBbT1arAH35g0AAA\r\nx-77-nzt-ray: 5451992d7cd934d24edbe568cdddec16\r\nx-accel-expires: @1764328831\r\nx-accel-date: 1756395194\r\nx-accel-date-max: 1753960831\r\nx-77-cache: HIT\r\nx-77-age: 3499156\r\nserver: CDN77-Turbo\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":9762,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", progressive, precision 8, 352x198, components 3","md5":"544ad6bfe604b83384f444d306d85cec","sha1":"e457a41bc6902e82b0d659835523672d98b1868f","sha256":"7d4b8c890e6ae66d68679c7187342daa62334efb19510d2f02aa82d1f1d973f9","sha512":"6c19236e919034a75c783e7757f14e829b92eca172ca46b80e2b3176a5b2cdc2c2299c69680ad8ad5fa995478b817f338d99260d5fd51d4da309fa25112a6ebb","ssdeep":"192:va7jJ/Ux52FLuXLNDz9SS93Hnw0gVCMT3L2UWGQAL0DHy8tNqz0A2IqUOG:C7jJ452FLMpDlXnVgVrT3LHWGQAL0zy3","tlshash":"ac12bf5aa7765423e23bcbfc54e2067d77449080d0d70216f582ec48ff711ba1cd9ae1","first_seen":"2025-10-08T03:32:59.988678Z","last_seen":"2025-10-08T03:32:59.988678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":658,"timings":{"blocked":143,"dns":8,"connect":9,"send":0,"wait":24,"receive":1,"ssl":459},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 8722\r\ncf-ray: 98b29241ff9e23eb-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb04010-90b5\"\r\nlast-modified: Mon, 04 May 2020 16:17:20 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 32464\r\nexpires: Mon, 28 Sep 2026 03:32:29 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=06oASOJNdpTCEvxZ2RYbhO73knlI47ox6zRlT7acSX9xcNYxGYIegutqaNbuxb7r3SFpcGGT2byf%2FQufE4q1h6N8Le%2BUfCT2NyWiXNjNWqT4TkpHvfJnFuE12RopURqMSVaJmDkY\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37045,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-03T16:50:39.998404Z","times_seen":89615,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":7,"connect":15,"send":0,"wait":9,"receive":1,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images2.imgbox.com/e6/fb/QV8SRr50_o.gif","fqdn":"images2.imgbox.com","domain":"imgbox.com","tld":"com"},"ip":{"addr":"212.63.223.227","port":443,"asn":50827,"as":"SpaceDump IT AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgbox.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 15 Nov 2024 00:00:00 GMT","end":"Sat, 15 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"5A:6B:D2:2E:15:1B:62:D6:8E:55:AD:38:B3:95:0A:EB:B9:C5:52:86","sha256":"D2:B7:6A:32:B9:55:A8:DD:A8:54:56:C5:ED:5B:DE:60:F1:7B:D2:30:B0:AC:51:21:58:2B:B8:DA:2D:36:D5:25"}}},"request":{"raw":"GET /e6/fb/QV8SRr50_o.gif HTTP/1.1\r\nHost: images2.imgbox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.18.0\r\ndate: Wed, 08 Oct 2025 03:32:30 GMT\r\ncontent-type: image/gif\r\ncontent-length: 32798\r\nvary: x-s-token\r\nlast-modified: Wed, 27 Nov 2024 06:06:35 GMT\r\netag: \"801e-627dec49b50c0\"\r\nx-cache: HIT\r\nx-whom: srv1535\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32798,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 100","md5":"39f9c3ddf152664c74f7d07571b2f3d1","sha1":"9f71c2b38a42bc5d5558f8228db7983239cb3ccd","sha256":"0ff71f227d4f57d2b89e8f6d175fc540c2f5e70f634b2814f2af3d5d939174b2","sha512":"4c770ed4a6b05bbf1b6840b25429f8fcf0c478908b30cf1b1a2956f70bae2d6695269f253627f873b3dac9d6ec2f0de540d899041c26d74e1803b04461764d21","ssdeep":"768:ZqRrGgxKkH4t0E5VZME6ycYwv8RHozLzfSvVSzcKNUATNVax+HqZAlvuo:Z3Ft0EXagwkRHozrzDj5VNmo","tlshash":"6fe2f161fb06ab32d637143cdf2b5c8b629fe473e35f4ad1402962e0612e76921268d6","first_seen":"2024-12-01T08:51:18.635316Z","last_seen":"2026-06-03T07:37:41.797252Z","times_seen":374,"resource_available":false,"data":null}},"time_used":1329,"timings":{"blocked":683,"dns":0,"connect":0,"send":0,"wait":51,"receive":2,"ssl":593},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m1.cffpng.com/20250604_200445438_sxL.gif","fqdn":"m1.cffpng.com","domain":"cffpng.com","tld":"com"},"ip":{"addr":"104.21.29.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f9742aa1.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 12:55:51 GMT","end":"Fri, 19 Dec 2025 13:55:49 GMT"},"fingerprint":{"sha1":"F6:5E:93:B0:B1:16:C2:96:5B:E5:1F:B1:C1:D9:73:B9:F8:86:C0:5B","sha256":"CE:97:A7:27:08:B8:B1:BC:D4:FD:40:CE:00:B5:B2:54:2D:B9:24:32:DA:A7:5B:EF:DE:F5:4B:F4:B6:13:B7:D1"}}},"request":{"raw":"GET /20250604_200445438_sxL.gif HTTP/1.1\r\nHost: m1.cffpng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:30 GMT\r\ncontent-type: image/gif\r\ncontent-length: 78972\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BsVl4aikcvoO%2BTJbbAK18ZKh0S%2FlWHeh0wnv1o5JaFUnX2w1xPXyWNszio6YrFMPpKZTbBeY%2FBhXywHM2jJQc%2Bsd7%2BlKyhiPKIT4J%2BU%3D\"}]}\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"1026b75f8e66c1d0646775831f9ad0b1\"\r\nlast-modified: Wed, 04 Jun 2025 12:04:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 5263\r\ncache-control: max-age=14400\r\ncf-ray: 98b29247e824b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78972,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"1026b75f8e66c1d0646775831f9ad0b1","sha1":"36cd55d7b20cabb2ea072fd686b544a006dcdab7","sha256":"fdbce3d2dab489d85ba4efa6efb206f78df802f8a9cd83e4b5ddb05dfc571c2f","sha512":"bf7522b6f6925c00a46076cc13f30ec61bfabc4cd8ac433e3afc7a08b65afd904c543ba2dc011fc06a4145726121879fd0a5138e668ece38499872ee940434ae","ssdeep":"1536:w8zUaFD42xLOWztfOhaPkPZFsZSdctq91M3atk2lq76dX4i9G:1LCWho5PTsZSdqqKatrlq76dIi9G","tlshash":"d973120149e8d387f40f9d986e01bab2b1e106928e12747b954759d0b20e44adefbfdd","first_seen":"2025-06-04T21:56:59.338113Z","last_seen":"2026-06-03T07:37:41.815053Z","times_seen":286,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":17,"receive":3,"ssl":464},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.tphsck.com/upload/vod/20250321-1/9c727c4023b4ff8c367c3c5ed1b77c55.jpg","fqdn":"img.tphsck.com","domain":"tphsck.com","tld":"com"},"ip":{"addr":"185.34.146.28","port":443,"asn":7488,"as":"CNServer LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.tphsck.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Aug 2025 15:52:30 GMT","end":"Sun, 02 Nov 2025 15:52:29 GMT"},"fingerprint":{"sha1":"D4:97:8B:B0:C8:B1:87:1F:37:77:C6:CB:EF:04:05:41:AB:83:C9:35","sha256":"F6:B0:68:A2:A0:CA:FE:2E:17:D2:D2:B7:26:B9:C9:7B:10:D0:C6:BA:6F:42:A5:F4:A0:49:16:AA:E9:B8:00:8A"}}},"request":{"raw":"GET /upload/vod/20250321-1/9c727c4023b4ff8c367c3c5ed1b77c55.jpg HTTP/1.1\r\nHost: img.tphsck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\ncontent-type: image/webp\r\ndate: Wed, 08 Oct 2025 03:23:42 GMT\r\netag: W/\"67dd4696-1a58f\"\r\nexpires: Fri, 07 Nov 2025 03:23:42 GMT\r\nlast-modified: Wed, 08 Oct 2025 03:23:42 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19262,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1bc9494f99273c899ea51a1989e9853f","sha1":"e39b2d0fd689ac5b84dce6054e3ea9952239c928","sha256":"1b0a645bb33a7e6458cddb501b28528b8db56bf6510b52c4893ffff171088ce5","sha512":"8a0e07aadb83954a77f247965f666f42ea2c50471731e7e59d67e5c08630f9f9a4a198a31af8dc94bf95bc989e3be215a5b1d5a8d2d8b864b55f77cd1a649ee9","ssdeep":"384:lCroXbHF3MTeULw+v53oaXvTOmq1doRzeWwYYgFvs/F+XsfpiUK:lCKF3MTDLw4YmTOD4uRFGSiUK","tlshash":"2f82e146d8a0cc238d18ada63d49c392c1cbdce9a07906f6f5c4c5a9d3259d6ee3d162","first_seen":"2025-10-08T03:32:59.992186Z","last_seen":"2025-10-08T03:32:59.992186Z","times_seen":1,"resource_available":false,"data":null}},"time_used":877,"timings":{"blocked":97,"dns":2,"connect":119,"send":0,"wait":115,"receive":0,"ssl":532},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richardlipsey.com/static/x_v7/css/app.css","fqdn":"richardlipsey.com","domain":"richardlipsey.com","tld":"com"},"ip":{"addr":"104.21.84.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richardlipsey.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 02:54:33 GMT","end":"Fri, 26 Dec 2025 03:52:17 GMT"},"fingerprint":{"sha1":"FA:EE:24:FB:EF:00:97:41:4D:D1:42:EA:F1:98:2A:89:1C:24:8F:D8","sha256":"8C:4A:85:64:FF:DF:88:10:97:C6:0F:1A:56:23:1B:8D:95:8B:43:61:19:C9:84:BA:BB:0A:8D:27:67:3F:6E:8B"}}},"request":{"raw":"GET /static/x_v7/css/app.css HTTP/1.1\r\nHost: richardlipsey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://richardlipsey.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=pUeUI5XIOHvHp-PKYREnZMS2-EwMiMTOrSWBY8Wn; wxxu=QlU9P1luV0txcQVyTwlEcniyUH2nRvHrPQpuaFN_tl5sukVftkStslFOZlGzZ6RES4umD92mn5NcrQET6U-cvQQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:28 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 31 Oct 2024 11:47:54 GMT\r\nvary: Accept-Encoding\r\netag: \"67236e6a-1157a\"\r\nexpires: Fri, 31 Oct 2025 06:34:11 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 593906\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wo5lHSCIoU4ncBAP0y4TItu2fZKcJQu%2FOzf9ykL1MzZImzPAhy68RhBzF4rQMaickIcJnyXhY2%2BaQcDbIjCKlEMAFHcj2SH5isqsPjPvVOzc\"}]}\r\ncf-ray: 98b292413addb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71034,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"2b9174a269bfa89673502782b79eac89","sha1":"8077c1b08b83c58d4628aae85bedfa6815c2ebf8","sha256":"19ee7ae6101ef2a225db1655b666ab0f35bf4092c0208e8c00e1c29eb104bec0","sha512":"72028c6cf75021992513af577c404729f698a729571baf6a1b524c56da536fb777c0a59acb0850ae994b466ba6d6b61b7aa2c1172dffe75376e7674e46dbe862","ssdeep":"1536:qwiiJWBNfcAOAW//QhZV2s3uy2kDRb6fPP1ep50J2lGVa3:qwt4hZV2smAb6fPP1ep50J2lGM","tlshash":"03636396b7f3640430179199945a9be2332e4083d14eef3ebba5319c9f892c6de33785","first_seen":"2025-01-03T22:40:24.570804Z","last_seen":"2026-03-19T08:16:17.939526Z","times_seen":13,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richardlipsey.com/favicon.ico","fqdn":"richardlipsey.com","domain":"richardlipsey.com","tld":"com"},"ip":{"addr":"104.21.84.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richardlipsey.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 02:54:33 GMT","end":"Fri, 26 Dec 2025 03:52:17 GMT"},"fingerprint":{"sha1":"FA:EE:24:FB:EF:00:97:41:4D:D1:42:EA:F1:98:2A:89:1C:24:8F:D8","sha256":"8C:4A:85:64:FF:DF:88:10:97:C6:0F:1A:56:23:1B:8D:95:8B:43:61:19:C9:84:BA:BB:0A:8D:27:67:3F:6E:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: richardlipsey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://richardlipsey.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=pUeUI5XIOHvHp-PKYREnZMS2-EwMiMTOrSWBY8Wn; wxxu=QlU9P1luV0txcQVyTwlEcniyUH2nRvHrPQpuaFN_tl5sukVftkStslFOZlGzZ6RES4umD92mn5NcrQET6U-cvQQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 08 Oct 2025 03:32:29 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Thu, 31 Oct 2024 11:44:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 02 Nov 2025 21:33:27 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 367143\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\netag: W/\"67236d94-1083e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5tTV1ZgMqlDxCxeN2gsIik0UF0G%2Bg5eCXplweTuG8rE4KLl%2BNxZL2lYs99NFKR4zFA6%2BhFIU4jJb25sOpbXLuvrXGvjnSyNDWz6Ej5M%2B32rD\"}]}\r\ncf-ray: 98b292447aeec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67646,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel","md5":"442f7210f6b618147c3e00e98274007e","sha1":"503266e86c13136efe81e761bc23348f5699bd88","sha256":"5b2a62fcea48c3d149b4ebf234643e6cb160144c726393b8a6308f168e648339","sha512":"e3a51aa8f7501743b5626e48c72dffb300b0108eed7a52cdd2db8bc0dbfc366fe0bd266be026167d1d2aa1f35f20ac372e8d7afb66a2ef26fd7a7ef86ea7f6be","ssdeep":"384:ypAhpNH6HGk1K2ylYliOd2C2ikd4OQSl2uVvFpHP0nKmTV:ZGHGb2WuiOd2S4V1lfVvvHPL2","tlshash":"4063ec81be90c88ee4251638c82dd6fc616e3c85ec4094037be7bfdfb872e92546a55d","first_seen":"2023-05-22T17:27:12Z","last_seen":"2026-03-19T08:16:17.946641Z","times_seen":373,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs4.imagebam.com/c0/af/fc/MEP35MT_t.GIF","fqdn":"thumbs4.imagebam.com","domain":"imagebam.com","tld":"com"},"ip":{"addr":"212.63.223.225","port":443,"asn":50827,"as":"SpaceDump IT AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imagebam.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 15 Nov 2024 00:00:00 GMT","end":"Sat, 15 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"B3:7B:BD:C4:71:57:E9:3A:FB:A2:EF:CD:8A:85:14:1C:0C:6C:70:D5","sha256":"FA:BD:AE:0C:A2:F4:BA:CF:95:89:41:83:C6:E0:11:24:51:D3:F7:1D:C5:B2:12:B6:BE:A4:34:EB:EE:FA:06:30"}}},"request":{"raw":"GET /c0/af/fc/MEP35MT_t.GIF HTTP/1.1\r\nHost: thumbs4.imagebam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Wed, 08 Oct 2025 03:32:30 GMT\r\nContent-Type: image/gif\r\nContent-Length: 601441\r\nvary: x-s-token\r\nlast-modified: Fri, 22 Sep 2023 04:14:13 GMT\r\netag: \"92d61-605ead75befd0\"\r\nX-Cache: HIT\r\nX-Whom: srv1535\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":601441,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 92","md5":"1cf9c89cf3066dcaec8120ac3d583fe2","sha1":"3bee0da5184ae911e425add7fbcc72f2127892e9","sha256":"ea9145f74bde32b8c641d3ac768e466cfba9cbc7a006d73a2b6aa084e0cd2b2a","sha512":"abba68020163dd3c873fbd530624daba909e1b25ba4dd5e88fa356307132399ad6c99135ab20823f51e8881d141c5eea199df864d27b4307db7ba6b61ffad6de","ssdeep":"12288:Nzfm7DOcqFy+zypnYop/XJEAiK1n8XQpfIN6Sc4Y3qNCO:Gr8gx3IN6SDPNCO","tlshash":"fad4230fc6598416fb7bc07cafa755558a8d1c2e27ae884cfe670aa5104c37c826ecd9","first_seen":"2023-11-05T11:28:18Z","last_seen":"2026-06-03T07:37:41.770252Z","times_seen":311,"resource_available":false,"data":null}},"time_used":811,"timings":{"blocked":-1,"dns":2,"connect":27,"send":0,"wait":38,"receive":266,"ssl":473},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m1.cffpng.com/20250604_192928793_fIn.gif","fqdn":"m1.cffpng.com","domain":"cffpng.com","tld":"com"},"ip":{"addr":"104.21.29.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f9742aa1.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 12:55:51 GMT","end":"Fri, 19 Dec 2025 13:55:49 GMT"},"fingerprint":{"sha1":"F6:5E:93:B0:B1:16:C2:96:5B:E5:1F:B1:C1:D9:73:B9:F8:86:C0:5B","sha256":"CE:97:A7:27:08:B8:B1:BC:D4:FD:40:CE:00:B5:B2:54:2D:B9:24:32:DA:A7:5B:EF:DE:F5:4B:F4:B6:13:B7:D1"}}},"request":{"raw":"GET /20250604_192928793_fIn.gif HTTP/1.1\r\nHost: m1.cffpng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:30 GMT\r\ncontent-type: image/gif\r\ncontent-length: 157404\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zda9xTgn8AxemzhAvWziy7nes0r1DIegGtNL%2FD90imcFtJDOPTTlyZP6PsdUzs9LEcKSEJb5wl%2BNq6MhZ0kr3O6AOiU%2BHixhWvx6F7k%3D\"}]}\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"f9a75a1d599b59be1b9b5ce608ffe4c4\"\r\nlast-modified: Wed, 04 Jun 2025 11:29:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 1449\r\ncache-control: max-age=14400\r\ncf-ray: 98b2924898acb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157404,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 120 x 119","md5":"f9a75a1d599b59be1b9b5ce608ffe4c4","sha1":"7d893a9c61e467b4eb3d7b00b308aa64a478a33c","sha256":"e5ec3be2124ad6d741737832bc35f1c28bf60e1c8611e76470be815a997437b9","sha512":"71077d697c0b0f611c30e2267a052f616c15f78f73d445c762f06dc507d2aa1e5d41c1945b1bad1032f811165fbe3f4e96e52c0eca616726e4486d3487a20f7f","ssdeep":"3072:EkLO9oiB16DdYsD8e2LNpmf8k1ay9TtZaTitE04L2j:TOjBkREN091aqTHsie0Zj","tlshash":"7af32348d05c048ce5f61e3c75ae7a2196ca9547f37e72912de3d8a3d97301ba43af22","first_seen":"2025-01-16T04:21:32.477183Z","last_seen":"2026-05-31T12:12:16.250667Z","times_seen":470,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":23,"dns":4,"connect":7,"send":0,"wait":7,"receive":4,"ssl":491},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/layer/3.1.1/theme/default/layer.css?v=3.1.1","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/layer/3.1.1/theme/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:29 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 2396\r\ncf-ray: 98b292442a35a0f0-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5ed4d0d2-381f\"\r\nlast-modified: Mon, 01 Jun 2020 09:56:34 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 950331\r\nexpires: Mon, 28 Sep 2026 03:32:29 GMT\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sV2Q4Xny4NlXFPlI6sKU3L65%2FFws7V0S8Z6jifsbSkfFWcN5j09WieR2luMSjhEOm1uNpBv8xIVecSm7xD3j3gHhqGV%2BedfimxwPJu0bo4hqSI6GbuabgO1QDu%2ByCAsrlyC7V23X\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14367,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (14367), with no line terminators","md5":"3d2e0d91c5c0b96abb8dbdc2234aba77","sha1":"9d55e153b30fd7414fada5718e20918e9c7f65e7","sha256":"e3144d018a6a24f733c6fc2a2ee603fb583f0030585e9d4b71bec471b78e31fc","sha512":"42bf3eff281998d088ce012b9a5910f72951c91715595572bb968fbfc5fa2b1cddacef3ca683a1734eb41114b302b6a4dad8b7432c5877b3563a080a2547ae05","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyPHL/LztJDzyv2OQ7KGx1jyd2/SWz:1WmLr2OtSrzzt42OQ7KGx1jCWR2b+RcU","tlshash":"2e5221e144811299b0278721d6dc7eba32f88d43e5630daef257381f874c6dba2b6647","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-06-03T10:40:16.088617Z","times_seen":6490,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs4.imagebam.com/17/19/88/MEPEDLU_t.jpg","fqdn":"thumbs4.imagebam.com","domain":"imagebam.com","tld":"com"},"ip":{"addr":"212.63.223.225","port":443,"asn":50827,"as":"SpaceDump IT AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imagebam.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 15 Nov 2024 00:00:00 GMT","end":"Sat, 15 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"B3:7B:BD:C4:71:57:E9:3A:FB:A2:EF:CD:8A:85:14:1C:0C:6C:70:D5","sha256":"FA:BD:AE:0C:A2:F4:BA:CF:95:89:41:83:C6:E0:11:24:51:D3:F7:1D:C5:B2:12:B6:BE:A4:34:EB:EE:FA:06:30"}}},"request":{"raw":"GET /17/19/88/MEPEDLU_t.jpg HTTP/1.1\r\nHost: thumbs4.imagebam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Wed, 08 Oct 2025 03:32:29 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6188\r\nvary: x-s-token\r\nlast-modified: Tue, 10 Oct 2023 02:22:02 GMT\r\netag: \"182c-607535f41a344\"\r\nX-Cache: HIT\r\nX-Whom: srv1535\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6188,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3","md5":"155fcc2c1bf1fe24594aa854fc36f3d5","sha1":"6bf018a247ce46063f98b28979a6e96a5aa28b5b","sha256":"2657b71deb167f1afd3c56aaf2c67bcc1c3704b368bd6fce5e9b89cb464e50c7","sha512":"7701925dd4a2f738be8dfbedaf33078b568f1c9fe5c9360dfe0259a87542f685755b94cf502f9a749810729cfe121e54bdd0564d5d8bc96a54b5c83061f53e2f","ssdeep":"192:RNfRCIQv+F1keP90/JXHcCfFYib0/t+Zlusv5nqqh3l:RTRlBmlcwYJAZ8sRf3","tlshash":"a2d19e00ef14ea0eda70e4b3a21f63f8951edd12ef5947b593d89231552a0c22a79a0c","first_seen":"2023-11-05T11:28:18Z","last_seen":"2026-06-03T07:37:41.757916Z","times_seen":406,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":199,"dns":13,"connect":25,"send":0,"wait":26,"receive":1,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.catbox.moe/slby5v.gif","fqdn":"files.catbox.moe","domain":"catbox.moe","tld":"moe"},"ip":{"addr":"108.181.20.35","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catbox.moe","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 22:38:20 GMT","end":"Fri, 14 Nov 2025 22:38:19 GMT"},"fingerprint":{"sha1":"3C:AB:3C:2D:1C:35:C9:9D:9C:C0:6E:EA:95:4B:2C:D4:AB:1F:D4:0B","sha256":"1D:FE:BE:E7:E9:E9:E4:48:51:AD:2A:42:D9:5A:CD:EE:5C:F5:0B:37:7B:D8:81:89:15:E6:97:C5:62:F9:8E:AE"}}},"request":{"raw":"GET /slby5v.gif HTTP/1.1\r\nHost: files.catbox.moe\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 03:32:30 GMT\r\ncontent-type: image/gif\r\ncontent-length: 39392\r\nlast-modified: Mon, 04 Aug 2025 06:04:19 GMT\r\netag: \"68904d63-99e0\"\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39392,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 100","md5":"c717ce787cef4052cc98b7b12e42f5c1","sha1":"8e724ee49e578fc998907b4cf555ba0c1395c0cf","sha256":"b854440ee1deef4dbae478bfb53b79a4fe303c7e257274f6a280094c19f22c18","sha512":"ed7ba482cbaa2373178b1c3533b5bf0c77f84ef95806a82709abcd29793ee4f28f436ce5ec2f9f2a8d0de7cf6237c885aa9663b044073f85846e259c247ca813","ssdeep":"768:4ezmJoabdOvzH7eBU3XzWPpY3zVIDwEwV4FXBj8X0x00+4SFoCs:vwNditSPpY3zqCV4/8X0Kvds","tlshash":"3903e1cea772b89bfc0c68332fa615441b91dfdbd8528a854eb20e1f7f00da4b0715a5","first_seen":"2023-05-20T12:50:37Z","last_seen":"2025-11-10T21:00:51.104148Z","times_seen":126,"resource_available":false,"data":null}},"time_used":2231,"timings":{"blocked":871,"dns":14,"connect":155,"send":0,"wait":304,"receive":155,"ssl":728},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"files.catbox.moe","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ml0987.com/thumb/1126724.webp","fqdn":"img.ml0987.com","domain":"ml0987.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ml0987.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 08:54:08 GMT","end":"Sat, 08 Nov 2025 09:51:37 GMT"},"fingerprint":{"sha1":"A3:D2:02:31:42:5C:E7:87:81:7C:BA:7E:3A:0E:17:ED:C3:DB:5C:0A","sha256":"44:31:8A:8E:CE:25:F7:54:0A:79:BF:AA:68:60:83:62:29:BA:96:98:A5:78:C4:F8:7A:BF:07:D4:F6:F3:83:FA"}}},"request":{"raw":"GET /thumb/1126724.webp HTTP/1.1\r\nHost: img.ml0987.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15190\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=31536000\r\ncf-bgj: h2pri,csam-hash\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\netag: \"68c02d73-3b56\"\r\nexpires: Thu, 06 Nov 2025 20:29:18 GMT\r\nlast-modified: Tue, 09 Sep 2025 13:36:51 GMT\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: HIT\r\nage: 21686\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d5Mho%2FOuchN9jotcyMQ0GOeI%2BAnqZxzgtVU6v2rE1ZKzUErBUKV9sBwBe5AL76tPijMWXaCE7EHtT9h0B5ypfi3tUOgdz3aqnYSTcQ%3D%3D\"}]}\r\ncf-ray: 98b2924a1e5a0afe-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x223, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bf595f79c942d941ad7965d0c4bca5ba","sha1":"04af7afa51dd6195885669e4bac15b462f493f01","sha256":"413f996a09d439b6bfde6933ff04d1ec5d24bdfa0cf6ee20374258e7909253fb","sha512":"d8b43529390057ae8785fbd048d5af44f202b3a984e9c84b290619650da4327e856e830a1c4a3b43abf0dc8037780446c921a89251676a626a605f4363fbeb8b","ssdeep":"384:SOAIxWxaWkAZeJ9stqFod5TsxY+HuXmc/Qy+X:SOlxWwWkWu9vNRHuXm+K","tlshash":"5662b068149f62bf595aa93fa4c313a8ab900073d24c71317324e529d487e81fb3dfa6","first_seen":"2025-09-27T13:31:39.790125Z","last_seen":"2025-10-08T03:33:00.00331Z","times_seen":2,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":176,"dns":8,"connect":4,"send":0,"wait":11,"receive":1,"ssl":460},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.gayzyimage.com/image/uploads/fc37be7a70989a4347ae934854228271.png","fqdn":"img.gayzyimage.com","domain":"gayzyimage.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.751Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /image/uploads/fc37be7a70989a4347ae934854228271.png HTTP/1.1\r\nHost: img.gayzyimage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T16:55:47.229708Z","times_seen":16084598,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"img.gayzyimage.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"img.gayzyimage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m1.cffpng.com/2025020810f8tgt.gif","fqdn":"m1.cffpng.com","domain":"cffpng.com","tld":"com"},"ip":{"addr":"104.21.29.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f9742aa1.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 12:55:51 GMT","end":"Fri, 19 Dec 2025 13:55:49 GMT"},"fingerprint":{"sha1":"F6:5E:93:B0:B1:16:C2:96:5B:E5:1F:B1:C1:D9:73:B9:F8:86:C0:5B","sha256":"CE:97:A7:27:08:B8:B1:BC:D4:FD:40:CE:00:B5:B2:54:2D:B9:24:32:DA:A7:5B:EF:DE:F5:4B:F4:B6:13:B7:D1"}}},"request":{"raw":"GET /2025020810f8tgt.gif HTTP/1.1\r\nHost: m1.cffpng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:30 GMT\r\ncontent-type: image/gif\r\ncontent-length: 557566\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XKdYwzs2g99zRidf7dhyQ%2ByO8nyt43Xrd7JBbiEttP3LPLxatcjkKL39oAq59CsDaI%2BN3dlqiYrnzppCqg1tbm6qWSxBXb0ivhgYyuk%3D\"}]}\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"08981705b3f3e7ab65a0ab29d4ae36b4\"\r\nlast-modified: Sat, 08 Feb 2025 10:22:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 1715\r\ncache-control: max-age=14400\r\ncf-ray: 98b292483860b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":557566,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 300","md5":"08981705b3f3e7ab65a0ab29d4ae36b4","sha1":"e2471798756bb33438743f5f675ac3991b53aae0","sha256":"983e76151091387c558e5b0a32893295e332c4184aebe0a0987d96c9776fbe32","sha512":"7f8196eafd17fb6cc3a0e7bffb0e6a7d7d6a7120e26bb36932e2bfb58b219aab1c1a169ee88ab9955cbc583340a9ed362deffb561fbdc084de97303b2917fffd","ssdeep":"12288:yfowKmrvAjqID00HKc9SZf8tQC+smCFNemDPTgAUgUrBEOW:yfoQrIQlcaf83+smy8mrTXUgUri","tlshash":"05c4234bcc9ca8b4de18bf1664cecd4be202f0ca05759097dd4e91f593bb62ec4a944a","first_seen":"2025-02-12T11:40:48.696541Z","last_seen":"2026-06-03T07:37:41.768425Z","times_seen":384,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":11,"dns":4,"connect":4,"send":0,"wait":8,"receive":23,"ssl":443},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v.ddnew10.com/20250922/P1CswV1w/1.jpg","fqdn":"v.ddnew10.com","domain":"ddnew10.com","tld":"com"},"ip":{"addr":"216.18.195.10","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v.ddnew10.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 13:17:35 GMT","end":"Wed, 10 Dec 2025 13:17:34 GMT"},"fingerprint":{"sha1":"17:66:ED:5D:1B:0C:86:68:92:52:14:DF:CC:C7:41:19:0F:3C:01:04","sha256":"94:D0:0E:22:0E:21:48:B9:84:81:53:BD:BD:8D:E6:79:1F:35:D4:54:93:E5:32:A3:99:7B:8A:8F:5C:46:82:BD"}}},"request":{"raw":"GET /20250922/P1CswV1w/1.jpg HTTP/1.1\r\nHost: v.ddnew10.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 404\r\ndate: Wed, 08 Oct 2025 03:32:30 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T16:55:47.229708Z","times_seen":16084598,"resource_available":true,"data":null}},"time_used":858,"timings":{"blocked":200,"dns":3,"connect":145,"send":0,"wait":140,"receive":0,"ssl":327},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"v.ddnew10.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/1.12.4/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 03:32:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 30360\r\ncf-ray: 98b29241ffa423eb-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-17b8b\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 34420\r\nexpires: Mon, 28 Sep 2026 03:32:29 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HnDVpV2eUzkO%2FLSVOH%2BfQw4E4ngeQp59khEA8E%2BKHgYPvmSxdvbecNxZSnxIA0zhkuJNfkLlz3stAWk6gjwPf0gins4PhG4uWxXZCJgUAGX7B7Sn1XFfoRnlD7X2sTnR8LquoXf%2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97163,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-03T16:30:55.527106Z","times_seen":78702,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":99,"dns":8,"connect":15,"send":0,"wait":12,"receive":4,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images2.imgbox.com/cb/9f/XQGCkjQi_o.png","fqdn":"images2.imgbox.com","domain":"imgbox.com","tld":"com"},"ip":{"addr":"212.63.223.227","port":443,"asn":50827,"as":"SpaceDump IT AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richardlipsey.com/","date":"2025-10-08T03:32:29.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgbox.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 15 Nov 2024 00:00:00 GMT","end":"Sat, 15 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"5A:6B:D2:2E:15:1B:62:D6:8E:55:AD:38:B3:95:0A:EB:B9:C5:52:86","sha256":"D2:B7:6A:32:B9:55:A8:DD:A8:54:56:C5:ED:5B:DE:60:F1:7B:D2:30:B0:AC:51:21:58:2B:B8:DA:2D:36:D5:25"}}},"request":{"raw":"GET /cb/9f/XQGCkjQi_o.png HTTP/1.1\r\nHost: images2.imgbox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://richardlipsey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.14.2\r\ndate: Wed, 08 Oct 2025 03:32:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 38441\r\nvary: x-s-token\r\nlast-modified: Wed, 28 Dec 2022 22:01:20 GMT\r\netag: \"9629-5f0ea82248c00\"\r\nx-cache: HIT\r\nx-whom: srv1535\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38441,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 207 x 204, 8-bit/color RGBA, non-interlaced","md5":"d9281b2d724078883a5b509d437e328a","sha1":"42c82fe1691afb5a8cf8413ae042372aecdaf9f0","sha256":"d66db76edd49e043926f3d85afb684c92cf6b6edb3145306c33d9b0f7c592829","sha512":"d014262f82c7076e242173b597f307fcbe56d17436fe205e088c5380bc7e42c89559d20b6649677c95c5dc7682f2b9bb4c51dc2d7b95ae4fa1d1c2de5d289db3","ssdeep":"768:SBjLVQgbAeiSzZHA0PmgJDmGVTkez2Lkiv2uatZ5vASDid+WvmF7:mPqg0eiS9g0OMDmGqQYatZ5qla","tlshash":"b803f1b64a37ed80732bd5c72043e051b6fc5a157ae5adab01a4a5e469103b3ec0ff70","first_seen":"2023-05-22T17:27:11Z","last_seen":"2025-11-10T21:00:51.117991Z","times_seen":293,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":11,"connect":28,"send":0,"wait":46,"receive":6,"ssl":562},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}