{"report_id":"14e03d28-dc15-4509-88e9-725d553fd6cc","version":6,"status":"done","tags":[],"date":"2026-01-10T02:42:20Z","url":{"schema":"http","addr":"aagmaal.nexus/","fqdn":"aagmaal.nexus","domain":"aagmaal.nexus","tld":"nexus"},"ip":{"addr":"172.67.187.76","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"aagmaal.pink/","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"title":"Aagmaal.Pink | Aagmaal.Run | Indian Uncut Web Series","dom":{"size":10523,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7319)","md5":"53b1585d047ad78c96cdc19d8348cae6","sha1":"d206ba28cfd0317dae2c2df5436119f89311505b","sha256":"972a10460434604783f9c7c44f481a17521d103bdc232a81c45c8b3386a57ee0","sha512":"dc2bc151bf2eacd0e4b2b8d76703a7fd75f0433040fc3c99ee744ba49cba5754d6bc6e2d1ead1d0d8f874704e621660919a6136c2dc001602947528c37387a35","ssdeep":"192:K8jzJo0qj38TkpDvjy1NOKXgenF1DmJVvUBydNRzdAhz:iv38T8K2enF1DmJVvFWhz","tlshash":"0c22f7614551102df0bb99a3e8e14e8d3236d707d353078df6de3d64c7c2ca67a72658","dom_hash":"domhash837509b01e6d5f654cd960a649750775","first_seen":"2026-01-10T02:42:35.958428Z","last_seen":"2026-01-10T02:42:35.958428Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"aagmaal.nexus/","fqdn":"aagmaal.nexus","domain":"aagmaal.nexus","tld":"nexus"},"ip":{"addr":"172.67.187.76","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-14T02:42:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":10}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"gfxdn.pics","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"gfxdn.pics","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"aagmaal.nexus","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"aagmaal.nexus","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"aagmaal.nexus","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"aagmaal.nexus","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"aagmaal.pink","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-12-28T02:39:30.642935Z","last_seen":"2025-12-28T02:39:30.642935Z","alert_count":0,"request_count":20,"received_data":692755,"sent_data":9306,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"bxSlider","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]}]},{"fqdn":"metricswpsh.com","ip":{"addr":"94.130.197.136","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-10-29","domain_rank":8777,"first_seen":"2021-11-02T17:43:55Z","last_seen":"2026-01-09T20:37:59.949879Z","alert_count":1,"request_count":1,"received_data":322,"sent_data":825,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"nereserv.com","ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2020-12-21","domain_rank":17097,"first_seen":"2020-12-21T11:07:56Z","last_seen":"2026-01-07T17:00:29.187884Z","alert_count":4,"request_count":2,"received_data":644,"sent_data":1106,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.uuidksinc.net","ip":{"addr":"31.220.27.155","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-05-05","domain_rank":47808,"first_seen":"2015-07-20T12:00:35Z","last_seen":"2026-01-08T16:57:00.010035Z","alert_count":0,"request_count":1,"received_data":544,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tsyndicate.com","ip":{"addr":"148.251.4.157","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2017-03-08","domain_rank":1289,"first_seen":"2017-03-16T09:04:54Z","last_seen":"2026-01-06T09:56:19.20983Z","alert_count":0,"request_count":1,"received_data":855,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.mbidpp.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-02-20","domain_rank":612388,"first_seen":"2023-04-22T00:02:45Z","last_seen":"2026-01-09T13:41:08.187186Z","alert_count":0,"request_count":1,"received_data":104868,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"gfxdn.pics","ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-10-01","domain_rank":36621,"first_seen":"2024-10-01T16:56:30Z","last_seen":"2026-01-08T21:44:02.946306Z","alert_count":2,"request_count":1,"received_data":2109,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"openrtb.tds.bid","ip":{"addr":"85.202.195.162","port":443,"asn":48716,"as":"PS Internet Company LLP","country":"Kazakhstan","country_code":"KZ"},"domain_registered":"2022-07-21","domain_rank":0,"first_seen":"2025-11-27T16:51:28.145531Z","last_seen":"2026-01-09T21:37:33.8886Z","alert_count":0,"request_count":1,"received_data":192,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bid.mbidtg.com","ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-03-09","domain_rank":366400,"first_seen":"2023-03-09T15:21:27Z","last_seen":"2026-01-08T23:42:22.394514Z","alert_count":0,"request_count":1,"received_data":2846,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2026-01-05T00:14:18.31671Z","alert_count":0,"request_count":3,"received_data":6933,"sent_data":1786,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"js.mbidinp.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-02-20","domain_rank":374893,"first_seen":"2023-04-25T12:26:08Z","last_seen":"2026-01-02T21:48:26.360247Z","alert_count":0,"request_count":2,"received_data":861641,"sent_data":838,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mbdippex.com","ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2023-04-26","domain_rank":21571,"first_seen":"2023-06-06T01:40:19Z","last_seen":"2026-01-07T16:29:09.869203Z","alert_count":0,"request_count":6,"received_data":61058,"sent_data":11110,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fp.metricswpsh.com","ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-10-29","domain_rank":154722,"first_seen":"2022-04-22T11:20:32Z","last_seen":"2026-01-07T10:37:45.904728Z","alert_count":2,"request_count":2,"received_data":814,"sent_data":1048,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mbddip.com","ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2023-04-26","domain_rank":36288,"first_seen":"2023-07-14T11:01:42Z","last_seen":"2026-01-02T21:48:26.108989Z","alert_count":0,"request_count":1,"received_data":322,"sent_data":599,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"p.a64x.com","ip":{"addr":"172.67.185.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-27","domain_rank":273555,"first_seen":"2023-07-27T13:12:45Z","last_seen":"2026-01-08T21:44:03.240924Z","alert_count":0,"request_count":1,"received_data":2465,"sent_data":1502,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hdbkell.com","ip":{"addr":"185.98.54.153","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-06-02","domain_rank":367686,"first_seen":"2023-06-16T11:43:57Z","last_seen":"2026-01-02T05:12:30.81356Z","alert_count":0,"request_count":4,"received_data":30477,"sent_data":2177,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.mbidadm.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-02-20","domain_rank":347799,"first_seen":"2023-02-21T18:08:24Z","last_seen":"2026-01-05T13:27:46.184114Z","alert_count":0,"request_count":1,"received_data":148115,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"uuidksinc.net","ip":{"addr":"31.220.27.155","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-05-05","domain_rank":6184,"first_seen":"2015-05-31T08:43:35Z","last_seen":"2026-01-09T21:37:34.170778Z","alert_count":0,"request_count":1,"received_data":3122,"sent_data":577,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"aagmaal.nexus","ip":{"addr":"104.21.80.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-08-14T02:59:48.237182Z","last_seen":"2025-10-08T09:56:04.584658Z","alert_count":4,"request_count":1,"received_data":77618,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"run1.08o.net","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-12-02","domain_rank":0,"first_seen":"2025-10-08T09:55:59.927552Z","last_seen":"2025-12-28T02:39:31.218249Z","alert_count":0,"request_count":18,"received_data":879646,"sent_data":7686,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.26.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mcpuwpsh.com","ip":{"addr":"94.130.197.240","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2022-08-12","domain_rank":38934,"first_seen":"2022-08-12T16:58:44Z","last_seen":"2026-01-08T18:26:28.939236Z","alert_count":0,"request_count":1,"received_data":10726,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aagmaal.pink/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-18T08:36:49.110784Z","times_seen":937529,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cd5ea35543390c5fc4e9def651ab721","sha1":"d360aa74dff157fcefda69336ecf420f04940f98","sha256":"9167cb37ed21405ef9556646b83789a2099c15398f5cea867470df1e81752e17","sha512":"d666a51729862abb8d23b0cca5d5ade738c08df2a23fbabb55be95f2a1fbef60255bda850cb36457e70bb2706067f9cee620169c9166f5e9f29a48af470d4fab","ssdeep":"384:lrKvSC3FheMYNzktJlro8aVfPxodAuyalYleh++PFoAS4TSPE9MfA+0UUTK7:gqC36LkJcjPxodAl8DiPE9/+0UKK7","tlshash":"da9294c5bb053d53e9ff12f64157170ba2368eed050e10289839efc629314b1a6efb69","size":20430,"data":"","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-08-17T14:17:09.650114Z","times_seen":5605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.mbidadm.com/static/scripts.js","fqdn":"js.mbidadm.com","domain":"mbidadm.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"45bf2279ae2968e0b223b01b47477328","sha1":"ac4292a0011d1e66cbbd2bbfba05998354f36a06","sha256":"68ecc71625e9a26e79277af11c848a4c48246245247c5aaad21026bd18f597f9","sha512":"fda5194f026a4268c3335d38f5cba8728449c2f5b55492a4522eb7eb7b18afcfa9fd443936518cf5b5cc4cb62d5b8bcc6dcef7e647266d52297df8b103bf2c8e","ssdeep":"1536:O8d+dnC5OPJdWo9aKRcZJotK8sBgpblO12FoX50FtQySd1uj6bzKNRKf7lbg0etc:jAHGJotqYXqd1uObGrK5E0etsz","tlshash":"0de33ad8b2d2b07407e75099d83f1206b73a1a16780c9068f6a5e9c17878ddb523bf7e","size":147727,"data":"","first_seen":"2025-12-24T08:41:20.200071Z","last_seen":"2026-01-15T06:19:14.842063Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdbkell.com/kxos9.js","fqdn":"hdbkell.com","domain":"hdbkell.com","tld":"com"},"ip":{"addr":"185.98.54.153","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa627b8c04064ffc8834b1f394aa5417","sha1":"998644d76abcbcfef5d27a958d133e4520a6776f","sha256":"04e11c7e892731e9314796232b1ff6485a4277d79df2e9ba8f26af8d104aaa34","sha512":"1a7556df06ec5b4aa527e29888c8e62e3e68a41dd29c0ffa06c671172888ff9feb7a5d870d5c05281a1093e4de5296a9f3439a1fd82b5c2b0cbb889e95b19f22","ssdeep":"768:0t/sMrvfiO77k5owMiuLh9iuaQDaf9CE/Ecd8sE+K:wx7kR4h9iMCccd87+K","tlshash":"27b2eac873aa786203e661b5913f714eb23ba555280e8010d117f9d17c7ea8fd227fad","size":25320,"data":"","first_seen":"2025-09-26T18:00:05.923711Z","last_seen":"2026-03-09T21:52:10.44829Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"05c34aa97fe606bebd43087609f3df8f","sha1":"252fa950b422c2fb189babfff23ce33bdc77d072","sha256":"07e86f9815c27d03950fe0310f8cc8c835cdc9363181a538515df0d1e6dc0ab2","sha512":"976a2adbb69e947018c0f6492fac2453acf15cfa5b547a8865be62677f95b319e256a987c73dfd1a5220ebbbafed832a305cc7ef5f811123c251fe36687e12b6","ssdeep":"","tlshash":"21b01281ac6f60be53717a41013233e59b205339440310ecd0645080b8c7c59d4fa9b2","size":98,"data":"","first_seen":"2023-04-11T06:35:04Z","last_seen":"2026-08-16T16:53:06.883296Z","times_seen":444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-18T08:34:03.975653Z","times_seen":125481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"75abd4cd8807b312f9f7faeb77ee774b","sha1":"e7b7a7ed06d0123ab8667a1d1eeb23de9f2bece7","sha256":"ca424c0181141900220a19f998ffa7660380bc99ab99557ad458a083251f7034","sha512":"c9f1f752994f1361555680ca5a60339fda152587ccc055db20148c086d82846887dd0801187aa033829b7d5eb9644b9391f493965eee35b4a1592f82cbb36aa4","ssdeep":"","tlshash":"bb01cbb6b30d44b604aa32178d5f61cd297d91e3a829649b8cc909502924c6d23befb8","size":683,"data":"","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-08-18T04:15:04.305499Z","times_seen":13116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6bca3556a2b94279d82f0fb483259247","sha1":"0062c81784ad046495cef73b1ca8d09e67d57834","sha256":"d4ddeb75f7b0c1d4e88479dded3cb6c112b46dd7514883deeea66f669238e1a1","sha512":"fccbdf4b970f9066f748c041ceefb06d5413ccf91da7a8bc9df7da111132a127c4a8686549ea9b12877a5ec6663541078ceaed76b53a780377538e67d5395fe0","ssdeep":"","tlshash":"ba9002455060149047b32979102618840025556466448c401095a995085107053468ac","size":46,"data":"","first_seen":"2023-04-12T04:33:36Z","last_seen":"2026-07-08T21:48:00.260446Z","times_seen":1456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.mbidinp.com/skins/nmain.m.js","fqdn":"js.mbidinp.com","domain":"mbidinp.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc975e803629b2688e2e36525ce024c9","sha1":"6ac03bb75a489cd0a49fb67b5b53513d61b0d1a1","sha256":"e2b93e3762332c11ea5ea691614926d6bd50ad11e162434699fc56eca9405e5d","sha512":"10efae7e45a6a456818e53fc52ab7ae9b1f550c4ca6adb3ec1e9d40e66cf0b9671e4e68ef8a699339e615d5161b38b3e794e6c782012d72e8b632f4169abb20b","ssdeep":"12288:bO6w3S6RowOCoO68XFxz9CuIgoQfKjbTxoWbPOSbvVTQBUfRLsddHxchOXEJOOzu:bOxVqufz9CNgoRbxdZUWZW","tlshash":"66d45a3132911139b0bfc8c6aa66278d336cf247e9170f55f96faaa483dbd54f625380","size":604874,"data":"","first_seen":"2025-12-11T16:15:42.358852Z","last_seen":"2026-01-29T09:34:31.702939Z","times_seen":800,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c675495748ef0df6858b93dd9e623c46","sha1":"e1be723e4e25d37282821c50b7e12796d3df5f8d","sha256":"9a32744fa4707d6ea1ad2b696c644c4f45d327509989b4625b8a980e4a45e271","sha512":"1775ad0e5bc7d3cc9ebdd032b94e440a0872f616f983ff867511984daba748ed52e1de5c67f0e4648947bef65b499b3a6197ff7726cf1f481b7d4253b6711127","ssdeep":"384:nudkTa6bYaGQZKbZi1X5U59g+rzyPSS1SMVu8r2WiWQK7XYANWck6QDhC2k+0CMu:uv9gPSSbs8PwhCK0CMl+ArJwz","tlshash":"e6b2b609b13939be05f632baf25ecb0550f6448d9827f0f4a8b5c94ddad88d4102fbe6","size":24252,"data":"","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-08-17T14:17:09.554958Z","times_seen":4582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-content/themes/retrotube/assets/js/main.js","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62479648a67b52a1f395970c883fdd50","sha1":"fb9b2468304ef42eecd402a8a935877ca61a9f35","sha256":"5e5bf8c461e32fca94beaf4df1cb8064e06d9702184807936464a163ca82e2e0","sha512":"3393648937cf923b85076b9668d4e49cddfaa4c72d44bcf1fc0dd58dd87720dcf6ebab044d60c8c95b2e47924f3ea361ff273267c7015134d768598580860c9f","ssdeep":"384:pnujdbo6UazbyFx4QsbatrEOFxnIfYatSyDZD9Vk2ly6oUv:puRbo7azbyFx5NtrEYnIwsnD19VkW/oO","tlshash":"2af29489f77d2546867a30da6c6f16cd313d1236a842086fbc2896e428e4b3c7396d3d","size":36394,"data":"","first_seen":"2025-08-28T06:46:38.264936Z","last_seen":"2026-08-17T14:17:09.645118Z","times_seen":1857,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"274bf74a0f024b6a3176c2548761dcb5","sha1":"3d1c143e498748409870beab8412983ab998994d","sha256":"f39cab2cf5f220333c9b4b1b79d2d92eb51b095218b1ff35b8006316d3d75633","sha512":"da33b69c82898c380353b69c0f4718cc366f4b1069c6099ddda6d54b71df87e7c3957dccad5e9aff5df17326073ac2a1d805d9d575361e6bf1168660d49c223a","ssdeep":"","tlshash":"3eb01251ac6f207f53717940113233e59b205339480300dce06850c17857c69d4fa931","size":98,"data":"","first_seen":"2023-04-11T06:35:04Z","last_seen":"2026-08-16T16:53:06.893653Z","times_seen":451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wpst-main-js-extra","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"10558f245bacda3f5002797b50918783","sha1":"6871178787b4992984852d3adfec68bad3d20715","sha256":"6e73e6984288ab63ae9690552f9f9b29760d2e34e2e81f580136ba84b3082def","sha512":"f7461e291b82509fc1bba9db779720280cdec6aa916f8f967e0bef40f38ad165556d38162c45fb1e3f9abdc816a85aa8b9203149b561ec259fdf30fa9d04acf3","ssdeep":"","tlshash":"75e0c0354b819fa326e1add0102c466399b4a012e1588d2967ccc8844da580377ea80e","size":355,"data":"","first_seen":"2026-01-10T02:42:36.02097Z","last_seen":"2026-01-10T02:42:36.02097Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-content/themes/retrotube/assets/js/navigation.js","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eca10535dd65f4979e3b3ad3ec8e02c2","sha1":"54c38c3bf24825e407741ef0e316f678a5b580db","sha256":"802bc6725fd37d15aa9d599fa3f921fca0d4c585162c7b23da8ccd6f3ded751d","sha512":"680521331d53bb6b47390979cbb907f78607dc713d99405ea8664d401b8e9e3106bca7111c1142d8abb4a5d71a7957998ada61407432f084648bba32ed8e1d27","ssdeep":"96:wqduIPMiXjA1L1AWeyQqECAvBvRgY31rr/qBvHsMTFsPFxLdY0fdKI:wktP/W1Henqxy1R31/iRHsIFiFPBkI","tlshash":"7c91318aff88217b71b7326a697f61ed373844339a085c22f874d1a03d9446406bafdd","size":4500,"data":"","first_seen":"2023-03-07T01:26:46Z","last_seen":"2026-08-17T14:17:09.643048Z","times_seen":4257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d5e1e0f93e9ca2709121da0a876a6ba","sha1":"317950562215bc1321c32eab3644d98a966129c0","sha256":"b3e32405361a449e32f0ada35b575567da5aa3258aae840f437780f5f319caca","sha512":"4fe0507d1152741af9e3523de0cc5aa293f5640ab44d350d6f57651acfc03f68b498c3f9fa60e8d6944bed4c72b50ebb33980496c21553f8a96983e270eda5e1","ssdeep":"","tlshash":"61f02773c5261e738df6008579b67b442c12a0378887fc21b79cc80d9f1de0b9c22478","size":501,"data":"","first_seen":"2026-01-10T02:42:36.021916Z","last_seen":"2026-01-10T02:42:36.021916Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-includes/js/jquery/jquery.min.js","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-18T08:36:49.094726Z","times_seen":1023932,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-includes/js/wp-emoji-release.min.js","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-18T08:17:47.798254Z","times_seen":311601,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-content/themes/retrotube/assets/js/lazyload.js","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dcca58db348f35d6eee39aadb7cd280","sha1":"0a513a0ebed60f4b0b4d69f7aaf519feaadbfaec","sha256":"2683c87843149db588b42abb7ef80b2815438fc44b368e1a855983f93ae431e4","sha512":"ee897cdc326f80eb18c74b3c42fe1b97b3b16c0be8f048a763cb33db134fa47dc2eb07bc1ba6cd8feb91385d791aa89a28816fd49217a57763dc54df1ef3693e","ssdeep":"96:IncwFK9HqOq0tioGJULBx7PYuyrr5VrcAeS1h3osyTaZ+1KZZ/p5k1QDSYRV9uR5:M9YH9qfJ2x7PYf5BcVSPfq+DkGDjP9u/","tlshash":"5fc15308b065b43f65777032523f130bb23a606778884494f6b4eae99ebc81e5923f7d","size":5755,"data":"","first_seen":"2023-03-07T12:12:33Z","last_seen":"2026-08-17T14:17:09.659156Z","times_seen":4325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uuidksinc.net/matchx?gdpr=0\u0026gdpr_consent=","fqdn":"uuidksinc.net","domain":"uuidksinc.net","tld":"net"},"ip":{"addr":"31.220.27.155","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"5333d217b59e0ad160bbf1fdfd245167","sha1":"89e8d9f121de90a47d167fa2ca2ce42f60adc6c4","sha256":"327d1bb11f0ec8f0dbf153da36f83e76a961dc5001784dab56de1d54d07f4eb9","sha512":"77ab38e603f4dafe51873720f0bcdbb86ff9283f8eb98c6195c12991d1af98ee7fb41462a30e1524b8d281790b4f799aafb9486b3a84d5844a6b3bdfe2255b64","ssdeep":"","tlshash":"0451d9ff734a38264f8550e9203f5204e07b5018b899c850edaab8d45d79aef03b2dac","size":2656,"data":"","first_seen":"2026-01-10T02:42:36.022901Z","last_seen":"2026-01-10T02:42:36.022901Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.mbidinp.com/npc/sdk/wpu/npush.m.js","fqdn":"js.mbidinp.com","domain":"mbidinp.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5971e1aea23eb692c8ba321767e3d616","sha1":"573f09736f6f905afafc2c19c5f6eb4984aa9f80","sha256":"6cd87ca3f3fa6e118e5cdfca3e2f1120a9e2326574e3de7448aecdf8012ab8d5","sha512":"256c2cabfe3651ea7cc1410c5deea1944344a6442894e55b997ba7f3cb1af177a79cefff5e0d84bb65b27a8b7912a3dec518d8d64352ac3a22cb1e808ef24673","ssdeep":"3072:hfB/9Xkw+QIsv7iIB7xz2/3UepiBz3oQrcQ7clZyQ5CO3ABWV+PQc:hfF9XBz2scQ7iCOwBWV+Pj","tlshash":"88446cd1368478b40593c0aee0770201b2382609f52db56cbabddee96586dce2377f79","size":255991,"data":"","first_seen":"2025-12-11T16:15:42.321021Z","last_seen":"2026-04-18T22:36:13.774074Z","times_seen":830,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.mbidpp.com/popunder-admanager/build.m.js","fqdn":"js.mbidpp.com","domain":"mbidpp.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"18ed0b9e187f65b2504edbee4720b8fc","sha1":"1e9376881a4d322497aed75ac2593f91e36a305b","sha256":"2b8bc5a06a8d026074a03b1bec90ad90e6c8e79780be14f3372122a60784d2b1","sha512":"42a936d7812fb61e66d11de514dd74ff39b554fbe3b00f0e63bcb221ce1a2b7bb62b64e135aa01dec5355f5c48ae459e121102cf48d5677c87857b580501bc95","ssdeep":"768:uAiyOOIGF3vRzxnR0i+bhLrhL5xub8JwHPsEIyp+dZIioT9FeWVbuoUfwqNl1PWD:zOOlBB0FuF0Xi77Jc/sknkU8JTVUi","tlshash":"99a32a8a32a1f4b006e244da943b0216f33e1929740e905cb7adddd5791ad4fa237f7e","size":104480,"data":"","first_seen":"2026-01-06T14:13:09.976808Z","last_seen":"2026-01-16T11:40:38.279062Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-includes/js/wp-emoji-loader.min.js","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1dbd1519d21aa1bebc9c104e7867191","sha1":"2e0ad0e4dcd354cde0099b1403836a47ed5fa71c","sha256":"e562eba3f7713df8dd5b8f5c710d3285248d14b5815c5739f342c6b0a4b64cf8","sha512":"d32d87c7ac227adc736e152427ebef8c45d70f0546d1383b82e0aea31d936aa986d3b2adb387a9d2c9fd81c1fd0f8485a5fab3277c8e1db6848d69c98f851519","ssdeep":"","tlshash":"2651669a277a3cdfb2f900d2697a4d47eb61443516c8d438c9bda3141cb5893c375b46","size":2991,"data":"","first_seen":"2025-12-28T02:39:39.697774Z","last_seen":"2026-01-18T06:20:08.7247Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"aagmaal.pink/wp-includes/css/dashicons.min.css","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aagmaal.pink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 17:49:38 GMT","end":"Mon, 23 Mar 2026 18:48:20 GMT"},"fingerprint":{"sha1":"45:2E:32:D4:76:8A:D3:F5:46:C6:93:3E:39:0C:73:6B:BA:C9:2F:33","sha256":"C2:D7:5D:2D:82:48:31:20:AD:30:20:EC:E9:F3:7C:96:02:2C:E2:7C:A1:6A:B9:33:1C:F1:E3:16:B4:3B:0E:AB"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css HTTP/1.1\r\nHost: aagmaal.pink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Dec 2025 17:20:05 GMT\r\netag: \"694c20c5-e67c\"\r\nexpires: Sun, 11 Jan 2026 17:45:43 GMT\r\ncache-control: max-age=259200\r\nstrict-transport-security: max-age=5184000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nage: 118572\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OuHVHOawJ857AvTwnIDI7PcCTZ%2BW4%2B%2FAcK3r%2FcW%2BOWwgyDexX5ZbwGEmfAt6moVPsecvh2PXVDnu2d6Ka27I%2FAw8i%2FiuSVoeems%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb8d177fb3c56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59004,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-08-18T08:38:27.818511Z","times_seen":68689,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-includes/css/dist/block-library/style.min.css","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aagmaal.pink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 17:49:38 GMT","end":"Mon, 23 Mar 2026 18:48:20 GMT"},"fingerprint":{"sha1":"45:2E:32:D4:76:8A:D3:F5:46:C6:93:3E:39:0C:73:6B:BA:C9:2F:33","sha256":"C2:D7:5D:2D:82:48:31:20:AD:30:20:EC:E9:F3:7C:96:02:2C:E2:7C:A1:6A:B9:33:1C:F1:E3:16:B4:3B:0E:AB"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1\r\nHost: aagmaal.pink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Dec 2025 17:20:05 GMT\r\netag: \"694c20c5-1d38f\"\r\nexpires: Sun, 11 Jan 2026 17:54:31 GMT\r\ncache-control: max-age=259200\r\nstrict-transport-security: max-age=5184000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nage: 118044\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AcjmHDgBR5zu8fvOfBbAzwXYVBHL21mriURNM8d%2BfxA94sICyytoEGI2SiseT4PuZVHWOniErnwoUP6nu3GNPC13QiKPEVCuoVM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb8d177fb3e56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":119695,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55871)","md5":"693359d40ab420bb23aa1b4be239f162","sha1":"67719855e95b9befb5e16556455ea78f3b9d7d92","sha256":"b4cd2f5507698b3ebd388e2d1ed31bef9c5704a171ccd53720c27c66df2510c7","sha512":"3ea55e5e2d2cfa21f66701e322928f3199042b8d3eef8f611cae1ee5d931903fb69d39b5cbb72f493e84f477b56f44fb24badc73f2c298785a9f29eb72b6d8a5","ssdeep":"3072:SoeJBCCUQg5MG7x+qehvX02dclkWwbFpPu:mfUQg5MG7x+qehvX02dclkWiF0","tlshash":"7ec3621417b4dcf935ffa73a5e4ee258a107aa41c68a67e6e066d190718ca490cf3f0f","first_seen":"2025-12-02T22:14:51.412485Z","last_seen":"2026-08-17T08:53:44.805408Z","times_seen":21738,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"run1.08o.net/8387.jpg","fqdn":"run1.08o.net","domain":"08o.net","tld":"net"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"run1.08o.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 02:31:59 GMT","end":"Fri, 20 Mar 2026 02:31:58 GMT"},"fingerprint":{"sha1":"EC:FB:53:E9:54:DD:0E:E9:51:E4:68:A6:57:9A:1D:56:2B:89:C6:7B","sha256":"40:F0:DE:54:B3:04:7E:71:C7:32:38:BB:4F:2C:27:E5:AF:95:51:AA:D3:80:71:1F:F6:EB:BA:FC:A0:A0:79:E1"}}},"request":{"raw":"GET /8387.jpg HTTP/1.1\r\nHost: run1.08o.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40412\r\nserver: nginx/1.26.0\r\netag: ecaa94572f8d9ebe5127b9760624101e\r\nlast-modified: Thu, 08 Jan 2026 18:39:22 GMT\r\nx-timestamp: 1767897561.88432\r\nx-trans-id: txda7abe9360dd4d2380fde-00695ffac7\r\nx-openstack-request-id: txda7abe9360dd4d2380fde-00695ffac7\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 12 Jan 2026 02:41:56 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40412,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 717x403, components 3","md5":"ecaa94572f8d9ebe5127b9760624101e","sha1":"5b2e1d84bba51577e0ea58879b83f09f34d1c29c","sha256":"8b881b1e00d35a40686da08ab89614c990bfc2f7f5a9facee48e894bb00d6c42","sha512":"4464f05c0a8988273b3e233bd723c2b1d0a3d45e5a0b147c85ecedd54b6415dc753c0690d243751c2bbc97d60bfd4eaf8c78cb8ee27c540af850f6aed753afb2","ssdeep":"768:yBx/Q9QY6Tt7SuepY7Jz0BxUhu95/nxN/cgu/5n/fIcitimxxHjoCDuFvf:y26J7SHOYxUhU5/gQtDrjoCD4","tlshash":"b203f1cc3f6727e1fc38e4194c8afe24f2e09649be4f81d7a6d678124e622d2155139e","first_seen":"2026-01-10T02:42:35.961049Z","last_seen":"2026-01-10T02:42:35.961049Z","times_seen":1,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":134,"dns":66,"connect":21,"send":0,"wait":52,"receive":34,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"run1.08o.net/8382.jpg","fqdn":"run1.08o.net","domain":"08o.net","tld":"net"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"run1.08o.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 02:31:59 GMT","end":"Fri, 20 Mar 2026 02:31:58 GMT"},"fingerprint":{"sha1":"EC:FB:53:E9:54:DD:0E:E9:51:E4:68:A6:57:9A:1D:56:2B:89:C6:7B","sha256":"40:F0:DE:54:B3:04:7E:71:C7:32:38:BB:4F:2C:27:E5:AF:95:51:AA:D3:80:71:1F:F6:EB:BA:FC:A0:A0:79:E1"}}},"request":{"raw":"GET /8382.jpg HTTP/1.1\r\nHost: run1.08o.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 42822\r\nserver: nginx/1.26.0\r\netag: f59c3aff555c3d67d3ec1600c5c5d4f5\r\nlast-modified: Wed, 07 Jan 2026 18:55:52 GMT\r\nx-timestamp: 1767812151.67035\r\nx-trans-id: tx92cb12cc25384f0bb8453-00695eadd6\r\nx-openstack-request-id: tx92cb12cc25384f0bb8453-00695eadd6\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 12 Jan 2026 02:41:56 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42822,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 717x403, components 3","md5":"f59c3aff555c3d67d3ec1600c5c5d4f5","sha1":"e96d9c88fda6f73e41de881524ded6c40f8d56cc","sha256":"bdd3e9cd0a0994a37f0c751b58274b2f0ab3819c1c9c5027852c405ac70b47a0","sha512":"efde3556646b6491474210a2ab312e942d2772dbdfa192cd420e0932cf315f3d4a9233fae89c3f67ede535608b3d8bbb2b67763dc6ce9b2b5b948512d22b424c","ssdeep":"768:hMrqQ/qokwSmRz74b50LpWLMM+DRCJvCgrq739Ymavz+A:Crrq3JmRHK5s4LMM+DRCJvz2JiLb","tlshash":"4413f1ec97c897c1325a9bd520aadc1135ebf99f0648c6d816fb061d531f32c2abb520","first_seen":"2026-01-10T02:42:35.962061Z","last_seen":"2026-01-10T02:42:35.962061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":62,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"run1.08o.net/8383.jpg","fqdn":"run1.08o.net","domain":"08o.net","tld":"net"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"run1.08o.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 02:31:59 GMT","end":"Fri, 20 Mar 2026 02:31:58 GMT"},"fingerprint":{"sha1":"EC:FB:53:E9:54:DD:0E:E9:51:E4:68:A6:57:9A:1D:56:2B:89:C6:7B","sha256":"40:F0:DE:54:B3:04:7E:71:C7:32:38:BB:4F:2C:27:E5:AF:95:51:AA:D3:80:71:1F:F6:EB:BA:FC:A0:A0:79:E1"}}},"request":{"raw":"GET /8383.jpg HTTP/1.1\r\nHost: run1.08o.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 43620\r\nserver: nginx/1.26.0\r\netag: 66c17808b6c27f781b4559a4a7c82fc9\r\nlast-modified: Wed, 07 Jan 2026 18:55:52 GMT\r\nx-timestamp: 1767812151.67033\r\nx-trans-id: tx193f7cc65d2145d4882d3-00695eadd1\r\nx-openstack-request-id: tx193f7cc65d2145d4882d3-00695eadd1\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 12 Jan 2026 02:41:56 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43620,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 717x404, components 3","md5":"66c17808b6c27f781b4559a4a7c82fc9","sha1":"ab0bdf045d090304bb14aba08c125f4de8edd59b","sha256":"e278277fdd53f7551bc101493d05c0066971a092e8ecb228cbea212dbd38856e","sha512":"9786a459c8ff10924c25a894b131f1a2f459adee219b29e526ed8dc6bb2d19aca2212d2ed47dfd0b3a635ed71dd7ecbb1a90a2b416be0c459e3ae5543114c0dd","ssdeep":"768:frh8kF9z+lV2A2kD9ilVl6yHNJopKrPN4+DeFh/0tyCEyaz0+phYZ/1pg8T4D6vz:98W9z+lV2Yp6VEyToYzC+DGh/jn7Y1Rd","tlshash":"3913f1dcc0d9b892d4e6281396bebabb67d032371cf6420d855974e4b8089d335d43db","first_seen":"2026-01-10T02:42:35.963159Z","last_seen":"2026-01-10T02:42:35.963159Z","times_seen":1,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":62,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"run1.08o.net/8372.jpg","fqdn":"run1.08o.net","domain":"08o.net","tld":"net"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"run1.08o.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 02:31:59 GMT","end":"Fri, 20 Mar 2026 02:31:58 GMT"},"fingerprint":{"sha1":"EC:FB:53:E9:54:DD:0E:E9:51:E4:68:A6:57:9A:1D:56:2B:89:C6:7B","sha256":"40:F0:DE:54:B3:04:7E:71:C7:32:38:BB:4F:2C:27:E5:AF:95:51:AA:D3:80:71:1F:F6:EB:BA:FC:A0:A0:79:E1"}}},"request":{"raw":"GET /8372.jpg HTTP/1.1\r\nHost: run1.08o.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41595\r\nserver: nginx/1.28.0\r\netag: 1554b0484022e15e382696682d2930db\r\nlast-modified: Fri, 02 Jan 2026 20:08:54 GMT\r\nx-timestamp: 1767384533.04082\r\nx-trans-id: tx2cb4352b5dab4239908b4-00695825e8\r\nx-openstack-request-id: tx2cb4352b5dab4239908b4-00695825e8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 12 Jan 2026 02:41:56 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41595,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 717x404, components 3","md5":"1554b0484022e15e382696682d2930db","sha1":"525d927dd1ffa802c7d30b5c8da3cff75380c899","sha256":"b583f8b7e650f2d833965e42eb15ebdcbeb4269873562e1a3257f2714c5389dc","sha512":"e3cc120e2e3be72c1355c817902678df08da9e63d3c9073ae3d3a95c0dc610914f2b7ca93b97a2d293d220663480504809555b8651e4677f5b954c68fcf94f27","ssdeep":"768:uUfMktJ8RMYqPiMvUYYfscz0kf/Q4qQbH+PTOVRxgexvOBoqWdca5837TceF:uUEaJ8RMdiMvmscJf/C7C/tvStd3vPF","tlshash":"2b13e2948ba8bbaab1ec7612d7916c8177c4db0bbd26840f31b62380659342770768d6","first_seen":"2026-01-10T02:42:35.964315Z","last_seen":"2026-01-10T02:42:35.964315Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":57,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid.mbidtg.com/tags/384587?version_name=d\u0026domain=aagmaal.pink","fqdn":"bid.mbidtg.com","domain":"mbidtg.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bid.mbidtg.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 02:32:20 GMT","end":"Sun, 22 Mar 2026 02:32:19 GMT"},"fingerprint":{"sha1":"EA:97:78:73:74:FB:6E:EC:DA:AE:DC:8E:16:8C:D3:C3:4A:4F:15:76","sha256":"B2:C8:C3:6B:87:E4:68:4F:66:54:4D:BB:B6:3C:EA:3D:5B:1E:47:58:20:45:7A:23:F6:FF:F4:91:AE:14:47:96"}}},"request":{"raw":"GET /tags/384587?version_name=d\u0026domain=aagmaal.pink HTTP/1.1\r\nHost: bid.mbidtg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aagmaal.pink\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:57 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.24.0\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: EXPIRED\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2603,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1c2831c99491e2824fdef514e26bf3c2","sha1":"f5c9d2125c938f7659463ec429a580523910d058","sha256":"1a08bf9cf5eed604bf779bb518a7c6e1391269512fcf4bdc33d48e5c7a900220","sha512":"bb0bee6e218b28697889ee764ce1cdd9ea7ed494cfc18598ce123896b387a0dcfcd6795db343b8c6e0030b3c927eda77a1d8dbe8c248ee7ec69c7d5d2f6319e8","ssdeep":"","tlshash":"5f5166b88a399cbbc0d4478be4c67f45435922abb0c87415f8ac8dbd06cf4e51b2a11f","first_seen":"2026-01-03T19:43:16.63533Z","last_seen":"2026-01-10T02:42:35.965435Z","times_seen":2,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":87,"dns":40,"connect":19,"send":0,"wait":35,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S1697926537%3A1768012918440405\u0026hl=en\u0026ifkv=AXbMIuAcXd88_i2KSaow9SbXRWCZMMHVQqKpwe5v3RGj4C5wxEpdDtCd4KbRnrXMSO1fS-zhmAWj_w\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:58.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S1697926537%3A1768012918440405\u0026hl=en\u0026ifkv=AXbMIuAcXd88_i2KSaow9SbXRWCZMMHVQqKpwe5v3RGj4C5wxEpdDtCd4KbRnrXMSO1fS-zhmAWj_w\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 10 Jan 2026 02:41:58 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-EEYdPSUjuX44Yul2P24jwA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.O2IxjaDA--M.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T08:37:27.023409Z","times_seen":17952081,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdbkell.com/get_data?v=default\u0026page=https%253A%252F%252Faagmaal.pink%252F\u0026domain=aagmaal.pink\u0026blockID=415742\u0026gdpr=0\u0026gdprConsent=\u0026os=\u0026osVersion=\u0026limit=1\u0026format=json\u0026sspUid=8eb0447b-15bf-44f5-be7d-66bb3d976ea4","fqdn":"hdbkell.com","domain":"hdbkell.com","tld":"com"},"ip":{"addr":"185.98.54.153","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdbkell.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 23:20:08 GMT","end":"Tue, 24 Feb 2026 23:20:07 GMT"},"fingerprint":{"sha1":"D4:DC:7D:1E:C8:A0:C8:CE:E2:9B:B7:D6:C6:F5:CA:BE:D5:7E:66:4B","sha256":"34:33:D2:33:EA:B5:F4:EB:C9:F9:96:AD:77:FB:6F:6C:C8:0F:F2:9F:57:F3:55:20:F3:81:87:85:57:1B:22:57"}}},"request":{"raw":"GET /get_data?v=default\u0026page=https%253A%252F%252Faagmaal.pink%252F\u0026domain=aagmaal.pink\u0026blockID=415742\u0026gdpr=0\u0026gdprConsent=\u0026os=\u0026osVersion=\u0026limit=1\u0026format=json\u0026sspUid=8eb0447b-15bf-44f5-be7d-66bb3d976ea4 HTTP/1.1\r\nHost: hdbkell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://aagmaal.pink\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: dmpUid=j4cZjXYXAkdrJs6x21FP\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.23.2\r\ndate: Sat, 10 Jan 2026 02:41:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://aagmaal.pink\r\nreferer: \r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3525,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"81363962bf18977f1a2db03ed0d67c90","sha1":"4da79117caec9308b6ff3fd33abecb03f263da83","sha256":"139a5ba89b9fca9869e62cee0c1c174a4cdf76b3727ff749d175b4b6918c0194","sha512":"91be378e44f310e816363474577f5314f2ee7ae4238e8e97666e916bf32a251afffdbc4b519e04879c3d13f39140b88bb95684692354d4f3116f60e69e453c8f","ssdeep":"","tlshash":"c9713c1bee2e67a6ff39af4415db7349656312130d84c098e82d3d0b4f399f812c4900","first_seen":"2026-01-10T02:42:35.967544Z","last_seen":"2026-01-10T02:42:35.967544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-10T02:41:56.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aagmaal.pink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 17:49:38 GMT","end":"Mon, 23 Mar 2026 18:48:20 GMT"},"fingerprint":{"sha1":"45:2E:32:D4:76:8A:D3:F5:46:C6:93:3E:39:0C:73:6B:BA:C9:2F:33","sha256":"C2:D7:5D:2D:82:48:31:20:AD:30:20:EC:E9:F3:7C:96:02:2C:E2:7C:A1:6A:B9:33:1C:F1:E3:16:B4:3B:0E:AB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aagmaal.pink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: PHP/8.2.27\r\nlink: \u003chttps://aagmaal.pink/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9YpdljmPZdXbSEi18JP%2FplmkNM4%2BmrC67ENLs%2B4C%2F7qMxJzdtjcP7Ds7ZVnykzbO5%2FRm1mBfDITI%2FFQq6ieojaoXT78aAE8jirhWbQ%3D%3D\"}]}\r\nstrict-transport-security: max-age=5184000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-ray: 9bb8d1758af9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"bxSlider","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76940,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (8832)","md5":"ce6ce3d94a503ffb3433dd7ce4522560","sha1":"ff48f377e9d205f7a72dedd780846c105fd9ef8c","sha256":"acb9ed4c05645dffc97bea37d6b57bff9010a0453f79295f1cd41284235913e6","sha512":"e2e2c268608af8d8195179eec60fecb176b598dd569f9685ea4ddfdd707e08923706fc065548736dd903170b735f6e84399652ec8916ad426e939b8932a190a7","ssdeep":"1536:kIaMuarypFfX6rfZKyO5QYvBt0IxYmCIzbuqqpBQKzYMecmSA:4g2bfdYmCikBQK7ecmT","tlshash":"78738572fb19977b070946c44ce8fe4b9485fd3a9e029da7f5fe20c885a7cf20251926","first_seen":"2026-01-10T02:42:35.968478Z","last_seen":"2026-01-10T02:42:35.968478Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":35,"dns":21,"connect":1,"send":0,"wait":184,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"run1.08o.net/8377.jpg","fqdn":"run1.08o.net","domain":"08o.net","tld":"net"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"run1.08o.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 02:31:59 GMT","end":"Fri, 20 Mar 2026 02:31:58 GMT"},"fingerprint":{"sha1":"EC:FB:53:E9:54:DD:0E:E9:51:E4:68:A6:57:9A:1D:56:2B:89:C6:7B","sha256":"40:F0:DE:54:B3:04:7E:71:C7:32:38:BB:4F:2C:27:E5:AF:95:51:AA:D3:80:71:1F:F6:EB:BA:FC:A0:A0:79:E1"}}},"request":{"raw":"GET /8377.jpg HTTP/1.1\r\nHost: run1.08o.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 44972\r\nserver: nginx/1.26.0\r\netag: b6c106f046fd83cb1c8860051cb58a14\r\nlast-modified: Mon, 05 Jan 2026 20:17:05 GMT\r\nx-timestamp: 1767644224.68368\r\nx-trans-id: tx6add16a111db4c17bb068-00695c1d2a\r\nx-openstack-request-id: tx6add16a111db4c17bb068-00695c1d2a\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 12 Jan 2026 02:41:56 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44972,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 717x404, components 3","md5":"b6c106f046fd83cb1c8860051cb58a14","sha1":"6e684a1729f962da512911c67515f1301bc5e985","sha256":"3cad906c18c023fddbaa007cf9b3b8b1a31cb215a62cb7c9bf66482cfee313be","sha512":"d391337459b0dc892adb0a1ad6366a0c3ab694eb4b1d3a5c4c5f01037ba698a07afa58311b8f0514c5a26b5f760f09137bb96cf93c87b80bd9dbb4a6a06801b6","ssdeep":"768:kU1zloXgDAAvvoafEg3gSWQ53Z7WQFu978ncO+w4jviZYfMVfnI18p9dfF+6:kEoXgDzQaD3gu53Z7948nP+ZveYfMVfN","tlshash":"a913f18b793635d574e3e0b216d958a60191fc88eaadefdeb4fb1000cc55b31278f61a","first_seen":"2026-01-10T02:42:35.969745Z","last_seen":"2026-02-20T13:16:17.469328Z","times_seen":3,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":62,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aagmaal.pink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 17:49:38 GMT","end":"Mon, 23 Mar 2026 18:48:20 GMT"},"fingerprint":{"sha1":"45:2E:32:D4:76:8A:D3:F5:46:C6:93:3E:39:0C:73:6B:BA:C9:2F:33","sha256":"C2:D7:5D:2D:82:48:31:20:AD:30:20:EC:E9:F3:7C:96:02:2C:E2:7C:A1:6A:B9:33:1C:F1:E3:16:B4:3B:0E:AB"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js HTTP/1.1\r\nHost: aagmaal.pink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 16:31:29 GMT\r\netag: \"68ade161-4fce\"\r\nexpires: Mon, 12 Jan 2026 05:06:33 GMT\r\ncache-control: max-age=259200\r\nstrict-transport-security: max-age=5184000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nage: 77723\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y7exSl8vvKqyjM5WSq7n4ba2Fwiwx5O11Pg59BVF4npoaybheZuUXx5h5pzblkeXQDzpHZPZxaNV5zc%2F6ClX5fmtIjJcH4sDWS8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb8d178eb8a56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20430,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20018)","md5":"4cd5ea35543390c5fc4e9def651ab721","sha1":"d360aa74dff157fcefda69336ecf420f04940f98","sha256":"9167cb37ed21405ef9556646b83789a2099c15398f5cea867470df1e81752e17","sha512":"d666a51729862abb8d23b0cca5d5ade738c08df2a23fbabb55be95f2a1fbef60255bda850cb36457e70bb2706067f9cee620169c9166f5e9f29a48af470d4fab","ssdeep":"384:lrKvSC3FheMYNzktJlro8aVfPxodAuyalYleh++PFoAS4TSPE9MfA+0UUTK7:gqC36LkJcjPxodAl8DiPE9/+0UKK7","tlshash":"da9294c5bb053d53e9ff12f64157170ba2368eed050e10289839efc629314b1a6efb69","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-08-17T14:17:09.650114Z","times_seen":5605,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-content/themes/retrotube/assets/js/navigation.js","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aagmaal.pink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 17:49:38 GMT","end":"Mon, 23 Mar 2026 18:48:20 GMT"},"fingerprint":{"sha1":"45:2E:32:D4:76:8A:D3:F5:46:C6:93:3E:39:0C:73:6B:BA:C9:2F:33","sha256":"C2:D7:5D:2D:82:48:31:20:AD:30:20:EC:E9:F3:7C:96:02:2C:E2:7C:A1:6A:B9:33:1C:F1:E3:16:B4:3B:0E:AB"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/navigation.js HTTP/1.1\r\nHost: aagmaal.pink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 16:31:29 GMT\r\netag: \"68ade161-1194\"\r\nexpires: Sun, 11 Jan 2026 17:46:05 GMT\r\ncache-control: max-age=259200\r\nstrict-transport-security: max-age=5184000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nage: 118550\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SQqmZx7cnrO5%2BgxewVgDI6bLeN14Aokpz9fxopk7QZZ%2BYP8r1vnEwSfkxOrX4I3vAGJJ%2FgA9vjgjADGKaj8SLy1lO2xLYyjRBF4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb8d178fb8f56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4500,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"eca10535dd65f4979e3b3ad3ec8e02c2","sha1":"54c38c3bf24825e407741ef0e316f678a5b580db","sha256":"802bc6725fd37d15aa9d599fa3f921fca0d4c585162c7b23da8ccd6f3ded751d","sha512":"680521331d53bb6b47390979cbb907f78607dc713d99405ea8664d401b8e9e3106bca7111c1142d8abb4a5d71a7957998ada61407432f084648bba32ed8e1d27","ssdeep":"96:wqduIPMiXjA1L1AWeyQqECAvBvRgY31rr/qBvHsMTFsPFxLdY0fdKI:wktP/W1Henqxy1R31/iRHsIFiFPBkI","tlshash":"7c91318aff88217b71b7326a697f61ed373844339a085c22f874d1a03d9446406bafdd","first_seen":"2023-03-07T01:26:46Z","last_seen":"2026-08-17T14:17:09.643048Z","times_seen":4257,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metricswpsh.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMzg1ODEyMjY5NDk5MDY3ODAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjQwLjIiLCJ0YWdfaWQiOjM4NDU4Nywic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjQ3LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9","fqdn":"metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"94.130.197.136","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 11:47:47 GMT","end":"Sun, 08 Feb 2026 11:47:46 GMT"},"fingerprint":{"sha1":"05:1E:63:2F:40:1F:87:C3:0D:F0:42:C7:EA:E8:B1:D8:6F:76:7C:FC","sha256":"1C:13:0E:F6:58:8A:8C:D7:DE:1F:9F:20:D5:17:50:15:02:D5:C8:8E:39:40:68:3F:01:24:F2:73:14:BA:25:0F"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMzg1ODEyMjY5NDk5MDY3ODAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjQwLjIiLCJ0YWdfaWQiOjM4NDU4Nywic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjQ3LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 HTTP/1.1\r\nHost: metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aagmaal.pink\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.0\r\ndate: Sat, 10 Jan 2026 02:41:57 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T08:37:27.023409Z","times_seen":17952081,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":89,"dns":5,"connect":26,"send":0,"wait":25,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mcpuwpsh.com/get/","fqdn":"mcpuwpsh.com","domain":"mcpuwpsh.com","tld":"com"},"ip":{"addr":"94.130.197.240","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:58.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"popunder-base.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 02:02:37 GMT","end":"Sat, 04 Apr 2026 02:02:36 GMT"},"fingerprint":{"sha1":"9B:E8:3D:66:67:88:7C:DD:9A:4D:3E:E3:DD:04:5E:14:B1:28:E4:07","sha256":"61:92:85:31:D4:1A:77:42:3F:EC:2A:1C:27:3B:C5:31:31:C6:32:DE:D7:24:08:BE:7B:F4:F7:AA:66:C3:85:D2"}}},"request":{"raw":"POST /get/ HTTP/1.1\r\nHost: mcpuwpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aagmaal.pink/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2366\r\nOrigin: https://aagmaal.pink\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2366,"data":"{\"imp\":[{\"secure\":1,\"ext\":{\"user_keywords\":\"\",\"tag_ab\":\"d\",\"id\":2612,\"spaceid\":2612,\"type\":\"pop\",\"subid\":\"390707676\",\"utm1\":\"\",\"utm2\":\"\",\"utm4\":\"\",\"spot_id\":2012230,\"labels\":\"\",\"blocked_verticals\":\"\",\"allowed_labels\":\"\",\"ad_tags\":\"Aagmaal.Pink%2CAagmaal.Run%2CIndian%2CUncut%2CWeb%2CSeries%2CAagmaal.Loan%2CAagmaal.Dance%2CAagmaal.Agency%2CAagmaal.Pictures%2CAagmaal.Cymru%2CAagmaal.Nexus%2CAagmaal.Spa%2CAagmaal.Band%2CAagmaal.Wales%2CAagmaal.Tube%2CAagmaal.Men%2CAagmaal.Cat%2CAagmaal.Moi%2CAagmaal.Foo%2CAagmaal.Dev%2CAagmaal.Run%2CAagmaal.Fun%2CAagmaal.Pics%2CAagmaal.Watch%2CAagmaal.Live%2CAagmaal.Tech%2CAagmaal.In%2CAagmaal.Club%2CAagmaal.Com%2CAagmaal.Xyz%2CAagmaal.Run%2CAagmaals.Net%2CAagmaal.Online%2CAagmaal.Today%2CUllu%2CKooku%2C11upmovies%2CXprime%2CUncutadda%2CUncut%2CAnd%2CUncensored%2CWeb%2CSeries%2CIndian%2CHot%2CHindi%2CWeb%2CSeries%2Cand%2CUncut%2CWeb%2CSeries%2CAAGmaal\",\"refdomain\":\"\",\"is_iframe\":false,\"gyr\":0,\"features\":\"\",\"accel\":0,\"ssp\":3758,\"rchange\":false,\"otype\":2,\"stratagem\":\"\",\"v2_track\":0,\"cla\":0,\"v2\":0,\"mn\":0,\"timezone_olson\":\"UTC\",\"event_id\":\"bc485432-2102-4326-9892-921e9be8a3a0\",\"testab\":0,\"approved_mainstream\":0,\"ver\":\"1.170.5\"},\"pext\":{\"ab\":0},\"metrics\":{\"sp_scr\":0,\"intes\":[],\"high_fr_clicks\":false,\"dev_cons_act\":false,\"scroll_percent\":0,\"empty_clicks\":0,\"prev_step_diff\":988,\"act_su\":1,\"izb\":\"0\"}}],\"site\":{\"id\":\"2012230\",\"cat\":[\"IAB25\"],\"page\":\"https%3A//aagmaal.pink/\"},\"device\":{\"w\":1280,\"h\":1024},\"user\":{\"id\":\"59af962887f337d7299b142fa6337684\",\"fp\":null,\"fp_str\":\"\",\"ua_data\":null,\"interest_ids\":[],\"is_webview\":false,\"is_inapp\":false,\"social_network\":\"\",\"device_specs\":{\"brand\":\"\",\"gpu_brand\":\"\",\"gpu_version\":\"\",\"os_name\":\"Windows\",\"cpu_cores\":48,\"device_memory\":0,\"width\":1024,\"height\":1280}},\"fp_params\":{\"plugins\":[\"PDF Viewer\",\"Chrome PDF Viewer\",\"Chromium PDF Viewer\",\"Microsoft Edge PDF Viewer\",\"WebKit built-in PDF\"],\"languages\":[\"en-US\",\"en\"],\"fonts\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"fontPreferences\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"platform\":\"Win32\",\"colorDepth\":24,\"deviceMemory\":0,\"hardwareConcurrency\":48,\"indexedDB\":true,\"sessionStorage\":true,\"localStorage\":true,\"cookiesEnabled\":true,\"colorGamut\":\"srgb\"},\"ext\":{\"dt\":1768012918681}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.16.0\r\ndate: Sat, 10 Jan 2026 02:41:59 GMT\r\ncontent-type: application/json\r\ncontent-length: 3608\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10347,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bcb5c736a400107398129449dd88664b","sha1":"36580f18436a7cf0962564cdcc035d93bcb3e15c","sha256":"899fe0b31afebe5a79fa64afd93ba27b9d1f661836cd48e23c176467a49014f3","sha512":"9252264fdd225f02c83ba5c1c1c560adb103a43e40d69769b540e205de24f8e811bc0a22d38416981de060a99c21c0ddfb462d805933f834e2c91981cb14532a","ssdeep":"192:YnmfVPUlDQun7JmP6Yhs/QlDQun7JmfnmfVPRYhs/R:YiVMyuUiYs/QyuUfiVpYs/R","tlshash":"452228855442aa20c8e27c229cfddc4315c65e5a8bfddda8d6784bb50896eb202cfd3c","first_seen":"2026-01-10T02:42:35.972094Z","last_seen":"2026-01-10T02:42:35.972094Z","times_seen":1,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":99,"dns":17,"connect":25,"send":0,"wait":265,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"run1.08o.net/8389.jpg","fqdn":"run1.08o.net","domain":"08o.net","tld":"net"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"run1.08o.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 02:31:59 GMT","end":"Fri, 20 Mar 2026 02:31:58 GMT"},"fingerprint":{"sha1":"EC:FB:53:E9:54:DD:0E:E9:51:E4:68:A6:57:9A:1D:56:2B:89:C6:7B","sha256":"40:F0:DE:54:B3:04:7E:71:C7:32:38:BB:4F:2C:27:E5:AF:95:51:AA:D3:80:71:1F:F6:EB:BA:FC:A0:A0:79:E1"}}},"request":{"raw":"GET /8389.jpg HTTP/1.1\r\nHost: run1.08o.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 42967\r\nserver: nginx/1.26.0\r\netag: 95377ab3e56d5014b35ca144ea6d2726\r\nlast-modified: Fri, 09 Jan 2026 20:21:51 GMT\r\nx-timestamp: 1767990110.25987\r\nx-trans-id: tx11b40fb3b82748ad9571e-006961640c\r\nx-openstack-request-id: tx11b40fb3b82748ad9571e-006961640c\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 12 Jan 2026 02:41:56 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42967,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 717x404, components 3","md5":"95377ab3e56d5014b35ca144ea6d2726","sha1":"0ec926a12505da9e7e8f25520539154516157c1c","sha256":"9ecba86b4ed7e06cba2db26bfa079e26fc75c2a81dfee86e5565188259b9b57f","sha512":"0144a7de64634440655329d2e6c9d27d66b4da9647e3ec08dd019215992c3ff764595f84cee0657458af600eb37e0e89a0e82d1593b02e25e8f5c46840842f5f","ssdeep":"768:Gi5sEtVYa4eqqGOt1KkB2nAx7HQjOrJ26stPOjSy5Ze94QZDWwCIj:R5sEtVYa0qGOtz8A+KrAJWD894QZDWdO","tlshash":"b913f1751732bb05df9a56b288b00eacb5da3eca1558ac7311cb62d1b123902b807b27","first_seen":"2026-01-10T02:42:35.972943Z","last_seen":"2026-01-14T22:46:55.874197Z","times_seen":2,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":99,"dns":67,"connect":19,"send":0,"wait":34,"receive":17,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"run1.08o.net/8385.jpg","fqdn":"run1.08o.net","domain":"08o.net","tld":"net"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"run1.08o.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 02:31:59 GMT","end":"Fri, 20 Mar 2026 02:31:58 GMT"},"fingerprint":{"sha1":"EC:FB:53:E9:54:DD:0E:E9:51:E4:68:A6:57:9A:1D:56:2B:89:C6:7B","sha256":"40:F0:DE:54:B3:04:7E:71:C7:32:38:BB:4F:2C:27:E5:AF:95:51:AA:D3:80:71:1F:F6:EB:BA:FC:A0:A0:79:E1"}}},"request":{"raw":"GET /8385.jpg HTTP/1.1\r\nHost: run1.08o.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45569\r\nserver: nginx/1.26.0\r\netag: 16a1b8ef9f458dddc38447c8af0cf39d\r\nlast-modified: Thu, 08 Jan 2026 18:39:22 GMT\r\nx-timestamp: 1767897561.88388\r\nx-trans-id: txde59f089385b4cb7a9049-00695ffac9\r\nx-openstack-request-id: txde59f089385b4cb7a9049-00695ffac9\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 12 Jan 2026 02:41:56 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45569,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 717x404, components 3","md5":"16a1b8ef9f458dddc38447c8af0cf39d","sha1":"404cb4e16e00dedadd706b76b98cef182f0f0b41","sha256":"c947bbc235b018046e2db50339dd1865fc0865361d53746d58b8d7a7cc44e519","sha512":"6be9df112227eb8d79fa8302fcde06050a80c0344060a20d9462bf2e1b0263334e114f9e33dd3b5490924514ae532ed47def9d044b8ba02d0619ddfd84f66968","ssdeep":"768:KrkiZTt9IbrjbMIJBbR+wkQCZPZSOUHn/AoF7z/V+3G88Ax1qRcZwQ7lZk9syat:Kr3ZzI/1Jb2fSvjzwb8A3mymlI","tlshash":"3a23f103a3ad14e1b19d43b5af1bdefe159d3b83365d5f1616c5122b982089f2e3a02c","first_seen":"2026-01-10T02:42:35.97391Z","last_seen":"2026-05-10T18:20:11.124606Z","times_seen":2,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":136,"dns":65,"connect":21,"send":0,"wait":51,"receive":32,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aagmaal.pink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 17:49:38 GMT","end":"Mon, 23 Mar 2026 18:48:20 GMT"},"fingerprint":{"sha1":"45:2E:32:D4:76:8A:D3:F5:46:C6:93:3E:39:0C:73:6B:BA:C9:2F:33","sha256":"C2:D7:5D:2D:82:48:31:20:AD:30:20:EC:E9:F3:7C:96:02:2C:E2:7C:A1:6A:B9:33:1C:F1:E3:16:B4:3B:0E:AB"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js HTTP/1.1\r\nHost: aagmaal.pink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 16:31:29 GMT\r\netag: \"68ade161-5ebc\"\r\nexpires: Mon, 12 Jan 2026 02:24:08 GMT\r\ncache-control: max-age=259200\r\nstrict-transport-security: max-age=5184000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nage: 87467\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EMO1qHHiYz%2B9rSgLvx4ts%2BCaAYybnqbLWAyVB6gr8e9zPIfJEzWUZSxVP93xpTLXuB9qZEPyQfDND6BPT%2BNtF5jKI9SzjLYCJM8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb8d178eb8c56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24252,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24063)","md5":"c675495748ef0df6858b93dd9e623c46","sha1":"e1be723e4e25d37282821c50b7e12796d3df5f8d","sha256":"9a32744fa4707d6ea1ad2b696c644c4f45d327509989b4625b8a980e4a45e271","sha512":"1775ad0e5bc7d3cc9ebdd032b94e440a0872f616f983ff867511984daba748ed52e1de5c67f0e4648947bef65b499b3a6197ff7726cf1f481b7d4253b6711127","ssdeep":"384:nudkTa6bYaGQZKbZi1X5U59g+rzyPSS1SMVu8r2WiWQK7XYANWck6QDhC2k+0CMu:uv9gPSSbs8PwhCK0CMl+ArJwz","tlshash":"e6b2b609b13939be05f632baf25ecb0550f6448d9827f0f4a8b5c94ddad88d4102fbe6","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-08-17T14:17:09.554958Z","times_seen":4582,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.mbidadm.com/static/scripts.js","fqdn":"js.mbidadm.com","domain":"mbidadm.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.mbidadm.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 12:32:00 GMT","end":"Mon, 09 Mar 2026 12:31:59 GMT"},"fingerprint":{"sha1":"66:FA:F3:91:37:32:F3:4B:C9:9C:68:A4:AC:61:89:CD:46:74:58:D8","sha256":"10:76:05:A2:22:84:01:63:E6:15:AD:DF:34:09:CC:3B:FE:46:AD:5B:97:B0:8D:55:0D:CB:33:F1:9F:38:2B:B5"}}},"request":{"raw":"GET /static/scripts.js HTTP/1.1\r\nHost: js.mbidadm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Wed, 24 Dec 2025 08:35:26 GMT\r\netag: W/\"694ba5ce-2410f\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 10 Jan 2026 02:46:56 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147727,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"45bf2279ae2968e0b223b01b47477328","sha1":"ac4292a0011d1e66cbbd2bbfba05998354f36a06","sha256":"68ecc71625e9a26e79277af11c848a4c48246245247c5aaad21026bd18f597f9","sha512":"fda5194f026a4268c3335d38f5cba8728449c2f5b55492a4522eb7eb7b18afcfa9fd443936518cf5b5cc4cb62d5b8bcc6dcef7e647266d52297df8b103bf2c8e","ssdeep":"1536:O8d+dnC5OPJdWo9aKRcZJotK8sBgpblO12FoX50FtQySd1uj6bzKNRKf7lbg0etc:jAHGJotqYXqd1uObGrK5E0etsz","tlshash":"0de33ad8b2d2b07407e75099d83f1206b73a1a16780c9068f6a5e9c17878ddb523bf7e","first_seen":"2025-12-24T08:41:20.200071Z","last_seen":"2026-01-15T06:19:14.842063Z","times_seen":109,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":80,"dns":24,"connect":21,"send":0,"wait":42,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.mbidinp.com/npc/sdk/wpu/npush.m.js","fqdn":"js.mbidinp.com","domain":"mbidinp.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.mbidinp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 02:32:08 GMT","end":"Fri, 13 Mar 2026 02:32:07 GMT"},"fingerprint":{"sha1":"23:36:6D:FD:65:AB:46:FC:1E:82:8C:E6:A7:E6:B4:1A:4E:9B:E0:3D","sha256":"C1:5C:5C:10:34:7C:04:F4:55:7B:87:64:D2:65:4F:0B:C3:84:80:74:4F:53:4B:3A:7B:63:20:25:CE:CA:F3:4E"}}},"request":{"raw":"GET /npc/sdk/wpu/npush.m.js HTTP/1.1\r\nHost: js.mbidinp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 11 Dec 2025 12:18:11 GMT\r\netag: W/\"693ab683-3e7f7\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 10 Jan 2026 02:46:57 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":255991,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5971e1aea23eb692c8ba321767e3d616","sha1":"573f09736f6f905afafc2c19c5f6eb4984aa9f80","sha256":"6cd87ca3f3fa6e118e5cdfca3e2f1120a9e2326574e3de7448aecdf8012ab8d5","sha512":"256c2cabfe3651ea7cc1410c5deea1944344a6442894e55b997ba7f3cb1af177a79cefff5e0d84bb65b27a8b7912a3dec518d8d64352ac3a22cb1e808ef24673","ssdeep":"3072:hfB/9Xkw+QIsv7iIB7xz2/3UepiBz3oQrcQ7clZyQ5CO3ABWV+PQc:hfF9XBz2scQ7iCOwBWV+Pj","tlshash":"88446cd1368478b40593c0aee0770201b2382609f52db56cbabddee96586dce2377f79","first_seen":"2025-12-11T16:15:42.321021Z","last_seen":"2026-04-18T22:36:13.774074Z","times_seen":830,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":93,"dns":21,"connect":21,"send":0,"wait":36,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?event_id=bc485432-2102-4326-9892-921e9be8a3a0\u0026subid=390707676\u0026spot_id=2012230\u0026created_at=2026-01-10\u0026timezone=0\u0026ver=1.170.5","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:58.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"GET /in/dip?event_id=bc485432-2102-4326-9892-921e9be8a3a0\u0026subid=390707676\u0026spot_id=2012230\u0026created_at=2026-01-10\u0026timezone=0\u0026ver=1.170.5 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aagmaal.pink\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 10 Jan 2026 02:41:58 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T08:37:27.023409Z","times_seen":17952081,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"run1.08o.net/8380.jpg","fqdn":"run1.08o.net","domain":"08o.net","tld":"net"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"run1.08o.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 02:31:59 GMT","end":"Fri, 20 Mar 2026 02:31:58 GMT"},"fingerprint":{"sha1":"EC:FB:53:E9:54:DD:0E:E9:51:E4:68:A6:57:9A:1D:56:2B:89:C6:7B","sha256":"40:F0:DE:54:B3:04:7E:71:C7:32:38:BB:4F:2C:27:E5:AF:95:51:AA:D3:80:71:1F:F6:EB:BA:FC:A0:A0:79:E1"}}},"request":{"raw":"GET /8380.jpg HTTP/1.1\r\nHost: run1.08o.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50125\r\nserver: nginx/1.26.0\r\netag: 6a9c866570d7bfd16c1b20b9e710522d\r\nlast-modified: Tue, 06 Jan 2026 19:29:09 GMT\r\nx-timestamp: 1767727748.91912\r\nx-trans-id: txbcf2c61946a7467180670-00695d631f\r\nx-openstack-request-id: txbcf2c61946a7467180670-00695d631f\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 12 Jan 2026 02:41:56 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50125,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 717x404, components 3","md5":"6a9c866570d7bfd16c1b20b9e710522d","sha1":"5a8f5caabe966aed55c8c750df145ae370068f10","sha256":"d926a0a8c29592cb510138b63d22c4630bf0a05070d0f93a05ad8d25831eebd2","sha512":"07f8644bcc41773ebf2298cf3f6f9f4d75fc03cd544f9da3ba576af2218ed2569e6322499617a2c146c52f8584cf9c6abf402e256773b14e419159274b6027e2","ssdeep":"1536:04qoGHDcVjUG1Z49tdzBYpIHYqE8p6Qyxo2QB9nN:04RVKD9eeHYqXpRB/","tlshash":"0033027a7c7029e9b8624f1b916578e8e5f25415c3809ccfd126b38c8a90d31b6bdcb6","first_seen":"2026-01-10T02:42:35.976802Z","last_seen":"2026-01-10T02:42:35.976802Z","times_seen":1,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":62,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-includes/js/wp-emoji-release.min.js","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aagmaal.pink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 17:49:38 GMT","end":"Mon, 23 Mar 2026 18:48:20 GMT"},"fingerprint":{"sha1":"45:2E:32:D4:76:8A:D3:F5:46:C6:93:3E:39:0C:73:6B:BA:C9:2F:33","sha256":"C2:D7:5D:2D:82:48:31:20:AD:30:20:EC:E9:F3:7C:96:02:2C:E2:7C:A1:6A:B9:33:1C:F1:E3:16:B4:3B:0E:AB"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js HTTP/1.1\r\nHost: aagmaal.pink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Dec 2025 17:20:05 GMT\r\netag: \"694c20c5-58ea\"\r\nexpires: Mon, 12 Jan 2026 02:40:18 GMT\r\ncache-control: max-age=259200\r\nstrict-transport-security: max-age=5184000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nage: 86499\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U4Ur3CK32D%2FyVSmLJG1Mhgfi4cAmLqjjgrU8QLtg9O3wG%2BkZHQlu3Z7wUdjaubKD9EloAbwFCzQVxhX4cvoP0o8xwIJz2N5qhWg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb8d17ccd1356bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-18T08:17:47.798254Z","times_seen":311601,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-content/uploads/2025/08/cropped-AAGMAAL-CYMRU-1-192x192.png","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aagmaal.pink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 17:49:38 GMT","end":"Mon, 23 Mar 2026 18:48:20 GMT"},"fingerprint":{"sha1":"45:2E:32:D4:76:8A:D3:F5:46:C6:93:3E:39:0C:73:6B:BA:C9:2F:33","sha256":"C2:D7:5D:2D:82:48:31:20:AD:30:20:EC:E9:F3:7C:96:02:2C:E2:7C:A1:6A:B9:33:1C:F1:E3:16:B4:3B:0E:AB"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/cropped-AAGMAAL-CYMRU-1-192x192.png HTTP/1.1\r\nHost: aagmaal.pink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sun, 07 Sep 2025 16:31:13 GMT\r\netag: \"68bdb351-18e2\"\r\nexpires: Mon, 12 Jan 2026 02:39:45 GMT\r\ncache-control: max-age=259200\r\nstrict-transport-security: max-age=5184000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nage: 86532\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4L9TumlB0DRFEscD2R%2BSgFvene7yaun1f0H%2F9dCTX4g8XzBhqMzTJG4EGph1NsQ1IumxHG9cOAabCmq%2FQ1H%2FWTJorv1DBmgnMeU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb8d17d2d3556bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6370,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"22ba8873dbd22712599100396a8a25cd","sha1":"d2b095f9f3622afc600d769011bc06b68d838664","sha256":"a96c811d98ea8c83c49b070e1a25bae32fc369819bdaed995b42809fdb1fe04f","sha512":"a53c16c60cb5739e1a0340494efaff4d16cd955a5fa064663e70512dd49e0d95a07d3b27b577efeebf456b73f947403783a3b9b63cd48ee96ccf9319debe5f61","ssdeep":"96:c28Y0C1G53dL9dzShOuj+VQzv3VrvanEJGc9EutibtnOWjk+XjIagVbi:MY0CMZBVQbddPtibtOZUXgVbi","tlshash":"ded19fe9b41957c3c15632388ff40b487311a48a4690fdaf15a1fb123b7ef04d671952","first_seen":"2025-10-08T09:56:11.612469Z","last_seen":"2026-08-16T16:53:06.867747Z","times_seen":26,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.mbidinp.com/skins/nmain.m.js","fqdn":"js.mbidinp.com","domain":"mbidinp.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.mbidinp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 02:32:08 GMT","end":"Fri, 13 Mar 2026 02:32:07 GMT"},"fingerprint":{"sha1":"23:36:6D:FD:65:AB:46:FC:1E:82:8C:E6:A7:E6:B4:1A:4E:9B:E0:3D","sha256":"C1:5C:5C:10:34:7C:04:F4:55:7B:87:64:D2:65:4F:0B:C3:84:80:74:4F:53:4B:3A:7B:63:20:25:CE:CA:F3:4E"}}},"request":{"raw":"GET /skins/nmain.m.js HTTP/1.1\r\nHost: js.mbidinp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 11 Dec 2025 12:18:05 GMT\r\netag: W/\"693ab67d-93aca\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 10 Jan 2026 02:46:57 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":604874,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dc975e803629b2688e2e36525ce024c9","sha1":"6ac03bb75a489cd0a49fb67b5b53513d61b0d1a1","sha256":"e2b93e3762332c11ea5ea691614926d6bd50ad11e162434699fc56eca9405e5d","sha512":"10efae7e45a6a456818e53fc52ab7ae9b1f550c4ca6adb3ec1e9d40e66cf0b9671e4e68ef8a699339e615d5161b38b3e794e6c782012d72e8b632f4169abb20b","ssdeep":"12288:bO6w3S6RowOCoO68XFxz9CuIgoQfKjbTxoWbPOSbvVTQBUfRLsddHxchOXEJOOzu:bOxVqufz9CNgoRbxdZUWZW","tlshash":"66d45a3132911139b0bfc8c6aa66278d336cf247e9170f55f96faaa483dbd54f625380","first_seen":"2025-12-11T16:15:42.358852Z","last_seen":"2026-01-29T09:34:31.702939Z","times_seen":800,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mbdippex.com/in/show/?tag_ab=d\u0026site_id=312012229\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Faagmaal.pink%2F\u0026refdom=aagmaal.pink\u0026auction_time=1768012917\u0026subid=80758997\u0026sid=3011992369\u0026tcid=0\u0026ver=8.244.2\u0026ver_c=\u0026spot_id=2012229\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2026-01-10\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=99.9329199051961\u0026kubik_score=99.93\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D80758997%26spot_id%3D2012229%26is_adult%3D1%26p%3Dhttps%253A%252F%252Faagmaal.pink%252F%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=\u0026url=https%3A%2F%2F28879.habiculpize.com%2F4%2F265110%3Fsubid%3D80758997\u0026icons=KXcZtffFoYsnK4E9mS9Pf1JupacX3PDGL8yjroHgS7kBwdF07gGqfQ\u0026ext_cid=0\u0026pop_price=3.5000000000000004e-05\u0026pop_ecpm=0.00018665320352208466\u0026px_id=0\u0026min_cpm=0.008109022454482546\u0026out_id=1\u0026campaign_type=lq-pop-ext\u0026aid=4167\u0026cid=21786\u0026uniq=\u0026mid=1196354953574720671\u0026skin_id=4\u0026vertical_id=11\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.019551000000000002\u0026cpm=0.035\u0026verify_hash=4113ab769e439e65cdfa3a946ea217b1\u0026verify_hash_v2=9194173b64ff122dc68e7d0f3f53899ea025191a4ccd0d7901fd67ab1b0111ae\u0026is_native=3\u0026real_bid=1.9551000000000003e-05\u0026pop_real_cpm=0\u0026pop_real_bid=1.9551000000000003e-05\u0026original_bid_usd=0.035\u0026original_bid=0\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=98,4,81,11\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=\u0026site=native-push-adult\u0026price=0\u0026hostname=auc-inpage-hz-5-a\u0026auc_type=1\u0026pop_type=1\u0026is_pop_cpc=0\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=webcams,bdsm,movies,asian\u0026pop_cpc=0\u0026ext_campaign_id_str=265110\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026auc_domain_type=basic\u0026script_type=general\u0026tma_wallet_balance=0\u0026processed_keywords=Movies%2CBDSM%2CAsian%2CWebcams\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.017476406850751487\u0026social_network=\u0026publisher_id=173083\u0026advanced_pub_id=0\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=1461443\u0026mediation_ecpm=0.035\u0026mediation_type=default\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpm\u0026final_source_id=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=social-view-b_r-body\u0026mlf=1\u0026mlc=1\u0026cpa=e22eed68-26cf-45f0-8af4-fdaf6fce1cf7\u0026prev_step_diff=572\u0026st=0.02","fqdn":"mbdippex.com","domain":"mbdippex.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:58.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"GET /in/show/?tag_ab=d\u0026site_id=312012229\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Faagmaal.pink%2F\u0026refdom=aagmaal.pink\u0026auction_time=1768012917\u0026subid=80758997\u0026sid=3011992369\u0026tcid=0\u0026ver=8.244.2\u0026ver_c=\u0026spot_id=2012229\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2026-01-10\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=99.9329199051961\u0026kubik_score=99.93\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D80758997%26spot_id%3D2012229%26is_adult%3D1%26p%3Dhttps%253A%252F%252Faagmaal.pink%252F%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=\u0026url=https%3A%2F%2F28879.habiculpize.com%2F4%2F265110%3Fsubid%3D80758997\u0026icons=KXcZtffFoYsnK4E9mS9Pf1JupacX3PDGL8yjroHgS7kBwdF07gGqfQ\u0026ext_cid=0\u0026pop_price=3.5000000000000004e-05\u0026pop_ecpm=0.00018665320352208466\u0026px_id=0\u0026min_cpm=0.008109022454482546\u0026out_id=1\u0026campaign_type=lq-pop-ext\u0026aid=4167\u0026cid=21786\u0026uniq=\u0026mid=1196354953574720671\u0026skin_id=4\u0026vertical_id=11\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.019551000000000002\u0026cpm=0.035\u0026verify_hash=4113ab769e439e65cdfa3a946ea217b1\u0026verify_hash_v2=9194173b64ff122dc68e7d0f3f53899ea025191a4ccd0d7901fd67ab1b0111ae\u0026is_native=3\u0026real_bid=1.9551000000000003e-05\u0026pop_real_cpm=0\u0026pop_real_bid=1.9551000000000003e-05\u0026original_bid_usd=0.035\u0026original_bid=0\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=98,4,81,11\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=\u0026site=native-push-adult\u0026price=0\u0026hostname=auc-inpage-hz-5-a\u0026auc_type=1\u0026pop_type=1\u0026is_pop_cpc=0\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=webcams,bdsm,movies,asian\u0026pop_cpc=0\u0026ext_campaign_id_str=265110\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026auc_domain_type=basic\u0026script_type=general\u0026tma_wallet_balance=0\u0026processed_keywords=Movies%2CBDSM%2CAsian%2CWebcams\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.017476406850751487\u0026social_network=\u0026publisher_id=173083\u0026advanced_pub_id=0\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=1461443\u0026mediation_ecpm=0.035\u0026mediation_type=default\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpm\u0026final_source_id=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=social-view-b_r-body\u0026mlf=1\u0026mlc=1\u0026cpa=e22eed68-26cf-45f0-8af4-fdaf6fce1cf7\u0026prev_step_diff=572\u0026st=0.02 HTTP/1.1\r\nHost: mbdippex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 10 Jan 2026 02:41:58 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T08:37:27.023409Z","times_seen":17952081,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-content/plugins/menu-icons/css/extra.min.css","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aagmaal.pink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 17:49:38 GMT","end":"Mon, 23 Mar 2026 18:48:20 GMT"},"fingerprint":{"sha1":"45:2E:32:D4:76:8A:D3:F5:46:C6:93:3E:39:0C:73:6B:BA:C9:2F:33","sha256":"C2:D7:5D:2D:82:48:31:20:AD:30:20:EC:E9:F3:7C:96:02:2C:E2:7C:A1:6A:B9:33:1C:F1:E3:16:B4:3B:0E:AB"}}},"request":{"raw":"GET /wp-content/plugins/menu-icons/css/extra.min.css HTTP/1.1\r\nHost: aagmaal.pink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Dec 2025 18:05:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 11 Jan 2026 17:46:04 GMT\r\ncache-control: max-age=259200\r\nstrict-transport-security: max-age=5184000; includeSubDomains; preload\r\npriority: u=2,i=?0\r\nage: 118552\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ot9U2h311JgTEyOWstFf05jPT2k0GN%2B1eZvpYx5tk0vdMW4UWnJlFjFQgpNXib7YVY2YLdfB87aWSj5VKQFJ2Qw6RlRvsEXjMw%3D\"}]}\r\netag: W/\"69419f68-32f\"\r\ncontent-encoding: br\r\ncf-ray: 9bb8d177fb3d56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":815,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (815), with no line terminators","md5":"27fa14302689f7f32e20359095766e4d","sha1":"1f3db901d6f8746008838a7e5f2be30feeaeef83","sha256":"968ab8ae6f33119ee267a11ce60920934e0d5e9d4714a3eb6b47cb9f05e42a0f","sha512":"72a1731e0b1280ab92fc988a67aa54d1f44874fe5d3be8eb7333e0f17bfec6951058928cb40a3419a47950b82b851c3cf18e9f6cb84e0765656ff4263d4baeec","ssdeep":"","tlshash":"5b0104f12d1a12bcc1a6a309bd98d2bc73a66435ddd2c806e33e953dc18b72625f6464","first_seen":"2023-04-06T10:08:02Z","last_seen":"2026-08-18T02:05:14.547146Z","times_seen":6780,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.uuidksinc.net/match/1/?cb_url=https%3A%2F%2Fhdbkell.com%2Fsetuid%3F%5BUID%5D\u0026gdpr=0\u0026gdpr_consent=","fqdn":"s.uuidksinc.net","domain":"uuidksinc.net","tld":"net"},"ip":{"addr":"31.220.27.155","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uuidksinc.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 23:22:16 GMT","end":"Sat, 28 Mar 2026 23:22:15 GMT"},"fingerprint":{"sha1":"A3:04:43:DF:E7:27:A9:50:C2:BB:1F:85:9F:88:08:C5:EC:23:CE:9C","sha256":"0A:4A:19:47:D5:5B:1B:87:C8:B1:25:95:05:A5:F0:D5:1F:A1:A0:DE:36:53:90:85:15:21:1A:64:2B:18:4B:F0"}}},"request":{"raw":"GET /match/1/?cb_url=https%3A%2F%2Fhdbkell.com%2Fsetuid%3F%5BUID%5D\u0026gdpr=0\u0026gdpr_consent= HTTP/1.1\r\nHost: s.uuidksinc.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.23.2\r\ndate: Sat, 10 Jan 2026 02:41:57 GMT\r\ncontent-length: 0\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nlocation: https://hdbkell.com/setuid?j4cZjXYXAkdrJs6x21FP\r\nset-cookie: jcsuuid=j4cZjXYXAkdrJs6x21FP; expires=Sun, 10 Jan 2027 02:41:57 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T08:37:27.023409Z","times_seen":17952081,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":46,"dns":3,"connect":17,"send":0,"wait":17,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdbkell.com/get_data?v=default\u0026page=https%253A%252F%252Faagmaal.pink%252F\u0026domain=aagmaal.pink\u0026blockID=415742\u0026gdpr=0\u0026gdprConsent=\u0026os=\u0026osVersion=\u0026limit=1\u0026format=json\u0026sspUid=8eb0447b-15bf-44f5-be7d-66bb3d976ea4","fqdn":"hdbkell.com","domain":"hdbkell.com","tld":"com"},"ip":{"addr":"185.98.54.153","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdbkell.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 23:20:08 GMT","end":"Tue, 24 Feb 2026 23:20:07 GMT"},"fingerprint":{"sha1":"D4:DC:7D:1E:C8:A0:C8:CE:E2:9B:B7:D6:C6:F5:CA:BE:D5:7E:66:4B","sha256":"34:33:D2:33:EA:B5:F4:EB:C9:F9:96:AD:77:FB:6F:6C:C8:0F:F2:9F:57:F3:55:20:F3:81:87:85:57:1B:22:57"}}},"request":{"raw":"OPTIONS /get_data?v=default\u0026page=https%253A%252F%252Faagmaal.pink%252F\u0026domain=aagmaal.pink\u0026blockID=415742\u0026gdpr=0\u0026gdprConsent=\u0026os=\u0026osVersion=\u0026limit=1\u0026format=json\u0026sspUid=8eb0447b-15bf-44f5-be7d-66bb3d976ea4 HTTP/1.1\r\nHost: hdbkell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://aagmaal.pink\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.23.2\r\ndate: Sat, 10 Jan 2026 02:41:57 GMT\r\ncontent-length: 0\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://aagmaal.pink\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T08:37:27.023409Z","times_seen":17952081,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=384587","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 11:47:47 GMT","end":"Sun, 08 Feb 2026 11:47:46 GMT"},"fingerprint":{"sha1":"05:1E:63:2F:40:1F:87:C3:0D:F0:42:C7:EA:E8:B1:D8:6F:76:7C:FC","sha256":"1C:13:0E:F6:58:8A:8C:D7:DE:1F:9F:20:D5:17:50:15:02:D5:C8:8E:39:40:68:3F:01:24:F2:73:14:BA:25:0F"}}},"request":{"raw":"POST /fp?tag_id=384587 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1972\r\nOrigin: https://aagmaal.pink\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1972,"data":"{\"timezoneOlson\":\"UTC\",\"incognito\":true,\"fonts\":{\"value\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"duration\":174},\"fontPreferences\":{\"value\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"duration\":420},\"languages\":{\"value\":[[\"en-US\"],[\"en-US\",\"en\"]],\"duration\":0},\"colorDepth\":{\"value\":24,\"duration\":0},\"deviceMemory\":{\"duration\":0},\"screenResolution\":{\"value\":[1280,1024],\"duration\":0},\"hardwareConcurrency\":{\"value\":48,\"duration\":1},\"timezone\":{\"value\":\"UTC\",\"duration\":29},\"sessionStorage\":{\"value\":true,\"duration\":0},\"localStorage\":{\"value\":true,\"duration\":0},\"indexedDB\":{\"value\":true,\"duration\":0},\"platform\":{\"value\":\"Win32\",\"duration\":0},\"plugins\":{\"value\":[{\"name\":\"PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chrome PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chromium PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Microsoft Edge PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"WebKit built-in PDF\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]}],\"duration\":0},\"vendor\":{\"value\":\"\",\"duration\":0},\"cookiesEnabled\":{\"value\":true,\"duration\":0},\"colorGamut\":{\"value\":\"srgb\",\"duration\":0},\"rendererUnmasked\":{\"value\":\"\",\"duration\":40},\"brand\":\"\",\"device\":\"\",\"os_type\":\"desktop\",\"os_family\":\"Windows\",\"front_browser_family\":\"Firefox\",\"front_browser_name\":\"Firefox 134\",\"pixel_ratio\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sat, 10 Jan 2026 02:41:57 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 58\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://aagmaal.pink\r\nSet-Cookie: id=6943779463656760265; Expires=Sun, 10 Jan 2027 02:41:57 GMT; Secure; SameSite=None\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c4efc1d6d16235d9433cd2565d887460","sha1":"22d069a5f536640e46122475c79db933e82d7f2e","sha256":"f0a6b8c736b7d8c5d3304a9ccd10d2114a0f25f2ba946cce62204df3384a131f","sha512":"af1cfe529f3173efdc7f4aff67355529095e775d8edb38d8a7c9565e09807aff470a465ffdf89ef6555f06cc88efa675823becc942896c63fa64a3140858f539","ssdeep":"","tlshash":"5ba00294c5c00e3c80200c3a73cf901628e4d304120217880ca66b5108822abe333c91","first_seen":"2025-07-26T17:44:43.174102Z","last_seen":"2026-06-07T07:46:29.043892Z","times_seen":7033,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":5,"connect":26,"send":0,"wait":26,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mbddip.com/in/dip?site=native-push\u0026wl=1\u0026event_id=529a7878-5cc6-4776-8820-345d84f64cd0\u0026subid=80758997\u0026sid=3011992369\u0026spot_id=2012229\u0026created_at=2026-01-10\u0026timezone=0\u0026ver=8.244.2\u0026is_native=1","fqdn":"mbddip.com","domain":"mbddip.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"GET /in/dip?site=native-push\u0026wl=1\u0026event_id=529a7878-5cc6-4776-8820-345d84f64cd0\u0026subid=80758997\u0026sid=3011992369\u0026spot_id=2012229\u0026created_at=2026-01-10\u0026timezone=0\u0026ver=8.244.2\u0026is_native=1 HTTP/1.1\r\nHost: mbddip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aagmaal.pink\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 10 Jan 2026 02:41:57 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T08:37:27.023409Z","times_seen":17952081,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S1697926537:1768012918440405\u0026ifkv=AXbMIuAYdSlu13umoH6kfGHkkwMjpYAINibww5A76n-tzcX0EpINWxB7f_sJ4197JMgKMeGMef7x8g","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:58.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S1697926537:1768012918440405\u0026ifkv=AXbMIuAYdSlu13umoH6kfGHkkwMjpYAINibww5A76n-tzcX0EpINWxB7f_sJ4197JMgKMeGMef7x8g HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:ubzD7PzBmrrYNFzxnwIlIsX3yRJ2Qg:Wa41YPYUBIT7umyq;Path=/;Expires=Mon, 10-Jan-2028 02:41:58 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 10 Jan 2026 02:41:58 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S1697926537%3A1768012918440405\u0026hl=en\u0026ifkv=AXbMIuAcXd88_i2KSaow9SbXRWCZMMHVQqKpwe5v3RGj4C5wxEpdDtCd4KbRnrXMSO1fS-zhmAWj_w\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-3cIdVjI3MsO-yGoQmhsz5A' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 418\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T08:37:27.023409Z","times_seen":17952081,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=384587","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 11:47:47 GMT","end":"Sun, 08 Feb 2026 11:47:46 GMT"},"fingerprint":{"sha1":"05:1E:63:2F:40:1F:87:C3:0D:F0:42:C7:EA:E8:B1:D8:6F:76:7C:FC","sha256":"1C:13:0E:F6:58:8A:8C:D7:DE:1F:9F:20:D5:17:50:15:02:D5:C8:8E:39:40:68:3F:01:24:F2:73:14:BA:25:0F"}}},"request":{"raw":"OPTIONS /fp?tag_id=384587 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://aagmaal.pink/\r\nOrigin: https://aagmaal.pink\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Sat, 10 Jan 2026 02:41:57 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://aagmaal.pink\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T08:37:27.023409Z","times_seen":17952081,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":25,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"run1.08o.net/8379.jpg","fqdn":"run1.08o.net","domain":"08o.net","tld":"net"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"run1.08o.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 02:31:59 GMT","end":"Fri, 20 Mar 2026 02:31:58 GMT"},"fingerprint":{"sha1":"EC:FB:53:E9:54:DD:0E:E9:51:E4:68:A6:57:9A:1D:56:2B:89:C6:7B","sha256":"40:F0:DE:54:B3:04:7E:71:C7:32:38:BB:4F:2C:27:E5:AF:95:51:AA:D3:80:71:1F:F6:EB:BA:FC:A0:A0:79:E1"}}},"request":{"raw":"GET /8379.jpg HTTP/1.1\r\nHost: run1.08o.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 53822\r\nserver: nginx/1.26.0\r\netag: 7b6df54dba52d5803ad7d9c55c0217ce\r\nlast-modified: Tue, 06 Jan 2026 19:29:09 GMT\r\nx-timestamp: 1767727748.90541\r\nx-trans-id: txd13dcc5d72e640d5aa1ec-00695d631f\r\nx-openstack-request-id: txd13dcc5d72e640d5aa1ec-00695d631f\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 12 Jan 2026 02:41:56 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53822,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 717x404, components 3","md5":"7b6df54dba52d5803ad7d9c55c0217ce","sha1":"bdef945f751324b16daca29580c09c241d744644","sha256":"fbf4c74a6c3daec9d67d0e10373aa86b3201d4cd3d8f8c6e659d4d5b220ada7e","sha512":"8b47644db4e7a56536f04aaa95dc2c5db3903a40351b71b878d107f3c0b18775e70b844cd448aeeba18d35b54d274cd238ae91ac3d74a9af05342cebc0d24434","ssdeep":"768:StilJUcKDC8ooG2zt/44/8eEmFAMrHeY+joOXT7qgxpFLHsDI3u0Gwf7GYyZEZBj:8HcSFf/0y3gJT77FUJ4TZBH+Di","tlshash":"4e330210049e56d174e023b79f20cdbb33d66f2622bd1c7bdfd5c259a2db24188445fa","first_seen":"2026-01-10T02:42:35.981423Z","last_seen":"2026-01-10T02:42:35.981423Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":62,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"run1.08o.net/8374.jpg","fqdn":"run1.08o.net","domain":"08o.net","tld":"net"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"run1.08o.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 02:31:59 GMT","end":"Fri, 20 Mar 2026 02:31:58 GMT"},"fingerprint":{"sha1":"EC:FB:53:E9:54:DD:0E:E9:51:E4:68:A6:57:9A:1D:56:2B:89:C6:7B","sha256":"40:F0:DE:54:B3:04:7E:71:C7:32:38:BB:4F:2C:27:E5:AF:95:51:AA:D3:80:71:1F:F6:EB:BA:FC:A0:A0:79:E1"}}},"request":{"raw":"GET /8374.jpg HTTP/1.1\r\nHost: run1.08o.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 37875\r\nserver: nginx/1.28.0\r\netag: 3c40c0b1fb5ebd05a74029048728db16\r\nlast-modified: Sat, 03 Jan 2026 10:12:00 GMT\r\nx-timestamp: 1767435119.13281\r\nx-trans-id: txc990924aa9f849168bf44-006958ec69\r\nx-openstack-request-id: txc990924aa9f849168bf44-006958ec69\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 12 Jan 2026 02:41:56 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37875,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 717x404, components 3","md5":"3c40c0b1fb5ebd05a74029048728db16","sha1":"779f9d935353b5e54c5697f953c73a7ca0eeae92","sha256":"e20c808373e0721180a34c5012102bd460953345a1c41aadf26360c8cc36b0c7","sha512":"42e585e323c00ae14a873ba832c83855d650a86c50e73d6e926afed4d3b82bbe7c167b20a82410047fe156681b62e81ec003189806efa4968fe825f260540764","ssdeep":"768:H6AfsNNP/mJnCWXXgFEo+auZkXBKYkGuYCZbBfHQ80yZifR:tGNnmMWXwFEoZoYkGuYGl0yZiJ","tlshash":"6003f1cc919a5798bc8691eeabf2aca198e09f1186c12fdc11e6d4d1de2a24c70d7225","first_seen":"2026-01-10T02:42:35.983311Z","last_seen":"2026-01-10T02:42:35.983311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":61,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/api/v2/ssp/set-client-id/X1Edn2OQGBSoDtSyyVQmYf1FVPo9GS5t?id=j4cZjXYXAkdrJs6x21FP","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"148.251.4.157","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uuidksinc.net/matchx?gdpr=0\u0026gdpr_consent=","date":"2026-01-10T02:41:57.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 21:10:04 GMT","end":"Tue, 10 Feb 2026 21:10:03 GMT"},"fingerprint":{"sha1":"BB:2C:CE:C9:92:0E:A9:18:50:BD:8C:7E:7D:B2:E6:CC:72:54:29:18","sha256":"3B:E3:8E:A4:C5:EC:08:3B:96:2B:B0:16:ED:56:3F:0A:CD:55:81:4A:8F:FC:97:83:57:FC:6E:F9:FD:F4:43:83"}}},"request":{"raw":"GET /api/v2/ssp/set-client-id/X1Edn2OQGBSoDtSyyVQmYf1FVPo9GS5t?id=j4cZjXYXAkdrJs6x21FP HTTP/1.1\r\nHost: tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uuidksinc.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 02:41:58 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\npragma: no-cache\r\nexpires: 0\r\nvary: *\r\nx-api-version: 2\r\nset-cookie: ccid-X1Edn2OQGBSoDtSyyVQmYf1FVPo9GS5t=j4cZjXYXAkdrJs6x21FP; path=/; secure; SameSite=None\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, no-transform\r\nx-robots-tag: none, noindex, nofollow\r\nreport-to: { \"url\": \"https://pxl.tsyndicate.com/api/v1/heavy-ad/report\", \"max_age\": 86401 }\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\npermissions-policy: ch-ua-model=(self \"https://tsyndicate.com\"), ch-ua-platform-version=(self)\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ba036c43037cfe89320d1ef7b64cd43f","sha1":"88c72d3e26047eb1e45e5564a76427734f120efe","sha256":"42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb","sha512":"aa80ccd27c05eb729f730b9d830b011650bcf12cbb25d19edf29efcf962c7465bb5685a5ff5d084356c6710c08e829d16b59e7a59a41767eb14744f326b6c124","ssdeep":"","tlshash":"19900403f5400003d175d03107170340134cd110057c0307405d505cdc553510c01010","first_seen":"2023-05-10T09:10:20Z","last_seen":"2026-08-17T03:43:15.449128Z","times_seen":16346,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":63,"dns":3,"connect":25,"send":0,"wait":25,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.a64x.com/in/tip_shows/?katds_ep=O_7E-I2NkUFsF5k7KRPNVCiwXAtaaTCDdRaxJZMIbn1vzq2wbOFm7cDZfzABMQDh7XvSCKrqd05z5N4Q4LtheaW3shZ3Xis6V62Z0MArKdEEYeENgpW4PpcgD02FAqBZYNTJWz3dM0t9kqx5lok1rPtZoKnkbZKKk-wyIEw_t8gmdv_4vzUJmRIYAG-HEMgqh00xMXYKVaNW345siaGFp5waOePf7kJrudIebzsNQgquTLQvcGnpBEiJEVnicBjBAypie53FMIYEzuKEKpofEYghA_cBTf17QJ9ObK0GUrEKMFYoyGC1KrIX1p89NMl1CZaAMnN_xUJ14w8mkWBX6hvsqOG94qHJquZ6W0iRB6_3LSiCRVd1vosSWSwKpxJ0PmwKArtRY_h2Wp_AnoM8UsuTSVvGyD2fhzp9zNWsA9Ib-hs4vgBhqhhWOuLvaTpyDqb2JOIZl7GY3XDB-kRnIZnXY84DV-GWMoOM3CrfKIlYbPHjrBtKX6ajrV97_GFRHJFbW6fWY8_MPY-U37znDhSacn3H7SbzlgRF8rtQlFnjj3353Uj30_ETiNmYggy4VUuwu3Y79OZB8ADdbtiIRgm9-L5tO7kAxc1wXYVcsYhgM5e5-QGjaIt879P4bi0xjsZ7mxcIhxzGERtlyqTV5OMnMV5t-dLePOgaNhCrTCGibosXJvMcHdAW46tylu_KTtIreZHZ8SiJv36d6XHde-FPa9010hA8qELuvnIJo7oA0yeMjc7kAI_cTxrZ2_m1SggJyw1JU6Pa_ZUTYyvReM8ODc-cAJUW4eFFcWmb9o-Bzx8B161u_TSuSDw2SRctpjbU0CrFFSRA_EkrnMIHONDahhfbU4orQqIi9srON_pMVl86Rbhd2940uxayKWBx8lvw6PoQUzegxYB9B9V9K2zJqvCyu3pI1UyL8q1Ie5tB46PncrebksYgJ-2RQh3bjfGS4_6eOASFVnb0KKMOhUreWRynhMlRrKrNXnP_OWG7K_VfBHq_VYaz24cCUdIcL_D3ZxHajOlP37cd_ucH7R59nB63l_18w2vNL8IEcODGyZNd-udqXNmDO9WBY_8O2H36Eg","fqdn":"p.a64x.com","domain":"a64x.com","tld":"com"},"ip":{"addr":"172.67.185.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:58.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a64x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 10:22:24 GMT","end":"Sun, 29 Mar 2026 11:20:59 GMT"},"fingerprint":{"sha1":"67:68:8E:3E:A5:32:E8:3D:D6:48:96:D7:69:11:05:BA:30:16:82:C7","sha256":"A2:32:FD:15:4D:AE:59:4A:33:E3:7E:03:05:B5:63:54:B0:10:DE:64:C2:14:B1:C5:5B:9F:71:48:6C:E1:A6:5F"}}},"request":{"raw":"GET /in/tip_shows/?katds_ep=O_7E-I2NkUFsF5k7KRPNVCiwXAtaaTCDdRaxJZMIbn1vzq2wbOFm7cDZfzABMQDh7XvSCKrqd05z5N4Q4LtheaW3shZ3Xis6V62Z0MArKdEEYeENgpW4PpcgD02FAqBZYNTJWz3dM0t9kqx5lok1rPtZoKnkbZKKk-wyIEw_t8gmdv_4vzUJmRIYAG-HEMgqh00xMXYKVaNW345siaGFp5waOePf7kJrudIebzsNQgquTLQvcGnpBEiJEVnicBjBAypie53FMIYEzuKEKpofEYghA_cBTf17QJ9ObK0GUrEKMFYoyGC1KrIX1p89NMl1CZaAMnN_xUJ14w8mkWBX6hvsqOG94qHJquZ6W0iRB6_3LSiCRVd1vosSWSwKpxJ0PmwKArtRY_h2Wp_AnoM8UsuTSVvGyD2fhzp9zNWsA9Ib-hs4vgBhqhhWOuLvaTpyDqb2JOIZl7GY3XDB-kRnIZnXY84DV-GWMoOM3CrfKIlYbPHjrBtKX6ajrV97_GFRHJFbW6fWY8_MPY-U37znDhSacn3H7SbzlgRF8rtQlFnjj3353Uj30_ETiNmYggy4VUuwu3Y79OZB8ADdbtiIRgm9-L5tO7kAxc1wXYVcsYhgM5e5-QGjaIt879P4bi0xjsZ7mxcIhxzGERtlyqTV5OMnMV5t-dLePOgaNhCrTCGibosXJvMcHdAW46tylu_KTtIreZHZ8SiJv36d6XHde-FPa9010hA8qELuvnIJo7oA0yeMjc7kAI_cTxrZ2_m1SggJyw1JU6Pa_ZUTYyvReM8ODc-cAJUW4eFFcWmb9o-Bzx8B161u_TSuSDw2SRctpjbU0CrFFSRA_EkrnMIHONDahhfbU4orQqIi9srON_pMVl86Rbhd2940uxayKWBx8lvw6PoQUzegxYB9B9V9K2zJqvCyu3pI1UyL8q1Ie5tB46PncrebksYgJ-2RQh3bjfGS4_6eOASFVnb0KKMOhUreWRynhMlRrKrNXnP_OWG7K_VfBHq_VYaz24cCUdIcL_D3ZxHajOlP37cd_ucH7R59nB63l_18w2vNL8IEcODGyZNd-udqXNmDO9WBY_8O2H36Eg HTTP/1.1\r\nHost: p.a64x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 10 Jan 2026 02:41:58 GMT\r\ncontent-type: application/json\r\ncontent-length: 0\r\nlocation: https://gfxdn.pics/m/p/1/1155/1155182/conversions/z1k2uzjL-in-page-ad-icons.webp\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u7G0ghHxZjtdD4tt%2BIAri%2FZ4M8LqPp5BuWA1A9BfSKfrS%2F01MUkmz4yd3v1coQrigEHXQJ4rOVVVuK22am%2Bvh9z2zskjI9TP\"}]}\r\ncf-ray: 9bb8d184ce5156c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1780,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T08:37:27.023409Z","times_seen":17952081,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":22,"dns":4,"connect":1,"send":0,"wait":37,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uuidksinc.net/matchx?gdpr=0\u0026gdpr_consent=","fqdn":"uuidksinc.net","domain":"uuidksinc.net","tld":"net"},"ip":{"addr":"31.220.27.155","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uuidksinc.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 23:22:16 GMT","end":"Sat, 28 Mar 2026 23:22:15 GMT"},"fingerprint":{"sha1":"A3:04:43:DF:E7:27:A9:50:C2:BB:1F:85:9F:88:08:C5:EC:23:CE:9C","sha256":"0A:4A:19:47:D5:5B:1B:87:C8:B1:25:95:05:A5:F0:D5:1F:A1:A0:DE:36:53:90:85:15:21:1A:64:2B:18:4B:F0"}}},"request":{"raw":"GET /matchx?gdpr=0\u0026gdpr_consent= HTTP/1.1\r\nHost: uuidksinc.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nCookie: jcsuuid=j4cZjXYXAkdrJs6x21FP\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.23.2\r\ndate: Sat, 10 Jan 2026 02:41:57 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nset-cookie: jcsuuid=j4cZjXYXAkdrJs6x21FP; expires=Sun, 10 Jan 2027 02:41:57 GMT; domain=idksinc.net; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2759,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2653)","md5":"2b5ee71c34135a9dceb8b5eaebd9423f","sha1":"40c5b3853aadf2576abf5a9f2c4dc4603f36d208","sha256":"e777b1ab3e2adae9b844fb1d14dfeab7ac11091e0d46acac6d9d1b0049eff193","sha512":"84cf431faad67cd5a66f7825d312ccef5df922a249695efd5bfc0f80dd7fd05581e16a5e8911024fa7003f586fe2f5cbf80fde265a7bc7539ef6151440978929","ssdeep":"","tlshash":"c951c7ff734a74264b8150d5202f5204e07b5018b899c840eda6f8d0ad79aef43b2dac","first_seen":"2026-01-10T02:42:35.984645Z","last_seen":"2026-01-10T02:42:35.984645Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-content/themes/retrotube/style.css","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aagmaal.pink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 17:49:38 GMT","end":"Mon, 23 Mar 2026 18:48:20 GMT"},"fingerprint":{"sha1":"45:2E:32:D4:76:8A:D3:F5:46:C6:93:3E:39:0C:73:6B:BA:C9:2F:33","sha256":"C2:D7:5D:2D:82:48:31:20:AD:30:20:EC:E9:F3:7C:96:02:2C:E2:7C:A1:6A:B9:33:1C:F1:E3:16:B4:3B:0E:AB"}}},"request":{"raw":"GET /wp-content/themes/retrotube/style.css HTTP/1.1\r\nHost: aagmaal.pink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 16:31:29 GMT\r\netag: \"68ade161-127b8\"\r\nexpires: Sun, 11 Jan 2026 17:46:04 GMT\r\ncache-control: max-age=259200\r\nstrict-transport-security: max-age=5184000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nage: 118551\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wMHvQcs1NqUFvLQXKAEzRU5PDQxYnEkHf8czOWignhE8HRFl6TYgYDQzy5SqSkyMxG%2BPzPYlfI%2FNi2%2BvlICGydc3OEtOx%2FbABxE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb8d177fb4056bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75704,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"c48f6edba50d51809787fbd9344de949","sha1":"0a2a37afe84f4929f54f202d41ee6821be9a1a44","sha256":"588117437aed4239f76d76462c04dfd9307b99e7a1ce74fd7b3ab24ca72fdf55","sha512":"c9561555b8afa826ee1ada6d32c9e177fd9bc1f5ea74efc96377d99ad064c8fca2e42fca191ec339d9b3d032d2074d36e900615ed3674b6a99e54a5c7d01d70e","ssdeep":"1536:1+vfevN5dbJil/zinqEqFkQiN0NtIhjwU3zl0oyEjG/2WmM1/S/5s5DX3F/Is5Du:1+3QN3Jil/ziBN0jKl0KyrWixLO","tlshash":"3d737465af141c44932bc2a9afd5e750c63e4051df0f0edff099a528d38a69502bff8a","first_seen":"2025-08-28T06:46:38.274306Z","last_seen":"2026-07-27T00:04:20.967891Z","times_seen":573,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"run1.08o.net/8384.jpg","fqdn":"run1.08o.net","domain":"08o.net","tld":"net"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"run1.08o.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 02:31:59 GMT","end":"Fri, 20 Mar 2026 02:31:58 GMT"},"fingerprint":{"sha1":"EC:FB:53:E9:54:DD:0E:E9:51:E4:68:A6:57:9A:1D:56:2B:89:C6:7B","sha256":"40:F0:DE:54:B3:04:7E:71:C7:32:38:BB:4F:2C:27:E5:AF:95:51:AA:D3:80:71:1F:F6:EB:BA:FC:A0:A0:79:E1"}}},"request":{"raw":"GET /8384.jpg HTTP/1.1\r\nHost: run1.08o.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 54532\r\nserver: nginx/1.26.0\r\netag: df4dc8f018e8ad0b5aedf96994ab5fe8\r\nlast-modified: Thu, 08 Jan 2026 18:39:22 GMT\r\nx-timestamp: 1767897561.88483\r\nx-trans-id: txcc2f987e6c034dbbb00ec-00695ffacc\r\nx-openstack-request-id: txcc2f987e6c034dbbb00ec-00695ffacc\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 12 Jan 2026 02:41:56 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54532,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 717x404, components 3","md5":"df4dc8f018e8ad0b5aedf96994ab5fe8","sha1":"4f0a8efebbcdd8621401b89a5d728d326ce72efc","sha256":"621bcd78696945df85cccddbc9bd4f6ec4e19e90714adb50009c36e5c1e53eb2","sha512":"c4fddf12cc6484b68a7b07b523459521438fc4d047c218850462d3057a049cc7b10e6da3280b562d312786e364ab4402b929b1e5fc8c99433219dbaecc38e0a6","ssdeep":"768:M10QAn0LORWMYZDWGakYpIY02BAngrdrhOKG8dNSCg7iKzubGMfkJwuVEvkoSFZ3:DnpRgzoI8rgKRq79QG9Jw1c6G","tlshash":"6a330187f73122fcfd56145273846fb6abc6ef244478190848baf97a240894fd2fc58a","first_seen":"2026-01-10T02:42:35.987839Z","last_seen":"2026-05-10T18:20:11.156616Z","times_seen":3,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":137,"dns":67,"connect":22,"send":0,"wait":51,"receive":30,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"run1.08o.net/8386.jpg","fqdn":"run1.08o.net","domain":"08o.net","tld":"net"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"run1.08o.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 02:31:59 GMT","end":"Fri, 20 Mar 2026 02:31:58 GMT"},"fingerprint":{"sha1":"EC:FB:53:E9:54:DD:0E:E9:51:E4:68:A6:57:9A:1D:56:2B:89:C6:7B","sha256":"40:F0:DE:54:B3:04:7E:71:C7:32:38:BB:4F:2C:27:E5:AF:95:51:AA:D3:80:71:1F:F6:EB:BA:FC:A0:A0:79:E1"}}},"request":{"raw":"GET /8386.jpg HTTP/1.1\r\nHost: run1.08o.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64430\r\nserver: nginx/1.26.0\r\netag: e76d4735e5e04d7281a3c9ebef8897df\r\nlast-modified: Thu, 08 Jan 2026 18:39:22 GMT\r\nx-timestamp: 1767897561.88457\r\nx-trans-id: tx6dca3c2191b4465ea8f08-00695ffac9\r\nx-openstack-request-id: tx6dca3c2191b4465ea8f08-00695ffac9\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 12 Jan 2026 02:41:56 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64430,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 717x403, components 3","md5":"e76d4735e5e04d7281a3c9ebef8897df","sha1":"1d9a31c735b191bdaae470e14af75d3de35f1f7f","sha256":"1babc506c6f1bd9655df011117840d2a91b509895f4751419dd5b7a970031537","sha512":"3107e66ac3d76ad21d3161ba65be787198d3b7142822884c5a39a9f33c67c2b24352572ff3aaea9d0cf3741741cec4c5d1dfff5eac53cd1fb336a0ec09b520ee","ssdeep":"1536:2g69Oevyqi4P6s1y3k0/9FU0lv+mWKctUqqxy2Rte:21wKzP6OL0l62RY","tlshash":"235302810f47adb1fa7a47218834ec785fddf0d7c0092e1b44ca77828e2293459d9aba","first_seen":"2026-01-10T02:42:35.988711Z","last_seen":"2026-05-10T18:20:11.137873Z","times_seen":2,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":135,"dns":65,"connect":21,"send":0,"wait":51,"receive":33,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.mbidpp.com/popunder-admanager/build.m.js","fqdn":"js.mbidpp.com","domain":"mbidpp.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.mbidpp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 02:32:16 GMT","end":"Mon, 09 Mar 2026 02:32:15 GMT"},"fingerprint":{"sha1":"46:39:C6:9C:D9:A4:16:94:8C:44:2D:CB:AA:33:E4:B9:1D:D0:D4:41","sha256":"05:6B:D9:2E:7C:49:DC:56:27:B8:76:50:01:59:E8:35:10:95:66:45:FE:DD:8C:43:42:61:18:F2:08:D9:D6:8F"}}},"request":{"raw":"GET /popunder-admanager/build.m.js HTTP/1.1\r\nHost: js.mbidpp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Tue, 06 Jan 2026 10:24:01 GMT\r\netag: W/\"695ce2c1-19820\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 10 Jan 2026 02:46:57 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: DS8137\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104480,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"18ed0b9e187f65b2504edbee4720b8fc","sha1":"1e9376881a4d322497aed75ac2593f91e36a305b","sha256":"2b8bc5a06a8d026074a03b1bec90ad90e6c8e79780be14f3372122a60784d2b1","sha512":"42a936d7812fb61e66d11de514dd74ff39b554fbe3b00f0e63bcb221ce1a2b7bb62b64e135aa01dec5355f5c48ae459e121102cf48d5677c87857b580501bc95","ssdeep":"768:uAiyOOIGF3vRzxnR0i+bhLrhL5xub8JwHPsEIyp+dZIioT9FeWVbuoUfwqNl1PWD:zOOlBB0FuF0Xi77Jc/sknkU8JTVUi","tlshash":"99a32a8a32a1f4b006e244da943b0216f33e1929740e905cb7adddd5791ad4fa237f7e","first_seen":"2026-01-06T14:13:09.976808Z","last_seen":"2026-01-16T11:40:38.279062Z","times_seen":111,"resource_available":true,"data":null}},"time_used":551,"timings":{"blocked":223,"dns":21,"connect":100,"send":0,"wait":100,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mbdippex.com/in/multy","fqdn":"mbdippex.com","domain":"mbdippex.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"OPTIONS /in/multy HTTP/1.1\r\nHost: mbdippex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://aagmaal.pink/\r\nOrigin: https://aagmaal.pink\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Sat, 10 Jan 2026 02:41:57 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T08:37:27.023409Z","times_seen":17952081,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mbdippex.com/in/multy","fqdn":"mbdippex.com","domain":"mbdippex.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"POST /in/multy HTTP/1.1\r\nHost: mbdippex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 2752\r\nOrigin: https://aagmaal.pink\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2752,"data":"{\"imp\":[{\"ext\":{\"utm1\":\"\",\"utm2\":\"\",\"utm4\":\"\",\"refdomain\":\"\",\"labels\":\"\",\"tcid\":0,\"site\":\"native-push\",\"screen_resolution\":\"1280x1024\",\"ve\":\"\",\"mo\":\"\",\"format\":\"default-view-b_r-body\",\"idzone\":0,\"testab\":0,\"timezone_olson\":\"UTC\",\"blocked_verticals\":\"\",\"after_video\":0,\"tu\":1,\"mm\":0,\"skins\":null,\"st\":0.01,\"spot_id\":2012229,\"timezone\":0,\"subid\":\"80758997\",\"wl\":1,\"event_id\":\"529a7878-5cc6-4776-8820-345d84f64cd0\",\"sid\":3011992369,\"created_at\":\"2026-01-10\",\"ver\":\"8.244.2\",\"is_native\":1,\"device_theme\":\"light\",\"ad_tags\":\"Aagmaal.Pink%2CAagmaal.Run%2CIndian%2CUncut%2CWeb%2CSeries%2CAagmaal.Loan%2CAagmaal.Dance%2CAagmaal.Agency%2CAagmaal.Pictures%2CAagmaal.Cymru%2CAagmaal.Nexus%2CAagmaal.Spa%2CAagmaal.Band%2CAagmaal.Wales%2CAagmaal.Tube%2CAagmaal.Men%2CAagmaal.Cat%2CAagmaal.Moi%2CAagmaal.Foo%2CAagmaal.Dev%2CAagmaal.Run%2CAagmaal.Fun%2CAagmaal.Pics%2CAagmaal.Watch%2CAagmaal.Live%2CAagmaal.Tech%2CAagmaal.In%2CAagmaal.Club%2CAagmaal.Com%2CAagmaal.Xyz%2CAagmaal.Run%2CAagmaals.Net%2CAagmaal.Online%2CAagmaal.Today%2CUllu%2CKooku%2C11upmovies%2CXprime%2CUncutadda%2CUncut%2CAnd%2CUncensored%2CWeb%2CSeries%2CIndian%2CHot%2CHindi%2CWeb%2CSeries%2Cand%2CUncut%2CWeb%2CSeries%2CAAGmaal\",\"user_keywords\":\"\",\"v2_track\":0,\"default_keywords\":\"\",\"tag_ab\":\"d\",\"suggestive\":0,\"v2\":0,\"features\":\"\",\"yfriendly_always\":false,\"is_iframe\":false,\"approved_mainstream\":0,\"default\":1},\"pext\":{\"ab\":0},\"metrics\":{\"topics\":[],\"prev_step_diff\":755}}],\"site\":{\"id\":\"2012229\",\"cat\":[\"IAB25-3\"],\"page\":\"https%3A//aagmaal.pink/\",\"is_publisher\":true,\"ct\":1,\"ctid\":3,\"script_type\":\"general\",\"auc_domain_type\":\"basic\"},\"ext\":{\"dt\":1768012917889},\"user\":{\"fp\":0,\"fp_str\":\"\",\"ua_data\":null,\"events\":[],\"interest_ids\":[],\"click_status\":\"unknown\",\"keywords_history\":{\"keywords\":[{\"keyword\":\"Movies\",\"counter\":1},{\"keyword\":\"Asian\",\"counter\":1},{\"keyword\":\"Webcams\",\"counter\":1},{\"keyword\":\"BDSM\",\"counter\":1}],\"pages_count\":1},\"is_webview\":false,\"is_inapp\":false,\"telegram\":{\"user_id\":0,\"username\":\"\",\"is_premium\":false,\"color_scheme\":\"\",\"wallet_address\":\"\",\"wallet_balance\":\"\"},\"social_network\":\"\",\"audiences_ids\":[]},\"device\":{\"w\":1280,\"h\":1024},\"fp_params\":{\"plugins\":[\"PDF Viewer\",\"Chrome PDF Viewer\",\"Chromium PDF Viewer\",\"Microsoft Edge PDF Viewer\",\"WebKit built-in PDF\"],\"languages\":[\"en-US\",\"en\"],\"fonts\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"fontPreferences\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"platform\":\"Win32\",\"colorDepth\":24,\"deviceMemory\":0,\"hardwareConcurrency\":48,\"indexedDB\":true,\"sessionStorage\":true,\"localStorage\":true,\"cookiesEnabled\":true,\"colorGamut\":\"srgb\"},\"cached_mislead_offer\":{\"track_click_url\":\"\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 10 Jan 2026 02:41:58 GMT\r\ncontent-type: application/json\r\ncontent-length: 6857\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59008,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"78d66a54b3594717e19f07de40b6b50e","sha1":"e6e683fc5927e8755d3ec07ef9f1917652f5b65a","sha256":"c2c6a76eb69f09120145bf8565b9096aaadf1668adf49966774e407e0901685a","sha512":"a6ec6c987dc6f07b1b21207a96f05f8923deeffdcb6350d1e4089017112ae0eabf8d9bff80fcde74338cce32e6aedbcc032659bd3b6c8115cc8ca3c9b6ea42ea","ssdeep":"1536:cmPaDmPxmPbmPzm9xmPymPBEduQ5ZXtkz:3PaiP8PKPS98PJPB8Y","tlshash":"30436d01185fada3c5f9c4675107bc6671c0e927dfd908a4aaf6c636897163b32bbe0c","first_seen":"2026-01-10T02:42:35.99015Z","last_seen":"2026-01-10T02:42:35.99015Z","times_seen":1,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"run1.08o.net/8373.jpg","fqdn":"run1.08o.net","domain":"08o.net","tld":"net"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"run1.08o.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 02:31:59 GMT","end":"Fri, 20 Mar 2026 02:31:58 GMT"},"fingerprint":{"sha1":"EC:FB:53:E9:54:DD:0E:E9:51:E4:68:A6:57:9A:1D:56:2B:89:C6:7B","sha256":"40:F0:DE:54:B3:04:7E:71:C7:32:38:BB:4F:2C:27:E5:AF:95:51:AA:D3:80:71:1F:F6:EB:BA:FC:A0:A0:79:E1"}}},"request":{"raw":"GET /8373.jpg HTTP/1.1\r\nHost: run1.08o.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41092\r\nserver: nginx/1.26.0\r\netag: 96830db95a8a85450f6e27e826af5d7a\r\nlast-modified: Sat, 03 Jan 2026 10:12:00 GMT\r\nx-timestamp: 1767435119.13592\r\nx-trans-id: tx25724733de194f1289a4e-006958ec69\r\nx-openstack-request-id: tx25724733de194f1289a4e-006958ec69\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 12 Jan 2026 02:41:56 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41092,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 717x403, components 3","md5":"96830db95a8a85450f6e27e826af5d7a","sha1":"e0590e487a1d65bc0cdab536516fb24d4a40870c","sha256":"d0a23515c10606239fe2ac28eb9f8cc37ab0259d8d24fccffa6e98c3cbc3ad3c","sha512":"2ff1e3ecd5b6507558dccd2c364d560b51a32856f7444f5b06383db3969b83ca2e8815c1f52ebbc7ca022af242dea1152be085220c56c8fb66e8cb980a0ef5be","ssdeep":"768:IfzgDDerJ2dpjWRbuOJzPzlBscfioISKaA19DwTB3wkt+j5hlyd/cV:I7gDD6J2dpjWJNzJOcf+StATM5uvyaV","tlshash":"800302e62384d482b22ef47230f31f7676ed93ea34f9621859d3c2955bdeb169341092","first_seen":"2026-01-10T02:42:35.991147Z","last_seen":"2026-01-10T02:42:35.991147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":51,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aagmaal.pink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 17:49:38 GMT","end":"Mon, 23 Mar 2026 18:48:20 GMT"},"fingerprint":{"sha1":"45:2E:32:D4:76:8A:D3:F5:46:C6:93:3E:39:0C:73:6B:BA:C9:2F:33","sha256":"C2:D7:5D:2D:82:48:31:20:AD:30:20:EC:E9:F3:7C:96:02:2C:E2:7C:A1:6A:B9:33:1C:F1:E3:16:B4:3B:0E:AB"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: aagmaal.pink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: application/javascript\r\nexpires: Sat, 10 Jan 2026 03:29:56 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=5184000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p5fWOS6IMD2Ol0HuW%2FbTX6vR8v5FlgZKx2XfaCTFBtIvlqsVhHzF%2FxUnjnMreCSy6738XsCKS3TfbQ3RAL45sfd5eGYXeMaCGc4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bb8d1780b4756bb-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-18T08:34:03.975653Z","times_seen":125481,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aagmaal.pink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 17:49:38 GMT","end":"Mon, 23 Mar 2026 18:48:20 GMT"},"fingerprint":{"sha1":"45:2E:32:D4:76:8A:D3:F5:46:C6:93:3E:39:0C:73:6B:BA:C9:2F:33","sha256":"C2:D7:5D:2D:82:48:31:20:AD:30:20:EC:E9:F3:7C:96:02:2C:E2:7C:A1:6A:B9:33:1C:F1:E3:16:B4:3B:0E:AB"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: aagmaal.pink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 16:31:29 GMT\r\netag: \"68ade161-12d68\"\r\nexpires: Sun, 11 Jan 2026 02:41:44 GMT\r\ncache-control: max-age=259200\r\nstrict-transport-security: max-age=5184000; includeSubDomains; preload\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 172812\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7vU%2F1vEYn%2FE6lDMns98yBFAY8lDuMmAcxx1T%2B6mjNK0YxJ%2FM5wa68RU6RQcp8HDyCz0P5c2KUw7Jj9o9RcL%2Fwz4URW%2Bt4D%2FxmeE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb8d178fb9556bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-08-18T08:33:47.62592Z","times_seen":532635,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"run1.08o.net/8381.jpg","fqdn":"run1.08o.net","domain":"08o.net","tld":"net"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"run1.08o.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 02:31:59 GMT","end":"Fri, 20 Mar 2026 02:31:58 GMT"},"fingerprint":{"sha1":"EC:FB:53:E9:54:DD:0E:E9:51:E4:68:A6:57:9A:1D:56:2B:89:C6:7B","sha256":"40:F0:DE:54:B3:04:7E:71:C7:32:38:BB:4F:2C:27:E5:AF:95:51:AA:D3:80:71:1F:F6:EB:BA:FC:A0:A0:79:E1"}}},"request":{"raw":"GET /8381.jpg HTTP/1.1\r\nHost: run1.08o.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58460\r\nserver: nginx/1.26.0\r\netag: 8dccf4bf8481b8ddd2d52f9620afc892\r\nlast-modified: Wed, 07 Jan 2026 18:55:52 GMT\r\nx-timestamp: 1767812151.67385\r\nx-trans-id: txbf3331e54a7a4b698024e-00695eadd6\r\nx-openstack-request-id: txbf3331e54a7a4b698024e-00695eadd6\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 12 Jan 2026 02:41:56 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58460,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 717x404, components 3","md5":"8dccf4bf8481b8ddd2d52f9620afc892","sha1":"c1a556c0702613a9d22ec1ff89ff7259bd4dd724","sha256":"1ac7d2017143b42baadc0abfd580b9d00b318f9c772165ac32b5f7d4465c5133","sha512":"ef5c30e1b9831af526a9f817e3163934df8865649c4848900ab1495720e4a2dbfc2b51a5c7a29af7f5085c659a2205b3934378dd0b1c6236516bf7fe14ee6bd4","ssdeep":"1536:ah/xL99Jo/OzjPFbF8qpxdbhs+xMb84iT9aK2m:ah/f9q6dbF7dbBx0eR","tlshash":"fb43f24462b818c67565befc5b24afb878bc344f6f511e81ca927242eb0d7354b05e29","first_seen":"2026-01-10T02:42:35.994424Z","last_seen":"2026-01-10T02:42:35.994424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":50,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-content/themes/retrotube/assets/js/main.js","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aagmaal.pink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 17:49:38 GMT","end":"Mon, 23 Mar 2026 18:48:20 GMT"},"fingerprint":{"sha1":"45:2E:32:D4:76:8A:D3:F5:46:C6:93:3E:39:0C:73:6B:BA:C9:2F:33","sha256":"C2:D7:5D:2D:82:48:31:20:AD:30:20:EC:E9:F3:7C:96:02:2C:E2:7C:A1:6A:B9:33:1C:F1:E3:16:B4:3B:0E:AB"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/main.js HTTP/1.1\r\nHost: aagmaal.pink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 16:31:29 GMT\r\netag: \"68ade161-8e2a\"\r\nexpires: Sun, 11 Jan 2026 17:46:05 GMT\r\ncache-control: max-age=259200\r\nstrict-transport-security: max-age=5184000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nage: 118551\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pB9Oz6zslngg0qwCn49RE3z5%2Fg6HvSUg7b4N%2F9bkeMIwLodjH6k0ERSMbkBeFa3mumZGnVM%2BGFr8zdp1%2BDjRXboWcPAlUHtsFd0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb8d178db8756bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36394,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"62479648a67b52a1f395970c883fdd50","sha1":"fb9b2468304ef42eecd402a8a935877ca61a9f35","sha256":"5e5bf8c461e32fca94beaf4df1cb8064e06d9702184807936464a163ca82e2e0","sha512":"3393648937cf923b85076b9668d4e49cddfaa4c72d44bcf1fc0dd58dd87720dcf6ebab044d60c8c95b2e47924f3ea361ff273267c7015134d768598580860c9f","ssdeep":"384:pnujdbo6UazbyFx4QsbatrEOFxnIfYatSyDZD9Vk2ly6oUv:puRbo7azbyFx5NtrEYnIwsnD19VkW/oO","tlshash":"2af29489f77d2546867a30da6c6f16cd313d1236a842086fbc2896e428e4b3c7396d3d","first_seen":"2025-08-28T06:46:38.264936Z","last_seen":"2026-08-17T14:17:09.645118Z","times_seen":1857,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?event_id=bc485432-2102-4326-9892-921e9be8a3a0\u0026subid=390707676\u0026spot_id=2012230\u0026created_at=2026-01-10\u0026timezone=0\u0026ver=1.170.5","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:58.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"GET /in/dip?event_id=bc485432-2102-4326-9892-921e9be8a3a0\u0026subid=390707676\u0026spot_id=2012230\u0026created_at=2026-01-10\u0026timezone=0\u0026ver=1.170.5 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aagmaal.pink\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 10 Jan 2026 02:41:58 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T08:37:27.023409Z","times_seen":17952081,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-content/themes/retrotube/assets/js/lazyload.js","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aagmaal.pink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 17:49:38 GMT","end":"Mon, 23 Mar 2026 18:48:20 GMT"},"fingerprint":{"sha1":"45:2E:32:D4:76:8A:D3:F5:46:C6:93:3E:39:0C:73:6B:BA:C9:2F:33","sha256":"C2:D7:5D:2D:82:48:31:20:AD:30:20:EC:E9:F3:7C:96:02:2C:E2:7C:A1:6A:B9:33:1C:F1:E3:16:B4:3B:0E:AB"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/lazyload.js HTTP/1.1\r\nHost: aagmaal.pink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 16:31:29 GMT\r\netag: \"68ade161-167b\"\r\nexpires: Mon, 12 Jan 2026 02:56:50 GMT\r\ncache-control: max-age=259200\r\nstrict-transport-security: max-age=5184000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nage: 85506\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FsCqSJLK%2F1zSFO%2B4kUa64gzhwZi9%2FMW0zdBGbVZuEwrtvFiZh5pBeVnGye6fsZzmg%2FZK9lSZNC%2F6C4m%2FDfwFtQ9yG1LPRjiEILQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb8d178eb8956bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5755,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5710)","md5":"6dcca58db348f35d6eee39aadb7cd280","sha1":"0a513a0ebed60f4b0b4d69f7aaf519feaadbfaec","sha256":"2683c87843149db588b42abb7ef80b2815438fc44b368e1a855983f93ae431e4","sha512":"ee897cdc326f80eb18c74b3c42fe1b97b3b16c0be8f048a763cb33db134fa47dc2eb07bc1ba6cd8feb91385d791aa89a28816fd49217a57763dc54df1ef3693e","ssdeep":"96:IncwFK9HqOq0tioGJULBx7PYuyrr5VrcAeS1h3osyTaZ+1KZZ/p5k1QDSYRV9uR5:M9YH9qfJ2x7PYf5BcVSPfq+DkGDjP9u/","tlshash":"5fc15308b065b43f65777032523f130bb23a606778884494f6b4eae99ebc81e5923f7d","first_seen":"2023-03-07T12:12:33Z","last_seen":"2026-08-17T14:17:09.659156Z","times_seen":4325,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdbkell.com/kxos9.js","fqdn":"hdbkell.com","domain":"hdbkell.com","tld":"com"},"ip":{"addr":"185.98.54.153","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdbkell.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 23:20:08 GMT","end":"Tue, 24 Feb 2026 23:20:07 GMT"},"fingerprint":{"sha1":"D4:DC:7D:1E:C8:A0:C8:CE:E2:9B:B7:D6:C6:F5:CA:BE:D5:7E:66:4B","sha256":"34:33:D2:33:EA:B5:F4:EB:C9:F9:96:AD:77:FB:6F:6C:C8:0F:F2:9F:57:F3:55:20:F3:81:87:85:57:1B:22:57"}}},"request":{"raw":"GET /kxos9.js HTTP/1.1\r\nHost: hdbkell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.23.2\r\ndate: Sat, 10 Jan 2026 02:41:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Sep 2025 14:27:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2dc55-62e8\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25320,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19760)","md5":"aa627b8c04064ffc8834b1f394aa5417","sha1":"998644d76abcbcfef5d27a958d133e4520a6776f","sha256":"04e11c7e892731e9314796232b1ff6485a4277d79df2e9ba8f26af8d104aaa34","sha512":"1a7556df06ec5b4aa527e29888c8e62e3e68a41dd29c0ffa06c671172888ff9feb7a5d870d5c05281a1093e4de5296a9f3439a1fd82b5c2b0cbb889e95b19f22","ssdeep":"768:0t/sMrvfiO77k5owMiuLh9iuaQDaf9CE/Ecd8sE+K:wx7kR4h9iMCccd87+K","tlshash":"27b2eac873aa786203e661b5913f714eb23ba555280e8010d117f9d17c7ea8fd227fad","first_seen":"2025-09-26T18:00:05.923711Z","last_seen":"2026-03-09T21:52:10.44829Z","times_seen":126,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":51,"dns":7,"connect":17,"send":0,"wait":34,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aagmaal.pink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 17:49:38 GMT","end":"Mon, 23 Mar 2026 18:48:20 GMT"},"fingerprint":{"sha1":"45:2E:32:D4:76:8A:D3:F5:46:C6:93:3E:39:0C:73:6B:BA:C9:2F:33","sha256":"C2:D7:5D:2D:82:48:31:20:AD:30:20:EC:E9:F3:7C:96:02:2C:E2:7C:A1:6A:B9:33:1C:F1:E3:16:B4:3B:0E:AB"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1\r\nHost: aagmaal.pink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Dec 2025 17:20:05 GMT\r\netag: \"694c20c5-3509\"\r\nexpires: Sun, 11 Jan 2026 07:15:34 GMT\r\ncache-control: max-age=259200\r\nstrict-transport-security: max-age=5184000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nage: 156382\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JKN3C5Rb4B8jgKYPv%2F6r1tdBPOXyFYBXke94cez9taoHAzgJdVK19JW6PfNmgrOP99LU3kdk4VXDvFovvYF5dqgQerHjsi6MpxM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb8d178fb9356bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-18T08:36:49.110784Z","times_seen":937529,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-content/uploads/2025/08/cropped-AAGMAAL-CYMRU-1-32x32.png","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aagmaal.pink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 17:49:38 GMT","end":"Mon, 23 Mar 2026 18:48:20 GMT"},"fingerprint":{"sha1":"45:2E:32:D4:76:8A:D3:F5:46:C6:93:3E:39:0C:73:6B:BA:C9:2F:33","sha256":"C2:D7:5D:2D:82:48:31:20:AD:30:20:EC:E9:F3:7C:96:02:2C:E2:7C:A1:6A:B9:33:1C:F1:E3:16:B4:3B:0E:AB"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/cropped-AAGMAAL-CYMRU-1-32x32.png HTTP/1.1\r\nHost: aagmaal.pink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sun, 07 Sep 2025 16:31:13 GMT\r\netag: \"68bdb351-53e\"\r\nexpires: Tue, 13 Jan 2026 02:32:53 GMT\r\ncache-control: max-age=259200\r\nstrict-transport-security: max-age=5184000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BILV0cA3pBNNnxpjTAVTbLm8zM2CUdGsW2fBcvTsbD02jzINiM0QoaEFu0u5ZQvI8N4D5OqWf68BfI7lUDW9sL8VOtXoIlDryJ8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb8d17d2d3656bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1342,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"e613b65a28e16dcc7d4f6f16a7cc2c78","sha1":"46648479ce1c71abbb8a2ae0f76dbee05bf4b7af","sha256":"b8a367ddb2af5f32d48eea52a6a565d0b0a52d284262ea8cdb4fc9e8087db288","sha512":"148434a2dce24daeafb32161c1bd5161829c0567dfaf4cad2f60c78eaf7918abae4a488855c82003f73d110b6c97c9651cddd2ccdd011921b63cf19dcb2f39c2","ssdeep":"","tlshash":"7a21fbc6df75e046de85125341420c89b3288b082b39a88bf74fce4e8e14208ce5bbca","first_seen":"2025-10-08T09:56:11.567168Z","last_seen":"2026-08-16T16:53:06.826939Z","times_seen":26,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdbkell.com/setuid?j4cZjXYXAkdrJs6x21FP","fqdn":"hdbkell.com","domain":"hdbkell.com","tld":"com"},"ip":{"addr":"185.98.54.153","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdbkell.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 23:20:08 GMT","end":"Tue, 24 Feb 2026 23:20:07 GMT"},"fingerprint":{"sha1":"D4:DC:7D:1E:C8:A0:C8:CE:E2:9B:B7:D6:C6:F5:CA:BE:D5:7E:66:4B","sha256":"34:33:D2:33:EA:B5:F4:EB:C9:F9:96:AD:77:FB:6F:6C:C8:0F:F2:9F:57:F3:55:20:F3:81:87:85:57:1B:22:57"}}},"request":{"raw":"GET /setuid?j4cZjXYXAkdrJs6x21FP HTTP/1.1\r\nHost: hdbkell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aagmaal.pink/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.23.2\r\ndate: Sat, 10 Jan 2026 02:41:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 74\r\nset-cookie: dmpUid=j4cZjXYXAkdrJs6x21FP; expires=Sun, 10 Jan 2027 02:41:57 GMT; domain=hdbkell.com; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"9e24e19b024c44b778301d880bd8e6f4","sha1":"d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e","sha256":"01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb","sha512":"4957e24a00b7ff54b350c33392560937e69ee5accf2e439781e27b4ac506eeeddef3bebd5d911185add175d648f4636dc5116e311b9c6c6ed34b842153e0b124","ssdeep":"","tlshash":"1ba022e22380fcbccc220033002003b0ceb0802808208e0f0c2c8c3a0800a0880cc383","first_seen":"2023-04-06T20:02:01Z","last_seen":"2026-08-17T08:56:41.1686Z","times_seen":7433,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfxdn.pics/m/p/1/1155/1155182/conversions/z1k2uzjL-in-page-ad-icons.webp","fqdn":"gfxdn.pics","domain":"gfxdn.pics","tld":"pics"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:58.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfxdn.pics","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Nov 2025 02:32:18 GMT","end":"Mon, 23 Feb 2026 02:32:17 GMT"},"fingerprint":{"sha1":"59:A3:10:0E:01:BB:B6:42:41:EC:CA:20:A1:9C:5A:69:38:B7:65:8C","sha256":"CB:B6:EB:DF:E8:0D:46:F0:EC:4F:EC:81:B6:23:9E:AA:C1:C0:BE:F8:91:F5:6E:D7:3A:8D:72:66:18:A5:FF:36"}}},"request":{"raw":"GET /m/p/1/1155/1155182/conversions/z1k2uzjL-in-page-ad-icons.webp HTTP/1.1\r\nHost: gfxdn.pics\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1780\r\nserver: nginx\r\nlast-modified: Thu, 08 Jan 2026 17:54:51 GMT\r\netag: \"695fef6b-6f4\"\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1780,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5cedbd6ad70326a17265b769d7e06234","sha1":"fd4007523a9a15ce9df85e3b9b3fae1e26adb0bc","sha256":"fe88900b68b647549e01529995316605005c969889fb8dd6061b0d1f03c1d118","sha512":"8543d0ba4e035cbf245da3278eabf4c85aa74f67175ec9d31d609a50ecf6f86918724ed83c8018c4956fb6d366d4b6e469902d31bf638f01262cb12b60cfad0b","ssdeep":"","tlshash":"a6314ba07a0d115a195cff0d4066fb3f10d8e05f408fce29b1d01185548fc07c2628f9","first_seen":"2026-01-09T23:18:16.655596Z","last_seen":"2026-02-19T11:53:09.293754Z","times_seen":6,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":50,"dns":4,"connect":19,"send":0,"wait":19,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"gfxdn.pics","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"gfxdn.pics","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aagmaal.pink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 17:49:38 GMT","end":"Mon, 23 Mar 2026 18:48:20 GMT"},"fingerprint":{"sha1":"45:2E:32:D4:76:8A:D3:F5:46:C6:93:3E:39:0C:73:6B:BA:C9:2F:33","sha256":"C2:D7:5D:2D:82:48:31:20:AD:30:20:EC:E9:F3:7C:96:02:2C:E2:7C:A1:6A:B9:33:1C:F1:E3:16:B4:3B:0E:AB"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css HTTP/1.1\r\nHost: aagmaal.pink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 16:31:29 GMT\r\netag: \"68ade161-7918\"\r\nexpires: Sun, 11 Jan 2026 17:46:04 GMT\r\ncache-control: max-age=259200\r\nstrict-transport-security: max-age=5184000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nage: 118551\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W9ayB0KPJl6iA%2FoXsk8CqeEAZKJ%2Fy6TRK1z7fWM9cMCkweQyfNAP%2F35EJfhdlmKmolTwgq%2FkFnIFhWy3AESYyl3S06U%2FNWLU2fI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb8d177fb3f56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-08-18T08:33:47.621362Z","times_seen":309650,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"run1.08o.net/8378.jpg","fqdn":"run1.08o.net","domain":"08o.net","tld":"net"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"run1.08o.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 02:31:59 GMT","end":"Fri, 20 Mar 2026 02:31:58 GMT"},"fingerprint":{"sha1":"EC:FB:53:E9:54:DD:0E:E9:51:E4:68:A6:57:9A:1D:56:2B:89:C6:7B","sha256":"40:F0:DE:54:B3:04:7E:71:C7:32:38:BB:4F:2C:27:E5:AF:95:51:AA:D3:80:71:1F:F6:EB:BA:FC:A0:A0:79:E1"}}},"request":{"raw":"GET /8378.jpg HTTP/1.1\r\nHost: run1.08o.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 49701\r\nserver: nginx/1.26.0\r\netag: b8a0552589e5a677ec4bfa4a09c15920\r\nlast-modified: Tue, 06 Jan 2026 19:29:09 GMT\r\nx-timestamp: 1767727748.91892\r\nx-trans-id: tx06b7402e096c4f33bc288-00695d631f\r\nx-openstack-request-id: tx06b7402e096c4f33bc288-00695d631f\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 12 Jan 2026 02:41:56 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49701,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 717x403, components 3","md5":"b8a0552589e5a677ec4bfa4a09c15920","sha1":"1c4cafc2755c3330831cfef3b54bbbf664996fdb","sha256":"c08b9b0aa2cecb09b74a08255385f367c1c69641403c05cb2101ad4d2d1eb2ee","sha512":"a83eabf88c2f8aec826404e16d7471e96a7ea10247bf82698cb6b1144cff5451d612444a2ae41342acedef2e47f36cb6222661d5bb8dec88b25aba52fd9f5c77","ssdeep":"768:Ko+oo8kV84VymDs+LpoMk5OK7nAd8Wui8ierNBizFe3r/MYFmUhU5NZmN7GiS6Mh:aj64VymAShZYAdoiEizWZuNcNJVS","tlshash":"4e2301f7733a21cdb485843f404e7d8665fb8b38f98e144e21d916bc74a90d262a9d4f","first_seen":"2026-01-10T02:42:36.001951Z","last_seen":"2026-01-10T02:42:36.001951Z","times_seen":1,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":95,"dns":0,"connect":0,"send":0,"wait":62,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aagmaal.pink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 17:49:38 GMT","end":"Mon, 23 Mar 2026 18:48:20 GMT"},"fingerprint":{"sha1":"45:2E:32:D4:76:8A:D3:F5:46:C6:93:3E:39:0C:73:6B:BA:C9:2F:33","sha256":"C2:D7:5D:2D:82:48:31:20:AD:30:20:EC:E9:F3:7C:96:02:2C:E2:7C:A1:6A:B9:33:1C:F1:E3:16:B4:3B:0E:AB"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js HTTP/1.1\r\nHost: aagmaal.pink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 16:31:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 13 Jan 2026 02:38:13 GMT\r\ncache-control: max-age=259200\r\nstrict-transport-security: max-age=5184000; includeSubDomains; preload\r\npriority: u=3,i=?0\r\nage: 223\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8f9vlBZqRKdLHGC7qmmjzyYeDXgAedSScj47XFcHLI7O%2FQtRVDQAsIlrPFVEvvohxk0InE2BEuv%2FBMxTpDukQ%2BBTdnbaDa1lX9k%3D\"}]}\r\netag: W/\"68ade161-2ab\"\r\ncontent-encoding: br\r\ncf-ray: 9bb8d178db8556bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":683,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"75abd4cd8807b312f9f7faeb77ee774b","sha1":"e7b7a7ed06d0123ab8667a1d1eeb23de9f2bece7","sha256":"ca424c0181141900220a19f998ffa7660380bc99ab99557ad458a083251f7034","sha512":"c9f1f752994f1361555680ca5a60339fda152587ccc055db20148c086d82846887dd0801187aa033829b7d5eb9644b9391f493965eee35b4a1592f82cbb36aa4","ssdeep":"","tlshash":"bb01cbb6b30d44b604aa32178d5f61cd297d91e3a829649b8cc909502924c6d23befb8","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-08-18T04:15:04.305499Z","times_seen":13116,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/wp-includes/js/jquery/jquery.min.js","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aagmaal.pink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 17:49:38 GMT","end":"Mon, 23 Mar 2026 18:48:20 GMT"},"fingerprint":{"sha1":"45:2E:32:D4:76:8A:D3:F5:46:C6:93:3E:39:0C:73:6B:BA:C9:2F:33","sha256":"C2:D7:5D:2D:82:48:31:20:AD:30:20:EC:E9:F3:7C:96:02:2C:E2:7C:A1:6A:B9:33:1C:F1:E3:16:B4:3B:0E:AB"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: aagmaal.pink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Dec 2025 17:20:05 GMT\r\netag: \"694c20c5-15601\"\r\nexpires: Sat, 10 Jan 2026 10:21:03 GMT\r\ncache-control: max-age=259200\r\nstrict-transport-security: max-age=5184000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nage: 231653\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5hgToV9PS6dCH7Tp5sioDjQLlCS1Yl%2Bvmuj8CiTA5odLHdivfW1BDAvha%2BPYnpFpJUzHpF8sKbRNYtWLnpOjfmS%2FCPnqX%2F%2BY4dE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb8d178fb9456bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-18T08:36:49.094726Z","times_seen":1023932,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mbdippex.com/keywords","fqdn":"mbdippex.com","domain":"mbdippex.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"OPTIONS /keywords HTTP/1.1\r\nHost: mbdippex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://aagmaal.pink/\r\nOrigin: https://aagmaal.pink\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Sat, 10 Jan 2026 02:41:57 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T08:37:27.023409Z","times_seen":17952081,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":74,"dns":5,"connect":24,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openrtb.tds.bid/usersync?id={userID}\u0026dspcsid=Kadam","fqdn":"openrtb.tds.bid","domain":"tds.bid","tld":"bid"},"ip":{"addr":"85.202.195.162","port":443,"asn":48716,"as":"PS Internet Company LLP","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uuidksinc.net/matchx?gdpr=0\u0026gdpr_consent=","date":"2026-01-10T02:41:57.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tds.bid","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 10:53:53 GMT","end":"Sun, 15 Mar 2026 10:53:52 GMT"},"fingerprint":{"sha1":"28:D5:F8:33:8D:A0:02:9A:CE:C0:CB:45:9D:18:0A:49:6C:66:B1:50","sha256":"13:B9:EF:A0:CA:75:54:14:1C:B7:7D:15:C3:82:D1:39:72:CE:94:AB:AA:74:28:07:68:6E:39:81:BF:38:95:08"}}},"request":{"raw":"GET /usersync?id={userID}\u0026dspcsid=Kadam HTTP/1.1\r\nHost: openrtb.tds.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uuidksinc.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 02:41:58 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T08:37:27.023409Z","times_seen":17952081,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":183,"dns":3,"connect":86,"send":0,"wait":87,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.nexus/","fqdn":"aagmaal.nexus","domain":"aagmaal.nexus","tld":"nexus"},"ip":{"addr":"104.21.80.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-10T02:41:55.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aagmaal.nexus","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 21:04:42 GMT","end":"Sun, 01 Mar 2026 21:59:12 GMT"},"fingerprint":{"sha1":"1A:7D:42:5B:16:B6:54:AB:C9:5A:E1:86:93:85:20:D0:A0:BD:23:73","sha256":"37:0A:5C:CF:20:DA:C1:B9:7F:6D:82:05:AC:1B:F2:F9:FC:B8:2B:9A:EE:33:36:FC:2B:8D:9D:D0:8C:30:DB:1C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aagmaal.nexus\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-length: 0\r\nlocation: https://aagmaal.pink\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EazQ7ESYRP0UkpwY3%2F4MnqBZt0G45fIfZdepgaK5%2Fz%2Ftot0V9aTlb20pTaxgCj21GbS58nds6QaSJ%2FxWa0jWy4LOAOoFWoFX8Ft3lKI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfEdge;dur=1,cfOrigin;dur=0\r\nserver: cloudflare\r\ncf-ray: 9bb8d175394735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76940,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T08:37:27.023409Z","times_seen":17952081,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":45,"dns":26,"connect":1,"send":0,"wait":4,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"aagmaal.nexus","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"aagmaal.nexus","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"aagmaal.nexus","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"aagmaal.nexus","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"run1.08o.net/8388.jpg","fqdn":"run1.08o.net","domain":"08o.net","tld":"net"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"run1.08o.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 02:31:59 GMT","end":"Fri, 20 Mar 2026 02:31:58 GMT"},"fingerprint":{"sha1":"EC:FB:53:E9:54:DD:0E:E9:51:E4:68:A6:57:9A:1D:56:2B:89:C6:7B","sha256":"40:F0:DE:54:B3:04:7E:71:C7:32:38:BB:4F:2C:27:E5:AF:95:51:AA:D3:80:71:1F:F6:EB:BA:FC:A0:A0:79:E1"}}},"request":{"raw":"GET /8388.jpg HTTP/1.1\r\nHost: run1.08o.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55563\r\nserver: nginx/1.28.0\r\netag: 6746c1d9259ce39a5e93ec1947fdc87b\r\nlast-modified: Fri, 09 Jan 2026 09:11:30 GMT\r\nx-timestamp: 1767949889.73878\r\nx-trans-id: tx5efd2271509445a49f749-006960c74e\r\nx-openstack-request-id: tx5efd2271509445a49f749-006960c74e\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 12 Jan 2026 02:41:56 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55563,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 717x404, components 3","md5":"6746c1d9259ce39a5e93ec1947fdc87b","sha1":"107d3770728043a6e63e23a46d041fcc39f6d3e2","sha256":"76902a4e034ef14a9e32e27538aa7e337ddb4155ffa458b8ee2afc19652a75f4","sha512":"1e37b5e5e673505a085309aca3e1802a140f35458e7c1d22b01598e0b415981f87d9d268d11870147baf226f2df621ed83028a5acff0c571c9317ca59e3c9d83","ssdeep":"1536:Tu/V28IFYc+UJfuDoF/F11HllwGUmUKmoGERlYeENHGfZ:tnivUB9dVDvUmUlYBENHiZ","tlshash":"dd4302f26ce052cc600039c4d3856fba75ed7543aea68751b3e549f632ec66a4a6c0ce","first_seen":"2026-01-10T02:42:36.015044Z","last_seen":"2026-01-14T22:46:55.856808Z","times_seen":2,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":137,"dns":66,"connect":22,"send":0,"wait":52,"receive":28,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"run1.08o.net/8376.jpg","fqdn":"run1.08o.net","domain":"08o.net","tld":"net"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"run1.08o.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 02:31:59 GMT","end":"Fri, 20 Mar 2026 02:31:58 GMT"},"fingerprint":{"sha1":"EC:FB:53:E9:54:DD:0E:E9:51:E4:68:A6:57:9A:1D:56:2B:89:C6:7B","sha256":"40:F0:DE:54:B3:04:7E:71:C7:32:38:BB:4F:2C:27:E5:AF:95:51:AA:D3:80:71:1F:F6:EB:BA:FC:A0:A0:79:E1"}}},"request":{"raw":"GET /8376.jpg HTTP/1.1\r\nHost: run1.08o.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 49219\r\nserver: nginx/1.28.0\r\netag: 7a2ad923e4308df46b28afc37d4ceeaf\r\nlast-modified: Mon, 05 Jan 2026 14:55:05 GMT\r\nx-timestamp: 1767624904.78532\r\nx-trans-id: txf38ea227acae4300be50b-00695bd21e\r\nx-openstack-request-id: txf38ea227acae4300be50b-00695bd21e\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 12 Jan 2026 02:41:56 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49219,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 717x403, components 3","md5":"7a2ad923e4308df46b28afc37d4ceeaf","sha1":"9e5f4975f2a6c8fcd3c2c9c2207575b71365e220","sha256":"9385c2f6b895f32108cf2f79bc8c75c3cf1a7f7f6835bf348e19df31d64790bb","sha512":"e0be8426d2623444ba6bc84b845f202dd6d7d1e57db2de3ea3d5e52397ad3123251e0f4989ee20c174f8430282b145a529b751e94d7553f25a0a9866f28d7326","ssdeep":"1536:qDXLcAvYlxCJb3mwvS7E3S30V2H3CQeKXjSgg:q3loM+7gS93ddXjSj","tlshash":"1e23021f5ba6fbfaa936c927049eeeeb03ef8e0738541a0df1ca1625542d715863c11c","first_seen":"2026-01-10T02:42:36.015978Z","last_seen":"2026-01-10T02:42:36.015978Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":62,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"run1.08o.net/8375.jpg","fqdn":"run1.08o.net","domain":"08o.net","tld":"net"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:56.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"run1.08o.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 02:31:59 GMT","end":"Fri, 20 Mar 2026 02:31:58 GMT"},"fingerprint":{"sha1":"EC:FB:53:E9:54:DD:0E:E9:51:E4:68:A6:57:9A:1D:56:2B:89:C6:7B","sha256":"40:F0:DE:54:B3:04:7E:71:C7:32:38:BB:4F:2C:27:E5:AF:95:51:AA:D3:80:71:1F:F6:EB:BA:FC:A0:A0:79:E1"}}},"request":{"raw":"GET /8375.jpg HTTP/1.1\r\nHost: run1.08o.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 02:41:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 46994\r\nserver: nginx/1.28.0\r\netag: bf1a7870db165647381d38017f0527a9\r\nlast-modified: Sat, 03 Jan 2026 10:12:00 GMT\r\nx-timestamp: 1767435119.13596\r\nx-trans-id: txa38744353c99436c8408e-006958ec65\r\nx-openstack-request-id: txa38744353c99436c8408e-006958ec65\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 12 Jan 2026 02:41:56 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46994,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 717x403, components 3","md5":"bf1a7870db165647381d38017f0527a9","sha1":"92041839545e86901a979e5156af501b38b6bb64","sha256":"de6792f69049ae70a643d82a85099c6ff3ef97ad565daf827ce679bb8b177be3","sha512":"c354744795e4628a43ebf436ac48567008145d450420513654335a776b02b0d7c6c6657fb8be8d028580ad02db532ce0291462ebdb6703b470064127196432c3","ssdeep":"768:YZqVSmUhDB5nGZHBmB1k5KVcNnwVI6RHCSke6pLf4stCRMi1CKlWihP+zOErNcHY:YZqwp1B5nGxIVcF6Riy6pr9dYCKoihP8","tlshash":"ef23022764a40742b20f246ca0b18e6d59f08708f7af48b7a2c2fb31d7453b259fe16d","first_seen":"2026-01-10T02:42:36.016904Z","last_seen":"2026-01-10T02:42:36.016904Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":61,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aagmaal.pink/page/2/","fqdn":"aagmaal.pink","domain":"aagmaal.pink","tld":"pink"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aagmaal.pink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 17:49:38 GMT","end":"Mon, 23 Mar 2026 18:48:20 GMT"},"fingerprint":{"sha1":"45:2E:32:D4:76:8A:D3:F5:46:C6:93:3E:39:0C:73:6B:BA:C9:2F:33","sha256":"C2:D7:5D:2D:82:48:31:20:AD:30:20:EC:E9:F3:7C:96:02:2C:E2:7C:A1:6A:B9:33:1C:F1:E3:16:B4:3B:0E:AB"}}},"request":{"raw":"GET /page/2/ HTTP/1.1\r\nHost: aagmaal.pink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T08:37:27.023409Z","times_seen":17952081,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mbdippex.com/keywords","fqdn":"mbdippex.com","domain":"mbdippex.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:57.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"POST /keywords HTTP/1.1\r\nHost: mbdippex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 709\r\nOrigin: https://aagmaal.pink\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":709,"data":"{\"ad_tags\":\"Aagmaal.Pink%2CAagmaal.Run%2CIndian%2CUncut%2CWeb%2CSeries%2CAagmaal.Loan%2CAagmaal.Dance%2CAagmaal.Agency%2CAagmaal.Pictures%2CAagmaal.Cymru%2CAagmaal.Nexus%2CAagmaal.Spa%2CAagmaal.Band%2CAagmaal.Wales%2CAagmaal.Tube%2CAagmaal.Men%2CAagmaal.Cat%2CAagmaal.Moi%2CAagmaal.Foo%2CAagmaal.Dev%2CAagmaal.Run%2CAagmaal.Fun%2CAagmaal.Pics%2CAagmaal.Watch%2CAagmaal.Live%2CAagmaal.Tech%2CAagmaal.In%2CAagmaal.Club%2CAagmaal.Com%2CAagmaal.Xyz%2CAagmaal.Run%2CAagmaals.Net%2CAagmaal.Online%2CAagmaal.Today%2CUllu%2CKooku%2C11upmovies%2CXprime%2CUncutadda%2CUncut%2CAnd%2CUncensored%2CWeb%2CSeries%2CIndian%2CHot%2CHindi%2CWeb%2CSeries%2Cand%2CUncut%2CWeb%2CSeries%2CAAGmaal\",\"page\":\"https%3A//aagmaal.pink/\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 10 Jan 2026 02:41:57 GMT\r\ncontent-type: application/json\r\ncontent-length: 48\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"18e0dbdbb9e0df18b3d6845a0f706294","sha1":"da3e0b689be600c74bad6395d500420671b6b299","sha256":"2fe106f6a0d702664543ed17aaab4539fb606dac6423af5fddb4101d74f1a58a","sha512":"9d35f1372db8ecf53cd3c5ca845e8132f54d3af85ca0c0199b74141dbcf1c902fde97e8385f72cf12842cec8c6e61996df4e1d60ff4c2d7ac293a9388f459f66","ssdeep":"","tlshash":"d2900224910a182f1e91e68075005549a48ae0159450d84910b548004357119018d805","first_seen":"2026-01-10T02:42:36.017778Z","last_seen":"2026-01-10T02:42:36.017778Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:58.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:lx2RK_x4J0ZY9oRUQeB7qOC4h5AGVQ:b8f549xa2B8Z557S; Expires=Mon, 10-Jan-2028 02:41:58 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 10 Jan 2026 02:41:58 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S1697926537:1768012918440405\u0026ifkv=AXbMIuAYdSlu13umoH6kfGHkkwMjpYAINibww5A76n-tzcX0EpINWxB7f_sJ4197JMgKMeGMef7x8g\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy: unsafe-none\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-gITbEMacaZFc5W8PIBtJRQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T08:37:27.023409Z","times_seen":17952081,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":163,"dns":0,"connect":16,"send":0,"wait":22,"receive":0,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mbdippex.com/in/show/?tag_ab=d\u0026site_id=312012229\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Faagmaal.pink%2F\u0026refdom=aagmaal.pink\u0026auction_time=1768012917\u0026subid=80758997\u0026sid=3011992369\u0026tcid=0\u0026ver=8.244.2\u0026ver_c=\u0026spot_id=2012229\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2026-01-10\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=99.9329199051961\u0026kubik_score=99.93\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D80758997%26spot_id%3D2012229%26is_adult%3D1%26p%3Dhttps%253A%252F%252Faagmaal.pink%252F%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=46587\u0026crtid=c58f2d11aa81ea611b3187e6d7ad04c5\u0026url=https%3A%2F%2Fp.a64x.com%2Fin%2Ftip_clicks%2F%3Fkatds_ep%3DLdY387PZ5C7R4NF4AsxBPX3p9Sd8uaDvAyag_vT620o5my7BpTzNumaz5TLl-NBc0OFA1DeEKnm91WLHc3kSY97SwsPGDRYJXetyqWVbSsQvBxaUDT8_6FkzpOB0ynBV7LXSYHCbzzFZqNkNy3FoikzovzHqQHImyZFpwX4O4Ld1yInyi9nESU5AVbciQ5C3ymVoZkU47kKB2lZ_Y89fSI4A0Sjfn0qPPks-lFR9CQcTKEX5E1hyVfActEtj9KC8Vi0hqYaKJCY2S0SRzWK8kI_HiOY-wUlvvrRklad0sus14KkJaftZ7TEDT-J9yuuCnuJce9LD30NNAGBHutBxP2J4u5UrDM2-f93e17YgnllD9WPvTe5gDXxGCSR50u1lXRIzM6ZJQzg6CX2gNdX1PLxGTTVjFAmOeUotA6cMbM8PitI88EQIawUxEjzhyX_NVS_35ml2Hro2030bl_bwmvfglQbuUPNRTjQoCTm9atxAv2g-MPCmvAchDbGXt7JyMUHvIhLwai_CpXrcE49t_xT7EbDVPA5ovpzaI4VRMaxB1myewljt2zkXxI-XkFAjtSw5TfRSa4ULPghkKkxwfvHy7ay6dVqIMEHFE8r4wxELozdZzpM7HomWPSB1RAaRwCDAPgsLn5sxCn7EZS0K8PUZy9sULvucv3qxgyO-YWDlNK38CNFQlZh9Uuj8VYecJ2-0K9l4pgm0Uea6anSuKNaVQWKCxspvz9PZUbRN6DHNsTTF8yKEZFzKCTeT4of_cmlJDhoC4uZBZ7GP8j2Z2e79Z0rkZANHEMfTIzEogg7wAkAENdgnLjVpX_jy8cWe33fKhXeBzKhkCzHZdKniKUmzpSOs9r4sebTAVOowsJxBVnWY7paHaxUGKV-sCJXK0j0EHLw7ZTCvf7FAjFDHA1EXP7rk0mTytZ_nNT-pVIHjCrJ5P6EbpUnAuoPIwtI8Arka00mh-RDErNfJwkuZNDkwMvMZzwBfPuHzENm9Z_zBUTx55OrYx0y6nJpQiSBVDZdNpHb-oBvsjoKTOWd7g6ZoJ7iSpyJI3GbNJyQfANFsLs1lBvQ4hbdEjbzmh4kDU4lK2WrxL6MDTUQ6TennARiK2p0h8BbJlDQai49OHRunvm1L6s4LXoI04fdT13e3QU7nJnoth9Eh3z_ZbzhD3nF94oKXiuI5TPI6IkJv_8urEI1c_ZpP3RQJp0isyWhX-Cej6Emf1-IrkcBLZfFqGHXJofRo19kMaEvZK-YfNQ-aXLPKhtd89LsRSR8IPfJeBrwHZp6VmZ1t_XF-UhQZ6b7C9LvltplZ576IWCip7zqLTuJJs948inuYh1EED9DKhdmNe4ebjxyNvg\u0026icons=so4B3AK9i5at-Il7DI_b6Pqqipw2-V4AztFh3WnGBd-pjk3vR8Sh0B8X8uSz9h_QS-30d9-ohuUfoqehGMxeTZmWIFpHEOC4VgqDCaQ5tiEH3metyh8BKqQwngivH-DOaqikwhTK_a4IrIVJlp5GZh85NYtxYDp8r-NcJpl-X7BvwwWWzsDdL164hkVlhm3Zu8jErDK8VG1yghVWdQPrDl4en31Aokpg1S8-E_uMb2k8I4yAId86cerDcI3wmsjojcineT_l6ZiIAFQzDr9W5lqdnDgl-3v8mnQgNNlBJMhRwLnvv7yi5MnSKAggfh0gPQANOGQB-QSHXprchMJ8rXBfB7numhT2Fw3USbg0xANmNushF286bp1gLlcxYbxqYAD_oHNJfD3rFzuvtMjlqpVobJpfA7HK5oIkvBxFSK4_V4hs6SUyX1fP-1rwWuSdwaieBUpcBgM5lzcdkuwU3aZA9NyetnOINZgavAAbAqlyvye6UI0xcyZcpjuobYqGK8T-7z1mIcKufQ9FuiIdxz1UGx4ZPSYoafdNajEw7wA6Sf6jJPtuwviGYCephhITT0uga0VVP3xc-l8SFlmFHTobT1f1L8tXGhyQG9xKYAwiVF0KlcL02bfzmOgtVhtQimqjK-IJE6BLQCte2Ji9alEXzuGHv5uhpe_D-X5PswJ1crbbZosRU_coHRtRdbO0KNxC9Z0RgI0xS6r7Q7bjGlpfVfpclc6unk7tv90VJ9Y8_Umz889zec1SXK3agC4hb4d9faHQEXMaSe2U0SiOcV6ZmuqgwnXa9373rRc8dW5kAKbBH5uYDDtc9OT5klfTY6quMTCpFcU0odviju6p9rIU-ngpVVDKHJqhdgbsK__fuhEyyu031bfj0yuwskOXrbgEuN_XqIIotcG48JQUx219DtPDHhSf0PxPscQ29u7O0C-30TROTeanJEQ_xw15-TKwUpT4bafri5yJjHXNhD0XxH7aVhqSTTH51XUADH7NqFd12_1KDuEdzY2E4YZgfYR6PvOCN_GZpFQ-pg2t5kmFPHIViQMqoODGOjgnmwwjHqDwfXmS9vNi0Ds-CWThsglXoA0t1kMhNT68ogx3yulsMZk89hrAbp4oC8dLz3xjdM3urXJWNLuE2EmivipU6hU8mRGXnCAgBzgyJvz-ksGrnvzHBItxgfVQ3VVyBrHRL5lDGET5PGD2DcltWzOjQPwW0tkgHO2BxIz6GDWssrZFuZod5Uri1avHXbpz69X567t8sHEiFGUPjzd5yfJwpOYrCAqSDrqFX0bdl1ONgd5R1EIQ5KF3Q9qqe4gz0A5lY02fWQejXCGr3TlVgI74u2I4dkY6BfrrpGfTuilBZ0Qb6sUx9uuj5uj-r1kCDPVkGxCN1fzfmCk7STmtnpsuvhgKxyeompFeKni1nX9235k407HN4ykmHw7C8SAHZHMShYCS-NvS2o5IvOtMIP3UEdlNkPbvrTntoZ2BnKoXrJqR8zvRVSqlPdvfML-YChRj9LZ7RJduVkcrjblLoANbAqH7Qf9v0bzQfgBk15ubXYjWwrI0ydn8\u0026ext_cid=494121\u0026px_id=1800362001\u0026min_cpm=0.0018739969885996988\u0026out_id=0\u0026campaign_type=hq\u0026aid=4074\u0026cid=20137\u0026uniq=88c2f1f9d86ef8b5df949d134501ab548882b13e277f85b8b5a13ede2a74d417\u0026mid=1196354953574720671\u0026skin_id=4\u0026vertical_id=5\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.01634797479035025\u0026cpm=0.018533017853301782\u0026verify_hash=f2d08d5bee4aa361e249919de7118feb\u0026verify_hash_v2=fd12f79273cc4325cb19a06a049af8d213f246a8815e4637cfab99e2e999393a\u0026is_native=1\u0026real_bid=0.00740963988304134\u0026original_bid_usd=0.0084\u0026original_bid=0.0084\u0026show_type=0\u0026exp=1440\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=155,5,129,148,98,4,90\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=\u0026site=native-push-adult\u0026price=0.0084\u0026hostname=auc-inpage-hz-5-a\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=webcams,bdsm,movies,asian\u0026pop_cpc=0.0084\u0026ext_campaign_id_str=494121\u0026is_webview=0\u0026client_price=0.0105851998329162\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=cpc\u0026is_in_app=0\u0026auc_domain_type=basic\u0026script_type=general\u0026tma_wallet_balance=0\u0026processed_keywords=Movies%2CBDSM%2CAsian%2CWebcams\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.0022063116492025935\u0026social_network=\u0026publisher_id=173083\u0026advanced_pub_id=162616535\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpc\u0026final_source_id=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=social-view-b_r-body\u0026cpa=7e561b68-215d-45bc-a0e8-2409b08fc0aa\u0026prev_step_diff=573\u0026st=0.02","fqdn":"mbdippex.com","domain":"mbdippex.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aagmaal.pink/","date":"2026-01-10T02:41:58.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"GET /in/show/?tag_ab=d\u0026site_id=312012229\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Faagmaal.pink%2F\u0026refdom=aagmaal.pink\u0026auction_time=1768012917\u0026subid=80758997\u0026sid=3011992369\u0026tcid=0\u0026ver=8.244.2\u0026ver_c=\u0026spot_id=2012229\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2026-01-10\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=99.9329199051961\u0026kubik_score=99.93\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D80758997%26spot_id%3D2012229%26is_adult%3D1%26p%3Dhttps%253A%252F%252Faagmaal.pink%252F%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=46587\u0026crtid=c58f2d11aa81ea611b3187e6d7ad04c5\u0026url=https%3A%2F%2Fp.a64x.com%2Fin%2Ftip_clicks%2F%3Fkatds_ep%3DLdY387PZ5C7R4NF4AsxBPX3p9Sd8uaDvAyag_vT620o5my7BpTzNumaz5TLl-NBc0OFA1DeEKnm91WLHc3kSY97SwsPGDRYJXetyqWVbSsQvBxaUDT8_6FkzpOB0ynBV7LXSYHCbzzFZqNkNy3FoikzovzHqQHImyZFpwX4O4Ld1yInyi9nESU5AVbciQ5C3ymVoZkU47kKB2lZ_Y89fSI4A0Sjfn0qPPks-lFR9CQcTKEX5E1hyVfActEtj9KC8Vi0hqYaKJCY2S0SRzWK8kI_HiOY-wUlvvrRklad0sus14KkJaftZ7TEDT-J9yuuCnuJce9LD30NNAGBHutBxP2J4u5UrDM2-f93e17YgnllD9WPvTe5gDXxGCSR50u1lXRIzM6ZJQzg6CX2gNdX1PLxGTTVjFAmOeUotA6cMbM8PitI88EQIawUxEjzhyX_NVS_35ml2Hro2030bl_bwmvfglQbuUPNRTjQoCTm9atxAv2g-MPCmvAchDbGXt7JyMUHvIhLwai_CpXrcE49t_xT7EbDVPA5ovpzaI4VRMaxB1myewljt2zkXxI-XkFAjtSw5TfRSa4ULPghkKkxwfvHy7ay6dVqIMEHFE8r4wxELozdZzpM7HomWPSB1RAaRwCDAPgsLn5sxCn7EZS0K8PUZy9sULvucv3qxgyO-YWDlNK38CNFQlZh9Uuj8VYecJ2-0K9l4pgm0Uea6anSuKNaVQWKCxspvz9PZUbRN6DHNsTTF8yKEZFzKCTeT4of_cmlJDhoC4uZBZ7GP8j2Z2e79Z0rkZANHEMfTIzEogg7wAkAENdgnLjVpX_jy8cWe33fKhXeBzKhkCzHZdKniKUmzpSOs9r4sebTAVOowsJxBVnWY7paHaxUGKV-sCJXK0j0EHLw7ZTCvf7FAjFDHA1EXP7rk0mTytZ_nNT-pVIHjCrJ5P6EbpUnAuoPIwtI8Arka00mh-RDErNfJwkuZNDkwMvMZzwBfPuHzENm9Z_zBUTx55OrYx0y6nJpQiSBVDZdNpHb-oBvsjoKTOWd7g6ZoJ7iSpyJI3GbNJyQfANFsLs1lBvQ4hbdEjbzmh4kDU4lK2WrxL6MDTUQ6TennARiK2p0h8BbJlDQai49OHRunvm1L6s4LXoI04fdT13e3QU7nJnoth9Eh3z_ZbzhD3nF94oKXiuI5TPI6IkJv_8urEI1c_ZpP3RQJp0isyWhX-Cej6Emf1-IrkcBLZfFqGHXJofRo19kMaEvZK-YfNQ-aXLPKhtd89LsRSR8IPfJeBrwHZp6VmZ1t_XF-UhQZ6b7C9LvltplZ576IWCip7zqLTuJJs948inuYh1EED9DKhdmNe4ebjxyNvg\u0026icons=so4B3AK9i5at-Il7DI_b6Pqqipw2-V4AztFh3WnGBd-pjk3vR8Sh0B8X8uSz9h_QS-30d9-ohuUfoqehGMxeTZmWIFpHEOC4VgqDCaQ5tiEH3metyh8BKqQwngivH-DOaqikwhTK_a4IrIVJlp5GZh85NYtxYDp8r-NcJpl-X7BvwwWWzsDdL164hkVlhm3Zu8jErDK8VG1yghVWdQPrDl4en31Aokpg1S8-E_uMb2k8I4yAId86cerDcI3wmsjojcineT_l6ZiIAFQzDr9W5lqdnDgl-3v8mnQgNNlBJMhRwLnvv7yi5MnSKAggfh0gPQANOGQB-QSHXprchMJ8rXBfB7numhT2Fw3USbg0xANmNushF286bp1gLlcxYbxqYAD_oHNJfD3rFzuvtMjlqpVobJpfA7HK5oIkvBxFSK4_V4hs6SUyX1fP-1rwWuSdwaieBUpcBgM5lzcdkuwU3aZA9NyetnOINZgavAAbAqlyvye6UI0xcyZcpjuobYqGK8T-7z1mIcKufQ9FuiIdxz1UGx4ZPSYoafdNajEw7wA6Sf6jJPtuwviGYCephhITT0uga0VVP3xc-l8SFlmFHTobT1f1L8tXGhyQG9xKYAwiVF0KlcL02bfzmOgtVhtQimqjK-IJE6BLQCte2Ji9alEXzuGHv5uhpe_D-X5PswJ1crbbZosRU_coHRtRdbO0KNxC9Z0RgI0xS6r7Q7bjGlpfVfpclc6unk7tv90VJ9Y8_Umz889zec1SXK3agC4hb4d9faHQEXMaSe2U0SiOcV6ZmuqgwnXa9373rRc8dW5kAKbBH5uYDDtc9OT5klfTY6quMTCpFcU0odviju6p9rIU-ngpVVDKHJqhdgbsK__fuhEyyu031bfj0yuwskOXrbgEuN_XqIIotcG48JQUx219DtPDHhSf0PxPscQ29u7O0C-30TROTeanJEQ_xw15-TKwUpT4bafri5yJjHXNhD0XxH7aVhqSTTH51XUADH7NqFd12_1KDuEdzY2E4YZgfYR6PvOCN_GZpFQ-pg2t5kmFPHIViQMqoODGOjgnmwwjHqDwfXmS9vNi0Ds-CWThsglXoA0t1kMhNT68ogx3yulsMZk89hrAbp4oC8dLz3xjdM3urXJWNLuE2EmivipU6hU8mRGXnCAgBzgyJvz-ksGrnvzHBItxgfVQ3VVyBrHRL5lDGET5PGD2DcltWzOjQPwW0tkgHO2BxIz6GDWssrZFuZod5Uri1avHXbpz69X567t8sHEiFGUPjzd5yfJwpOYrCAqSDrqFX0bdl1ONgd5R1EIQ5KF3Q9qqe4gz0A5lY02fWQejXCGr3TlVgI74u2I4dkY6BfrrpGfTuilBZ0Qb6sUx9uuj5uj-r1kCDPVkGxCN1fzfmCk7STmtnpsuvhgKxyeompFeKni1nX9235k407HN4ykmHw7C8SAHZHMShYCS-NvS2o5IvOtMIP3UEdlNkPbvrTntoZ2BnKoXrJqR8zvRVSqlPdvfML-YChRj9LZ7RJduVkcrjblLoANbAqH7Qf9v0bzQfgBk15ubXYjWwrI0ydn8\u0026ext_cid=494121\u0026px_id=1800362001\u0026min_cpm=0.0018739969885996988\u0026out_id=0\u0026campaign_type=hq\u0026aid=4074\u0026cid=20137\u0026uniq=88c2f1f9d86ef8b5df949d134501ab548882b13e277f85b8b5a13ede2a74d417\u0026mid=1196354953574720671\u0026skin_id=4\u0026vertical_id=5\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.01634797479035025\u0026cpm=0.018533017853301782\u0026verify_hash=f2d08d5bee4aa361e249919de7118feb\u0026verify_hash_v2=fd12f79273cc4325cb19a06a049af8d213f246a8815e4637cfab99e2e999393a\u0026is_native=1\u0026real_bid=0.00740963988304134\u0026original_bid_usd=0.0084\u0026original_bid=0.0084\u0026show_type=0\u0026exp=1440\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=155,5,129,148,98,4,90\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=\u0026site=native-push-adult\u0026price=0.0084\u0026hostname=auc-inpage-hz-5-a\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=webcams,bdsm,movies,asian\u0026pop_cpc=0.0084\u0026ext_campaign_id_str=494121\u0026is_webview=0\u0026client_price=0.0105851998329162\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=cpc\u0026is_in_app=0\u0026auc_domain_type=basic\u0026script_type=general\u0026tma_wallet_balance=0\u0026processed_keywords=Movies%2CBDSM%2CAsian%2CWebcams\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.0022063116492025935\u0026social_network=\u0026publisher_id=173083\u0026advanced_pub_id=162616535\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpc\u0026final_source_id=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=social-view-b_r-body\u0026cpa=7e561b68-215d-45bc-a0e8-2409b08fc0aa\u0026prev_step_diff=573\u0026st=0.02 HTTP/1.1\r\nHost: mbdippex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aagmaal.pink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 10 Jan 2026 02:41:58 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T08:37:27.023409Z","times_seen":17952081,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
