{"report_id":"173b6170-35ad-4e76-abaa-e4e6cc42c1fc","version":6,"status":"done","tags":[],"date":"2025-12-21T14:35:06Z","url":{"schema":"http","addr":"es.faponic.com/1-aareni-asmr/18/","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"es.faponic.com/","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"title":"Faponic","dom":{"size":99713,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c74f104bf925562e6dabae7e846beca0","sha1":"e29fd2b4ee8dc6c6ca45c25f91b2a03db3751f93","sha256":"a0b4e330d463ad7f501af9e02108b931d23f38374c7a2fc02d0c088281318593","sha512":"1630222446079c5f908342a677a9c9ef0614f7fa484a2205879b7fe8a49b2defa9e91ff50622f84cb6f62441484656eccdb7a8f6a4f3125b8cbf529106bec71c","ssdeep":"1536:MhWxL4Lz8LEwLy+hldFhgRNFphKy1DOpRn96xVLVnZvFPY66yTkYYw47djp47H9A:TXg2","tlshash":"47a3be7da593065012a3862e43de5e9c163ed5330a16dcaeb782548bcfc6fd863ce247","dom_hash":"domhashb5b20f3529d5ec5ceba97547e49ad80b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"es.faponic.com/1-aareni-asmr/18/","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-25T14:35:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":15}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"nowfavourable.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"nowfavourable.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-12-17T16:26:46.156091Z","alert_count":3,"request_count":1,"received_data":85956,"sent_data":412,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"adv.clickadu.net","ip":{"addr":"104.19.231.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-04-07","domain_rank":69445,"first_seen":"2025-01-16T15:43:09.806443Z","last_seen":"2025-12-16T17:37:28.680646Z","alert_count":0,"request_count":5,"received_data":168131,"sent_data":3997,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"18.194.59.7","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2025-12-16T20:59:52.98779Z","alert_count":0,"request_count":1,"received_data":423,"sent_data":444,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.show-sb.com","ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2025-12-16T03:50:05.101708Z","alert_count":1,"request_count":1,"received_data":2067,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-14T22:17:06.291076Z","alert_count":0,"request_count":1,"received_data":17441,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"creative-sb1.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":22211,"first_seen":"2025-08-08T09:32:32.509707Z","last_seen":"2025-12-16T05:58:16.815567Z","alert_count":15,"request_count":5,"received_data":171964,"sent_data":2276,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"nowfavourable.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-11-02","domain_rank":0,"first_seen":"2025-11-20T20:25:34.584975Z","last_seen":"2025-12-10T05:08:31.297203Z","alert_count":10,"request_count":5,"received_data":89746,"sent_data":5198,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-14T22:13:59.416786Z","alert_count":0,"request_count":2,"received_data":81926,"sent_data":1098,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pawqwexr.com","ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-12-08","domain_rank":0,"first_seen":"2025-12-21T11:40:25.248978Z","last_seen":"2025-12-21T11:40:25.248978Z","alert_count":0,"request_count":1,"received_data":3189,"sent_data":584,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-12-17T07:19:24.346596Z","alert_count":3,"request_count":1,"received_data":530,"sent_data":766,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2025-12-15T06:43:45.023171Z","alert_count":0,"request_count":1,"received_data":70958,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sourshaped.com","ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-06T14:35:38.581947Z","last_seen":"2025-12-20T06:30:54.466909Z","alert_count":12,"request_count":4,"received_data":2052,"sent_data":2221,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-14T22:17:32.87103Z","alert_count":0,"request_count":1,"received_data":411147,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"es.faponic.com","ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-03-21","domain_rank":1093542,"first_seen":"2025-07-05T00:39:18.513765Z","last_seen":"2025-11-20T20:25:35.086607Z","alert_count":0,"request_count":59,"received_data":4074439,"sent_data":27490,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Material Design Lite","description":"Material Design Lite is a library of components for web developers.","website":"https://getmdl.io","common_platform_enumeration":"","icon":"Material Design Lite.png","categories":["UI frameworks"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pawqwexr.com/puwaqsp/tif/mzoz?lbF0da=STP9Xs\u0026njzbjlx=437616\u0026rnm=6389\u0026nzra=sakphq\u0026xg=_cxpccrwzshxytzrifyziks\u0026iho=3\u0026yx=204773\u0026gds=231862\u0026ia=7873412\u0026yqy=vlfgqq\u0026qkvxp=810479\u0026nfd=045860\u0026miqar=yyvwlh\u0026ww=5","fqdn":"pawqwexr.com","domain":"pawqwexr.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c86d530c53432c140b435fd7095db48e","sha1":"ab3df196e988b138b96d312af9d7b98989d02af5","sha256":"a83775c107e6312c904b188ec216d65a21e9b6f3a9179f6c61491849b8444103","sha512":"e388494aec7650a93e86bec260340907661ca7252b5f83458478e41c436579f9fca913caaf4621e17fe936c18c4a99d650d1fb66c771c2b68453e3b795f1b2f9","ssdeep":"","tlshash":"2d41bb36d524f9a395f9b49a11f97c11440d9b674a37b71f2452da790e3c03d23c2477","size":2152,"data":"","first_seen":"2025-12-21T14:35:17.19849Z","last_seen":"2025-12-21T14:35:17.19849Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/libs/imagesloaded.pkgd.min.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81545aed80e2c8b710b729bea178621b","sha1":"049173b82e68c40492961bb95ddacefb44eab680","sha256":"5a65b0ca177f1c0433c0ead611692521c23e6668846a2861fedc09ae11416ffc","sha512":"627555d455405e30e77fd0e51bbd9ef070e7964d61ce37d61a5dad65d6bcca809956d18df46bb3e2d7c502d690ab17a2e7cc1caeb07a9a2c3a5519b925fbd971","ssdeep":"96:cww1xr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBVd:cwwfrycrr3rKvE9IjRxjGjgNhdTLo3rt","tlshash":"15c122cd77a275362296f0b3a21f020f7276406e6918815d7969ecf25cfcd092633bb0","size":5600,"data":"","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-04-04T02:36:00.797403Z","times_seen":11222,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8cf13ede9d8b52bf3056bbe099485586","sha1":"ded79ffc9bc64bdc2ded8aea03d0f8354389420e","sha256":"2cde9565ce763d12e64d0a0af30aabd6477187f96805d26846e94aa49189c059","sha512":"4e0ca88f31c9190c10ccdcf241de5b34fc88ebb2e5c38826537c5efca139cab107b05629089efe37e073782ac5f32ebd28fde3ed2b4dbac88462497ed585c37d","ssdeep":"","tlshash":"51c08c98210a6cf0a1aa2a400f6fb904b0623211a4e06c31491aa3085560e83d744870","size":158,"data":"","first_seen":"2023-05-09T05:59:37Z","last_seen":"2026-04-03T06:43:40.727414Z","times_seen":258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6882c2ccdb4eaee240f58fecb82bd98f","sha1":"7e6a1e4dec336078120dafd9bd00220e3eb2e0a4","sha256":"3cf8ddbe407872af75664303aca10fa789b1af690a560391d42304b29105b24f","sha512":"55c11b25e974a1f05f8ef2224306ba9a54dc05db35dd7b2527653cef5bd61ddd4e101e38f9b9b368da3c599bdf8223098a96f05f7fd5941313871f3af1f4ebd2","ssdeep":"192:22hyayuhhlzqj8WszfNrXaCnlRZd4F9TFxtedgIfU3Pzk9eXWnuis9GmgiHsA9uh:A+bgj8WszpXFfZyR8gIfM7k93s9GmUAC","tlshash":"a112f7b52297ad6f876008dda12e6478f4790a00748ece88f0ad9dcb3c37545d2f2a7d","size":9769,"data":"","first_seen":"2025-12-21T14:35:17.316072Z","last_seen":"2026-04-03T06:43:40.72879Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/libs/jquery.magnific-popup.min.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f110a6d8d715e646ccaff9d21e7400b","sha1":"3581562e2f53008cd0cd85db2a7a022e98c2b4c2","sha256":"fa51078b465cfb61ec6f705104d06a82ae07776e094b217d3cbb0f702b2d4ba4","sha512":"80f403394cf8d6a405cb4cbcd72ff53589b70acd2686b98531476c4472caebfa6e17e90061c47b6a3a12b195a29d5f9ac63a96be1955b983a4ebc09090d12eee","ssdeep":"384:QVrXoiKLplEdM0RARh13XK2CUrw8n//Wq4g5rVwKOq2Qu1Z3nOj:Qs4M+KFw8n/KGr+e2QunnOj","tlshash":"e892f864f1a3b11783ab75b81c5f200d3b72aa22d907c4117659d4e86dfde88a127f3d","size":20280,"data":"","first_seen":"2023-05-09T05:59:38Z","last_seen":"2026-04-03T06:43:40.707145Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-04T03:45:08.728126Z","times_seen":13158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adv.clickadu.net/get/2006640?id=2006640\u0026jp=_clblhrwajihvystwsuwqxl\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.655-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=9SR\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=St4ou4aaHR0cHM6Ly9lcy5mYXBvbmljLmNvbS8\u0026afid=1241657957980160\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pi=W1oqmg\u0026pload=1408\u0026rlp=%5B0%2C21%2C20%2C15%2C9210%2C13318%2C8667%2C13226%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"adv.clickadu.net","domain":"clickadu.net","tld":"net"},"ip":{"addr":"104.19.231.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b4edc74fc9e1db83e678e24b3955f0d","sha1":"1601a6c6629597fce8f1da4e6a0a7280ae326598","sha256":"a34dd5390108b8316bc6ed39b953d718a0040f71c92faf8cd4f5b9369634fb34","sha512":"fb6020044440506f1af20eb2afd155984cc7b1ac4b33cac9455b14fa0a17ac7a47843334f2bc7cd718ea8087d5c5f4cf45931f6e4dfe5618ea520e805154664c","ssdeep":"","tlshash":"b16163aa50e5e7a0c8013f2f41255e50058db7debe7b8092088ab13487e59f6ef33e15","size":3340,"data":"","first_seen":"2025-12-21T14:35:17.268419Z","last_seen":"2025-12-21T14:35:17.268419Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8888e0474a509acb77fb960ce1968b8","sha1":"afbd89f3be387a765ee7995560fc6ffbcbc7ffe9","sha256":"47fc2a62167013ce30d542f86d1603237a9c1a39f4acb689adb9c85f322c0155","sha512":"3b8b7c046dd530ff27b6f1ef6a57f55f5e06b781619abedc237c7caa0c824c055b0ad1a9adffb33db0a7857e560812b13999be315cfc785bc96c4516a44c69e0","ssdeep":"","tlshash":"d3216032d217c7b211e2f17356492ecda533866e9b46470abb2801d90dc47e722ef6f9","size":1276,"data":"","first_seen":"2024-04-24T15:02:42Z","last_seen":"2026-01-02T22:40:13.444663Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/libs/isotope.pkgd.min.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ef8a013e968661683d59b30eaa21468","sha1":"7cfd9bef982f129a0fe172cc39d249491ed38b63","sha256":"23fd9d2b985d8329cc293280a5d3b49dd0d08aa3020dc7e6f10dcd2b1ac69a66","sha512":"2fe3818c02c659169d508dada298a1546250f0fd43a9faa564c313b4965091e4283bef3fb60b1f68337f143affbfd9668db4dda5c06f10b5f21091ea08c0c3af","ssdeep":"768:kTGApxcGBiER2kAZPjEnRY2qFZ/aNq6BNGuD6cD6YLjfq9SvDzbH1rQx:WxFBRAP4nRY2qFZ/aXNGuD6cD6oS9ODY","tlshash":"01f2c64f7340392546cbf166a26f160f7137a56c6a4390acfa6ad8db1c7984d6033fb8","size":34826,"data":"","first_seen":"2023-03-09T23:04:12Z","last_seen":"2026-04-03T06:43:40.700314Z","times_seen":280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adv.clickadu.net/on.js","fqdn":"adv.clickadu.net","domain":"clickadu.net","tld":"net"},"ip":{"addr":"104.19.231.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc4419169ec0726fcc7cceef9c403462","sha1":"7018a9b4256131bcefb646834c0c8ffbf9075282","sha256":"76a8d79ebe132d6a75b92856027a17d65252bd2908977a7c59e334fd2798e02f","sha512":"d542a0187aed38603fe9f7940c021dc2311ae67019e2f05bc1dc241e1798ddafc5b5b4fded085efd0ef8327fd5a92f71eec38e2db120eed48e8e4c5b61266c38","ssdeep":"1536:ipiW7ZKr794r81xk4ZCp9jlbZrkj79Lk4pkzXYR3U7YMnoCUVxUzXv21+GGfsTcK:iIW7W794ek4Cj7E1pkzIRwYG70TcJE","tlshash":"39e3a8ce7ac724320256b02f583f7a126ef6dfd6ea5d441081b3d1cd2d75c0ba162ab9","size":156770,"data":"","first_seen":"2025-12-18T13:43:46.446464Z","last_seen":"2025-12-23T11:38:41.661621Z","times_seen":177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/libs-init/libs-init.js?1","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0879bf47343d92942f3944439656530","sha1":"d871723ba0b6cef674bca27ee69013c30b67c892","sha256":"590ea48c656281412f3e4189f4d0bdabe04491188ebc316aa0e9addc8044fbe2","sha512":"a8145c1673ce26d826cdb9b3058dfaa60a06293775a6341fcfdc68ec1e47b183f2b2c6045c44c89663fdaf0dae3dca5449723a1c23013c712c451b5800e2d21b","ssdeep":"192:oNJf2PUnvGj9UwHYZzLrCz3429+WbPlb07fVG0h8ioimCt5L9MNU0ZDQ:o2UnZwHwzLrE4KfxijJ9MNU05Q","tlshash":"405273447ddb603b48bbf3a6657fd805eeace0148543543cfc9e44549ea866c032eeae","size":13884,"data":"","first_seen":"2023-05-09T05:59:37Z","last_seen":"2026-04-03T06:43:40.712532Z","times_seen":263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/jQuery/jquery-3.5.1.min.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b61aa6e2d68d21b3546b5b418bf0e9c3","sha1":"9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7","sha256":"f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b","sha512":"5882735d9a0239c5c63c5c87b81618e3c8dc09d7d743c3444c535b9547b9b65defa509d7804552c581cb84b61dd1225e2add5dca6b120868ec201fa979504f4b","ssdeep":"1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvaks:/Yh8eip3huuf6IidlrvakdtQ47GK8","tlshash":"3193f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89478,"data":"","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-04-04T02:43:07.585477Z","times_seen":14792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/svg-loader.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6dd56cfa45441cde15a85de5b04eaf3","sha1":"2513ffed24bf0758a67cab782c95cf32e4f8da97","sha256":"798d2917fff8175470a16b8436e49f054d6483e47a2d6f9d850e5a63fb6c036d","sha512":"3e0a43a526850a06d351c6bc509fe1a05b94c45c37570b62bfa0245798655aad6c9fb6b58dd8ed9b1c32070ba2715c5af62205c0136aa4aead85fe2ef434033b","ssdeep":"768:5s+GvCYw9FVvL4BFS10sckNNspCnm+8rF7JnWLGsrTkZYHa+SS6jUvFISc7OGA0:6zJ6FaGWkN2YmDFZJWkZYH4S6jn7OG5","tlshash":"3263b5e477b0e07c555b07ee8f3e48cc2a2e76be79c6407271aded94a7424b8d943920","size":67489,"data":"","first_seen":"2023-05-09T05:59:38Z","last_seen":"2026-04-03T06:43:40.723424Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/libs/ajax-pagination.min.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fdbf92deea1627c008af9ea56de4a48d","sha1":"73915cb90a9acb72144cd9b2943cccae19b6db41","sha256":"b35e2a2f862732d940f26ecf8a436b8d9e6b63a0097a41edb6b72f1eaa7d6164","sha512":"23dac5387a34099201c7e5ef659d8c7bcad3d90d92c870ac0dac3664ff4b18a475957334644307fcaa9dca3738e8cccbeaf35b6604949919b98891e1eb3ec941","ssdeep":"","tlshash":"ec31acc4bf0f9869aa3b331c9c3b8448ef2cd03391456536ba5da080dfb4108d25a99f","size":1802,"data":"","first_seen":"2023-05-09T05:59:37Z","last_seen":"2026-04-03T06:43:40.718153Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nowfavourable.com/f1/4a/b1/f14ab1a1d93ca97c0c0da7c3d00b26cf.js","fqdn":"nowfavourable.com","domain":"nowfavourable.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"972473bd655d3d7399b55a52f8081141","sha1":"382197911c6dfbd309cf58659633a845b1f9d638","sha256":"48018e170a66a014438ef8dd9cf8c2609059e0c59b5d76f5b26afb3b7b0c88dc","sha512":"5977b4910654c880fdb41617e8329ec4a83cde3fb4c17cfb5b8f0ce9ca355f6e676c70c171404ba80a9ab8ce2a19ea91a0d33f9ed305d5d16fa2e20d076505f1","ssdeep":"1536:t9yUBg8XFOUGZ7AVTQsz3WArOwlNyBv77NzxpQ2jFFm+djI80:t3B91cGpUhxpJm0If","tlshash":"e27309487f42b16b5352a073627fd047f0256f1261ecd498d123e6a86f6c33af636b98","size":78896,"data":"","first_seen":"2025-12-21T14:35:17.207712Z","last_seen":"2025-12-21T14:35:17.207712Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/bootstrap/dist/js/bootstrap.bundle.min.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"255a58b3e9d10c59096e3a2fae341cf7","sha1":"8d85c1a1ac55a16b68a1e8c1f032068d5d4de604","sha256":"f2112b7212a3395603d5c60dfe71dea79b96e5996c77c0138675d121beae0ec0","sha512":"5f7d58c1bdc7434243f2457e673e29d71260a431ee7341cb8881206c04bac0ad12b3d650e15cc1bb2f60133d05552318f717c35d30129711e9c7cef01e9e835a","ssdeep":"1536:+q7bGH2I5VQM82vMoNLmD1fRo6/ZjUR4CFlUhuYVt:FHcKLC4t","tlshash":"6273b659b254b47206df607a803f460fb73a6895b04b8128b969d8dd1e7cc8a7173f7c","size":80678,"data":"","first_seen":"2023-05-09T05:59:37Z","last_seen":"2026-04-03T06:43:40.700978Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/libs/perfect-scrollbar.min.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d9ca9faf779b1643b1d3cb7bd1876b6","sha1":"cc8996acdad3a92ea375d3c98d7a838630525479","sha256":"e76d2581ff4f8c29c9d1a6dc8938b2f4856c491fed005eb9776973de6b4fb169","sha512":"0e8fb809a4de09bfc47d292709c49c7880c60ad1c0334dc625ee1b79e61e3ed753f72392c382823d070eb975a5a6f4ea2e462eaa5895a1efbb06d84d7ef10a30","ssdeep":"384:aCnffouNtwIXgqsvmcRxo3kfZNUF/UF1xtjhUrAXJW2i28tvuJisJv4HROdyoL34:aC4uNtwIFssAXJ0FoLVu","tlshash":"96b2810cb21430a092ff315dc5df870e61724553b78fa5d0a490dfb8a9747ba6362b6e","size":25551,"data":"","first_seen":"2023-05-09T05:59:38Z","last_seen":"2026-04-03T06:43:40.726844Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0KVPEKPNG7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0340d3f86b8ff598f2370190e1536dfb","sha1":"994ef1efdcd5106994d17e507c7e69856a100374","sha256":"1768d5b3fd58587c1a6758a614bf44a9389dc5cbd7731831d867eacb52c26cbd","sha512":"d9d67491583993c5347046f6d90c8d7ae80db4f548243c669f607a3ffc8c80d43dc026e5dac19d35f4013592e672a978e91373d6070874504fd62f4103213cfc","ssdeep":"6144:4Ie7mZ2bulKY/1u99xHDmHYmyBFzvnsNu6JWoNPad4FpC1PF:5Cpbu7/1mbrnsRWbMpA","tlshash":"0f9419ce73c674668396f078503f118ba57b29a2b45cc895f189cce42e74a9a4237f7c","size":410543,"data":"","first_seen":"2025-12-21T14:35:17.206824Z","last_seen":"2025-12-21T14:35:17.206824Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/libs/jquery.mousewheel.min.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f59267e06a0a702df4d57539651b886e","sha1":"fc1a9149049ff781e1db97993ca2fc82ffe15dbb","sha256":"0276bc0d88d8acbb7faa2f4ca675dc256cdea9c9b92a31b8f50da6dabc73b8e0","sha512":"34618b7bede39c30c193f744c392ee2dda5b0550856f7df078f8e4a90f5215d733bcc04f35af594753a82906d23186600f5875a7ff7bade09167d0bbc6ee72ce","ssdeep":"","tlshash":"1a517440631561f381f60726b22e7702b13ad115101734e279bd9da07b9aeeb9327d2f","size":2705,"data":"","first_seen":"2023-05-09T05:59:37Z","last_seen":"2026-04-03T06:43:40.726268Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"f2b58f5679bd188343484ed09ecc83a1","sha1":"9022d86102db9e7c41451b8a9ef79adb3065e0d9","sha256":"eabe9babb7ecd17d77d4f3211e3a4c7f1a4cc0ed2e67e05e330e3cdc6c8bba1c","sha512":"464f06e312d5eca2c5854b496fefc5f2866774e362bf5b344a8b73c2b9b28fcc7379bc9d8821aeba9abfcb09dd8d0ef505785a7e1c58095cff678b987bc1f505","ssdeep":"","tlshash":"b5500030c000000300000000300f0c00cc300c0000000000c0f3000c00000000000003","size":10,"data":"","first_seen":"2025-12-21T14:35:17.317778Z","last_seen":"2026-04-03T06:43:40.729369Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/main.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e062ebbdac81d089397539b38cb25a90","sha1":"e18b504807259726c9b93e24ae3b616a4a9cd8ca","sha256":"4410f39c828f520007c1af27ae5b4ec453ddb6e4257e0b46dc913f68d2925cc7","sha512":"9bfd2b140cefcadd1041b98ca4b0b0d5cef551e12696fdc2165854f7d09157836263049da01d1da88d56ecb60ffb9452a79b4f82607f6e75a4b447d8d4bfeba0","ssdeep":"192:TpIJp6jPi8n0nlW+R+x5V2MFs37RcXCxG:9IJ+a80lQGK","tlshash":"0d126355fe7b38aa95fff36950bb0004d63dd921930a4238f87c40986d48769634feae","size":9321,"data":"","first_seen":"2023-05-09T05:59:37Z","last_seen":"2026-04-03T06:43:40.718733Z","times_seen":263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adv.clickadu.net/get/2006640?id=2006640\u0026jp=_clblhrwajihvystwsuwqxl\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.655-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=9SR\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=zqtK5nNaHR0cHM6Ly9lcy5mYXBvbmljLmNvbS8\u0026afid=8841482329107968\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=957\u0026rlp=%5B0%2C21%2C20%2C15%2C818%2C1697%2C691%2C1605%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"adv.clickadu.net","domain":"clickadu.net","tld":"net"},"ip":{"addr":"104.19.231.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb548be176c9a1731d4a73df774cf553","sha1":"049c4ac00985badb6fb8e90dad15eeb88c26fccb","sha256":"c72c5bfc58801cdf72002b0cb7c973836bde110afb9fcabf64920e19ea9d0cbd","sha512":"c86c6a5385e1febceafe3713a1fb18841aa511e8e83e5c9ad8a8b7671fc76e637d485a9996980c5c0760d4e789af20976fe87a17c915c66f317e98fd2b66eac4","ssdeep":"","tlshash":"954169afa085c0be86903c5507fb0f83ee4577a2ad3b5786c6e98568355f8e07b33452","size":2165,"data":"","first_seen":"2025-12-21T14:35:17.297852Z","last_seen":"2025-12-21T14:35:17.297852Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0f4128df045cdc0ab6e5c7f3a5fdd23","sha1":"777e0ed9d0c8c649e3b3b85a6c5bc8c7d6334046","sha256":"c39e52d7a34e3da5da4ffe6e4c499aa10074b8dedf3228f0b5fd1ad1c574d427","sha512":"04b90639756dfb3e06d8b2f46095a8a4ecdc082d7b6ff40fe963aeb7e09d6227ee993e7c910d8843f4614ea895d3eb057ba97555ec704c342fdcbb1834205242","ssdeep":"","tlshash":"c9e08c8cffbc27a2013f3219523b5d85a2ae00099a4a2e17eeb849501da990c3b95c04","size":333,"data":"","first_seen":"2025-06-14T14:19:08.876332Z","last_seen":"2026-04-03T06:43:40.729922Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/vpn/classic-push/small/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a356126b9573eb7bd1e9a7494737410","sha1":"8258d046f17dd3c15a5d3984e1868b7b5d1db329","sha256":"22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5","sha512":"005c3102459dbf145df6a858629d6a6de4598fafe24cd989d86170731b0c3b3c304da470cf66bfd935f6db911b723df0857b5ed561906f7f1c5c4e63ed9430de","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrZ:++414Jiz6fh6lTqya98HrZ","tlshash":"dc83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84380,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-04T03:05:57.56265Z","times_seen":15938,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/libs/material.min.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"162ddc9a5385ac16b0a331f7523f8966","sha1":"1e24a4271c908380c845af4288d40d1869d89be9","sha256":"291bc73a4c0ebdd58d37b40fa35cf155b5176b60c32641a9d790dc6f957621ce","sha512":"d6924740cdd1a2259626c54db0cb355f087dcb64d6234147bf2a195d113d2e844de1a9205dc5498ee890437ea2d179d17cbca14e0f99e767c110cc4e8937a645","ssdeep":"192:kNvBZvXvTvZvpUdVUeUPNeI9jPCB0bIuSXIBq3wkc75losb:kNZZ/rBhUdVUeUPNeI9jPk0bIuSXIA3K","tlshash":"98f1430cb521334352f791f451eb8a4f613290b4d919445870afc6e45abee8ca2abfbd","size":8138,"data":"","first_seen":"2023-03-07T13:13:10Z","last_seen":"2026-04-03T06:43:40.722249Z","times_seen":308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c67db77517c1028ce9ef44d21b717c3a","sha1":"41bd96c213f1701b2d847861741246efe61ad938","sha256":"e3795c9a9b8cc6cd13aac0f8ff39df8e47cc6fb03099598428fc80b45024f26d","sha512":"437299d053528f5907baa9858c818074b6ee2c971e7c24d3c3a5660061a29558f727778e473225c83f4ec9b428a13f64b4ddeb98e628fe7127e891884b6a0f0f","ssdeep":"","tlshash":"384101c5fb2c1d66817770395d2f7196262c353125020ea7fe58e4843ac495e2768d7d","size":2011,"data":"","first_seen":"2023-09-16T04:05:13Z","last_seen":"2026-04-01T05:16:19.794402Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/libs/selectize.min.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81ed3bf9f8a8b2634e320e6ae7f55764","sha1":"d180303c512b0dbe4902cf999e680b0c689f8f9c","sha256":"fd2deb6a99103da704ab1e3f23f8e916255b665e453de84682855abde3558182","sha512":"243708bff27d52cb12a79d23427e004e106819757c43b8366e766346ee70ce583ab84b9b5f0c811d4d8fc96bc57a6bd48ec4ce7708aadcb7b62b1d966ee02049","ssdeep":"768:nuQn6U0yjDRLpAmfx2tsCh9vX2o/tHRCBurCCXRbszwU3IzROZYW1zArLDjN0R86:nu6EyBLm/rDnTUfV","tlshash":"f013e78472d1326291f730f459fb4506b13aa99ae00994b2f278d8cdbe78d449137f7e","size":45142,"data":"","first_seen":"2023-05-09T05:59:38Z","last_seen":"2026-04-03T06:43:40.722847Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"es.faponic.com/data/j/u/juqyx/1000/juqyx_0134.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/j/u/juqyx/1000/juqyx_0134.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 125523\r\nlast-modified: Sun, 21 Dec 2025 14:01:32 GMT\r\netag: \"6947fdbc-1ea53\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tkyGjTB%2BW9ZfwEq%2BPdAyjr7QIhcTC2HfdFdxF3eJeQ12G5YEA6H6KDKC9c%2BXyFB4Nhn90RriC15KoeeZxr8MebhbCyL6i%2FFrtKV55Ldu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a161f4049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125523,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 810x1080, components 3","md5":"09dcd9b88f43d9ff67925d0b8739a829","sha1":"27011b5032478114f2ba838a7136f2bd6097807a","sha256":"9665a7cf08c624e81f4037e4dac7ea9071a6d09a9a19bb93056bd07f3f02acaf","sha512":"f7386f1f722e026a3c79403216fff5b2af86b106bf7e37eebb9e1f84934d8c62cfadf19d175153e1b406617ed7f8fc127d6789485999f7626283ba5e6e60bf5c","ssdeep":"3072:dUbDPq5lAAqamLkThw4dm5gMISJxK3rE+wdVLl8NMEfzJ:d0Pq50pehw15gMIwAbY1lkdJ","tlshash":"38c3129f1acd8b4dfd5dc9382bde938030249719658fab9c5097aebe974d2c026e2107","first_seen":"2025-12-21T14:35:17.191525Z","last_seen":"2025-12-21T14:35:17.191525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/vpn/classic-push/small/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:44.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://es.faponic.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 14:34:44 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa84fe-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 421343\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hXUUIDqKyhUfg2rxyzu944DYwlECeUffgh16U5p0Td5i5KTTvVXnXaOoKndAly7GGdLh4xxYAdZf4ToNHOPhMmHHr%2Bzd%2BynWMoi1%2Bjs9\"}]}\r\ncf-ray: 9b181a1e9bc7b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-04-03T21:08:41.899388Z","times_seen":10529,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":10,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/vpn/classic-push/small/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:45.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://es.faponic.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Dec 2025 14:34:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 421343\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kyzbnj6y5CXqRM%2F2NFAjJBCJ8Bpgu%2BgJJkBuUW3noPpaUV9LfQbgFObcDxG71ZFhlnYwnJr%2Bdroc3QBWgiT2rYrYCPqe8601LyvH3I3b\"}]}\r\netag: W/\"65aa84fe-3c2\"\r\ncontent-encoding: br\r\ncf-ray: 9b181a1f8880b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":962,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"0013fbb3bd9e7300fa1bc9f62501dcf0","sha1":"447e4a8994979e2e158b9beff79b94e7d1b29508","sha256":"4cf18df81115ddab6967dc82096077ee024223dac3c6ffc9b810bffb7780a20e","sha512":"288a5e82fdbfdadf11f5a15ed40b54b67dd43fd83f0666abf85ebc0f14ef3b6e5e9104c3491fdb85b40e5556b252d933ee8cbe6e381e96e01170e76c60003dc6","ssdeep":"","tlshash":"e7117d37156882f06257f027a15729d6ee32029ee81a5707721c06cd0ec47b913fa6e7","first_seen":"2023-06-25T06:36:24Z","last_seen":"2026-04-03T15:41:36.791557Z","times_seen":2253,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nowfavourable.com/impr.gif?sid=H4sIAAAAAAAC_1RSz2skRRit3sSTgj_xtjCHPSiaSfd0z0zaPSwbd6PRmIRsJAdP1VXdkzI1VW1V9_RkvAQjsuDB8aa3zptkg-4i-gcIy8RbUHAEIYfk4p8gLOhBZCYD0Xf4vvf168P73lefHeQXxEdOz9bf0z0hJZ2vV93KK1tCcV3YyupmxXOr7s3KllCN4GalOy6m84bnB1X31cpbMdvR8zXXc13P9SpLwsSJ7s5PVIj0UehVQ7ca1KpePUDX_H-2uQNLHfDOBXkBgo-e_SP5AIINodrf34ntTqbT1--2c0kzbdDhx--rHaULhfYVTYyDRB1P_4a2I0K-ugatjqcbQHcOxxsgEiNy7eVzROp4ahNR5-jSaSQRK0T8aRSdIWI5hKBDML0PwX8lAONYXYNqP1jVpqC7lyodqyMy--RPiGJEZs9fgmp_tyhFt3JPyzwTWll0kxKiO4RoDZHmJ8h6DkRxApZ9AsF_IfNPVqDah2tWagh-dqMesrCRuI05GvFgLuBJOBfWw-Zcs87rzUadB40wmUQkkiGonUFuHeTCQZ44yFMHbX5WCdyFgHnUbyQhZ003oEHA48gNF2quS0PWRM7G3vvI0j6Y7IOZPaRmDzuiD5M_ht0uYbkDmxF0eIkiJigsQUEJCkFQZARFpzzi0tZs-YBLm0fetNem3S8HOmsd0COdtWJFQE0fhpeHIv3I7oNlM4NeYvlAjwuNsnJAI14epBfk-XGsTv2L69iJzyqJF9DIox4PfUbDJnOZy2mT-dx1o1qDJbCihLDXQK2DnhiR187_QSpGZPbvLUT0BFaegInnQPProEUJul2ipx4mNNVKsCrTbXBdIs1mke06B_KCvDjY2Fx8PDnu7b--RsxOb_2eTABmSqSmxIfiJ4KWvD_Y0AU53NCFJT-spZloix4dH_5eRrN45tt3491CG758x_a_uc3Gwpg-2oxttkIVF6plycNFwXlslrRhMflx2W7F0Xputxdzo_J0Zf3NpeV2amJrhVZDUDEizsc_g4kReeadu5NHfWP5c7B0DzY9JVPAaoIodSAFgYyvvtOohP3PHF3xA3sfLeOAZvtQ7RIdU6IjS1DZh81nBllqTm_95k-ASDqDSBrnMJJGfnmZkxVnlcSPa8x1F5oNz19IYs8POEvqC0HIG9T1_RiZHYm3n_r03wAAAP__rUu4BncEAAA=","fqdn":"nowfavourable.com","domain":"nowfavourable.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:45.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"nowfavourable.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 08:06:05 GMT","end":"Sat, 31 Jan 2026 08:06:04 GMT"},"fingerprint":{"sha1":"83:CE:C1:62:82:C2:34:A6:99:3A:82:07:CB:34:5D:91:B3:74:75:DF","sha256":"0F:AA:B6:B1:20:83:89:33:BE:CF:4B:CB:28:0D:0B:EC:E7:21:59:99:65:5F:45:F3:1A:A6:52:08:A0:59:23:C2"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSz2skRRit3sSTgj_xtjCHPSiaSfd0z0zaPSwbd6PRmIRsJAdP1VXdkzI1VW1V9_RkvAQjsuDB8aa3zptkg-4i-gcIy8RbUHAEIYfk4p8gLOhBZCYD0Xf4vvf168P73lefHeQXxEdOz9bf0z0hJZ2vV93KK1tCcV3YyupmxXOr7s3KllCN4GalOy6m84bnB1X31cpbMdvR8zXXc13P9SpLwsSJ7s5PVIj0UehVQ7ca1KpePUDX_H-2uQNLHfDOBXkBgo-e_SP5AIINodrf34ntTqbT1--2c0kzbdDhx--rHaULhfYVTYyDRB1P_4a2I0K-ugatjqcbQHcOxxsgEiNy7eVzROp4ahNR5-jSaSQRK0T8aRSdIWI5hKBDML0PwX8lAONYXYNqP1jVpqC7lyodqyMy--RPiGJEZs9fgmp_tyhFt3JPyzwTWll0kxKiO4RoDZHmJ8h6DkRxApZ9AsF_IfNPVqDah2tWagh-dqMesrCRuI05GvFgLuBJOBfWw-Zcs87rzUadB40wmUQkkiGonUFuHeTCQZ44yFMHbX5WCdyFgHnUbyQhZ003oEHA48gNF2quS0PWRM7G3vvI0j6Y7IOZPaRmDzuiD5M_ht0uYbkDmxF0eIkiJigsQUEJCkFQZARFpzzi0tZs-YBLm0fetNem3S8HOmsd0COdtWJFQE0fhpeHIv3I7oNlM4NeYvlAjwuNsnJAI14epBfk-XGsTv2L69iJzyqJF9DIox4PfUbDJnOZy2mT-dx1o1qDJbCihLDXQK2DnhiR187_QSpGZPbvLUT0BFaegInnQPProEUJul2ipx4mNNVKsCrTbXBdIs1mke06B_KCvDjY2Fx8PDnu7b--RsxOb_2eTABmSqSmxIfiJ4KWvD_Y0AU53NCFJT-spZloix4dH_5eRrN45tt3491CG758x_a_uc3Gwpg-2oxttkIVF6plycNFwXlslrRhMflx2W7F0Xputxdzo_J0Zf3NpeV2amJrhVZDUDEizsc_g4kReeadu5NHfWP5c7B0DzY9JVPAaoIodSAFgYyvvtOohP3PHF3xA3sfLeOAZvtQ7RIdU6IjS1DZh81nBllqTm_95k-ASDqDSBrnMJJGfnmZkxVnlcSPa8x1F5oNz19IYs8POEvqC0HIG9T1_RiZHYm3n_r03wAAAP__rUu4BncEAAA= HTTP/1.1\r\nHost: nowfavourable.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nCookie: uid_id2=59c96f06-abd4-4df9-9597-75d5765d469f:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl20287261=1; slecf14ab1a1d93ca97c0c0da7c3d00b26cf=[4323737]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 21 Dec 2025 14:34:45 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+89c42f57dd834b630f09fd2cfd2d6bf0=4323737; expires=Mon, 22 Dec 2025 14:34:45 GMT; path=/; secure; SameSite=None\niprc_l:4323737=1; expires=Mon, 22 Dec 2025 14:34:45 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 3\r\nHost: nowfavourable.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8b07a8fadd092dcb18fe860a66a6abfc\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"nowfavourable.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"nowfavourable.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nowfavourable.com/pixel/sbs?c=1","fqdn":"nowfavourable.com","domain":"nowfavourable.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:45.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"nowfavourable.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 08:06:05 GMT","end":"Sat, 31 Jan 2026 08:06:04 GMT"},"fingerprint":{"sha1":"83:CE:C1:62:82:C2:34:A6:99:3A:82:07:CB:34:5D:91:B3:74:75:DF","sha256":"0F:AA:B6:B1:20:83:89:33:BE:CF:4B:CB:28:0D:0B:EC:E7:21:59:99:65:5F:45:F3:1A:A6:52:08:A0:59:23:C2"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: nowfavourable.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nCookie: uid_id2=59c96f06-abd4-4df9-9597-75d5765d469f:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl20287261=1; slecf14ab1a1d93ca97c0c0da7c3d00b26cf=[4323737]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 21 Dec 2025 14:34:45 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: nowfavourable.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":675,"timings":{"blocked":290,"dns":1,"connect":93,"send":0,"wait":94,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"nowfavourable.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"nowfavourable.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:45.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://es.faponic.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 16 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 414729\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T03:45:50.364076Z","times_seen":713688,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":50,"dns":1,"connect":7,"send":0,"wait":8,"receive":9,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/t/a/tabi-lift-tabi-fit/1000/tabi-lift-tabi-fit_0026.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/t/a/tabi-lift-tabi-fit/1000/tabi-lift-tabi-fit_0026.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18363\r\nlast-modified: Mon, 30 Dec 2024 16:14:11 GMT\r\netag: \"6772c6d3-47bb\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iX6f05qRlj1EUHwAu4%2FfIS2%2FuH%2FQlzmn6z4RxvDa8yeKOMM%2Fi%2F2q0OL%2Fuo9rHM73ZuXPq4jaoK6fOVhEsdzd8v7g0suGc1reEYf3fl8t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a160f3549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18363,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3","md5":"d9343b4433f26fbfb98f7a7602e636db","sha1":"219e5787980d7541c32bf9690935a2ff26a28e22","sha256":"b1fda44d1eeff548ff721d3aed1cd6f41fb14f4eede05039cad06ca83074b008","sha512":"ad33be51b44847fd5f9b7fb1d74f95ec18560759a49b5f5386c58c4e8408e0fe2b530663fc1ffb08a60b651b68d312e466503bbdbba8c08508dd298c5dc99073","ssdeep":"384:cnSn25OS8aXRTbr17HrTmH1cqIp8tDTW9B5B87/:cnSn25OS8Srxm1cqIyTcBE","tlshash":"8582d04364815402e862df3aa747e1a493afda5182ab73ac8718ef885ed235038c462c","first_seen":"2025-12-21T14:35:17.194903Z","last_seen":"2025-12-21T14:35:17.194903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/u/r/urbabyjasmin/1000/urbabyjasmin_0027.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/u/r/urbabyjasmin/1000/urbabyjasmin_0027.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19873\r\nlast-modified: Mon, 30 Dec 2024 15:50:07 GMT\r\netag: \"6772c12f-4da1\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jr9a1wbhnIm0qpsbUwFt3G4qluNq7ZDdlhkNR7xPf611o1ZaPltVYoEnh5jvyLdw1c87SmaarcHpXffuX%2ButE1Un%2FAUL21EmzWgPCabB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a161f4449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19873,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=[*0*], xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 300x300, components 3","md5":"7dd19c828fb9d4e15fb41c15c9ef840d","sha1":"9f4aa3eb2543ad1ed6531c7f4b91f88faa382562","sha256":"ed7d2e2f577f91e5e988094be4f089b84bbf64edfa8240023dc92532711f2798","sha512":"a645e0ba2aaa4e155ae28dbebccf5a94676ac88a393228e21c4acdc86454b291615cd61b48901a3bb8db239530f7760e3c43fcd83eb93dd20ee40dd14ac0d417","ssdeep":"384:5vBJi0flhY00HzexB/7PxVA2nbi0+NS9yiW6CvC0/a6jSegc6b1fn95/22W:PQ0flh7B/7m3FvC0RjSegvFF22W","tlshash":"9592d05bf60847a8c39bdb3233fa0606361267e0cfed0a9a33860309b6f1595b4e5647","first_seen":"2025-12-21T14:35:17.195982Z","last_seen":"2025-12-21T14:35:17.195982Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/-/-/1-bounceonyou/1000/1-bounceonyou_0011.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/-/-/1-bounceonyou/1000/1-bounceonyou_0011.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 93334\r\nlast-modified: Sun, 21 Dec 2025 14:01:07 GMT\r\netag: \"6947fda3-16c96\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V7iKDYJ1%2Bl0Pd79%2F87neO2bdXzFQGjWodUoojwL3PNZJ6qa3yQbMBe6HuhC%2FIJitnWc%2BJDnn8K2v5WfgvOB4nVd98WTwM88a7veCucls\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a163f5049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93334,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3","md5":"e66c273bf35c7f71c6afac46ee202373","sha1":"27fc5c01da4525d3897f25fb1eb53e8ef747c1c7","sha256":"19193f07262a85b661f3a7544353a30bbb06d7535cfc68f94bb942dc8af95658","sha512":"936815491bb65fdcc242bcb1eacf9327453c8d666b2f79d83572fe1a364cdec320d9c819a0186bfb878577f75cb16f683750942c7785d390a6da0f11abb9fdfd","ssdeep":"1536:mJTr0AfVYbvoKisJyhHCmpKxQFRcTayQE1BI7oqtXlbiSY5rJpJyRIxWUP0dZAKZ:chCnBJyhH5sxQLUayJ1B4rbiSWrJj30N","tlshash":"a99302b7731561ccd94f023b358f1776ab60acb9ab0587d906c4c477a8a3358be9d282","first_seen":"2025-12-21T14:35:17.19699Z","last_seen":"2025-12-21T14:35:17.19699Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:40:35 GMT","end":"Tue, 27 Jan 2026 23:40:34 GMT"},"fingerprint":{"sha1":"AA:22:33:AC:0A:FC:0D:31:C5:9F:92:99:20:7A:02:E4:46:E3:08:8C","sha256":"72:5A:79:00:74:D1:90:EF:9A:D3:3F:01:E6:E5:14:1D:41:4F:F2:28:D3:FD:4C:AA:70:DE:D8:BE:C2:15:3F:EE"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 21 Dec 2025 14:34:43 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: adba2858b9158a17cb0aeda964d97a10\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-04T03:45:08.728126Z","times_seen":13158,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":54,"dns":1,"connect":17,"send":0,"wait":24,"receive":18,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pawqwexr.com/puwaqsp/tif/mzoz?lbF0da=STP9Xs\u0026njzbjlx=437616\u0026rnm=6389\u0026nzra=sakphq\u0026xg=_cxpccrwzshxytzrifyziks\u0026iho=3\u0026yx=204773\u0026gds=231862\u0026ia=7873412\u0026yqy=vlfgqq\u0026qkvxp=810479\u0026nfd=045860\u0026miqar=yyvwlh\u0026ww=5","fqdn":"pawqwexr.com","domain":"pawqwexr.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:44.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pawqwexr.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 18:08:43 GMT","end":"Sun, 08 Mar 2026 18:08:42 GMT"},"fingerprint":{"sha1":"E1:F4:E1:BC:5D:73:A9:90:C5:88:50:17:FF:DC:A6:3B:30:8C:FD:F3","sha256":"69:47:6C:3B:BF:22:DD:46:F0:7B:BA:31:D0:33:4D:E5:D4:E7:10:28:B1:B3:0E:BF:4F:93:44:E6:0E:8B:1F:DB"}}},"request":{"raw":"GET /puwaqsp/tif/mzoz?lbF0da=STP9Xs\u0026njzbjlx=437616\u0026rnm=6389\u0026nzra=sakphq\u0026xg=_cxpccrwzshxytzrifyziks\u0026iho=3\u0026yx=204773\u0026gds=231862\u0026ia=7873412\u0026yqy=vlfgqq\u0026qkvxp=810479\u0026nfd=045860\u0026miqar=yyvwlh\u0026ww=5 HTTP/1.1\r\nHost: pawqwexr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Dec 2025 14:34:44 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 24 Jan 2027 14:34:44 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 24 Jan 2027 14:34:44 GMT; Secure; SameSite=None\nUID=25122109340be116cbc21e40cc895090202e; Path=/; Expires=Sun, 24 Jan 2027 14:34:44 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2152,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2152), with no line terminators","md5":"c86d530c53432c140b435fd7095db48e","sha1":"ab3df196e988b138b96d312af9d7b98989d02af5","sha256":"a83775c107e6312c904b188ec216d65a21e9b6f3a9179f6c61491849b8444103","sha512":"e388494aec7650a93e86bec260340907661ca7252b5f83458478e41c436579f9fca913caaf4621e17fe936c18c4a99d650d1fb66c771c2b68453e3b795f1b2f9","ssdeep":"","tlshash":"2d41bb36d524f9a395f9b49a11f97c11440d9b674a37b71f2452da790e3c03d23c2477","first_seen":"2025-12-21T14:35:17.19849Z","last_seen":"2025-12-21T14:35:17.19849Z","times_seen":1,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":51,"dns":1,"connect":17,"send":0,"wait":18,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/m/i/mia-khalifa/5000/mia-khalifa_4197.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/m/i/mia-khalifa/5000/mia-khalifa_4197.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16252\r\nlast-modified: Fri, 27 Dec 2024 12:27:22 GMT\r\netag: \"676e9d2a-3f7c\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MMAB4T3k31EcLjgFR8TbSICFtVrBakZElmYxUR6paSID0FuKuvesPY9rWkMOKDOd8ifUdWVf4Eky4%2FzbrOh1wQt6yoyLNGUfBd71hApi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a15ff3249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16252,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, orientation=[*0*], xresolution=110, yresolution=118, resolutionunit=2, software=ACD Systems Digital Imaging, datetime=2024:12:26 21:48:05], baseline, precision 8, 300x300, components 3","md5":"c710470173811537f03de714790a5b12","sha1":"3f5fd9e5c5fd70edb0949f291b64f545c6a536e7","sha256":"fba1a5ff365f2c176329218a44a61d866e7a445c9de5b2b90cd78c8b22546ae0","sha512":"b70e08faf3b69d6644f4260ad4a0ea416cd4b21d4a160af760fc80d08836ce508368b3635e957a84ef56bf06b20d2b3ffd3cfe80fc6a0e10d8506b94e9929420","ssdeep":"384:HYDbA2smJ5PJ5VukNuj8wE6EEisMQvRFAyPJGF1SQcYLC0oX9W:HOb5p5VLQjH9iSv/pJQSk","tlshash":"3572b0d5f916f801da46e3340a7673415e8694e28b0257dd67c8b8a87d52c670bf03ab","first_seen":"2025-11-22T17:12:07.752513Z","last_seen":"2025-12-21T14:35:17.199642Z","times_seen":3,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/n/a/nade-nasty/1000/nade-nasty_0267.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/n/a/nade-nasty/1000/nade-nasty_0267.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 305518\r\nlast-modified: Sun, 21 Dec 2025 14:21:05 GMT\r\netag: \"69480251-4a96e\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FSCGFNQ0o1dYqpK0RXsIdBzHDS9rJz%2BSQ%2FVhIG%2F2MeSES7MaKM%2Bth5gu%2BLGqanhPZcrp%2F5QFLN64y5vXiYvGbDOkj6bPC%2BZFAr9ogdHB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a160f3e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":305518,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc62.15.100\", baseline, precision 8, 1920x1013, components 3","md5":"d4ab3fc75895b02611701c90fd805830","sha1":"d6f3da624622728a209b570fefc2e109183ab593","sha256":"424d3e7ad618249d53f2f38f85a8990e9814a150ae6114910c0c22d584555205","sha512":"9b7c23b60118d43dd30e3dde81de5601042ded8aed89d0979740d465ffac3112ac4c825f12f6b687decccedf0ddfbb8be8307d555dec0b2e5420cbf7590ce36e","ssdeep":"6144:PqJn+7WgOzTRJbs9saUnusSVPYJQFwdYr9PDsXWri7nvi2jFe7nFUhWZxeyFHjU:PinwWgYREhhstezrhsWrCnviYeLUow","tlshash":"ab54232628f9f6cb33e98350e145a867e4331379f62278693f13ea0446a5f2719f2f54","first_seen":"2025-12-21T14:35:17.201016Z","last_seen":"2025-12-21T14:35:17.201016Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=59c96f06-abd4-4df9-9597-75d5765d469f\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=f14ab1a1d93ca97c0c0da7c3d00b26cf\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=14","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:44.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 22:02:45 GMT","end":"Tue, 27 Jan 2026 22:02:44 GMT"},"fingerprint":{"sha1":"F7:0F:08:42:86:24:7C:1B:49:6E:E0:01:4D:B6:85:C3:51:09:E9:4B","sha256":"57:4B:E8:D9:F8:CD:FB:C3:56:16:42:88:21:1B:6A:B3:83:F2:4E:B5:2C:AC:2C:6B:0E:46:6B:15:51:D1:3D:17"}}},"request":{"raw":"GET /pxf.gif?uuid=59c96f06-abd4-4df9-9597-75d5765d469f\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=f14ab1a1d93ca97c0c0da7c3d00b26cf\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=14 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 21 Dec 2025 14:34:44 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 704f0de1d5fe6c40e9e6bbba611ba5f0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":658,"timings":{"blocked":282,"dns":1,"connect":91,"send":0,"wait":94,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/e7/1b/13/e71b13312082539e211f40b180b929f1/1680663431.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:44.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /si/e7/1b/13/e71b13312082539e211f40b180b929f1/1680663431.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 14:34:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 70608\r\nserver: nginx/1.21.6\r\nlast-modified: Wed, 05 Apr 2023 02:57:19 GMT\r\netag: \"642ce38f-113d0\"\r\nexpires: Tue, 23 Dec 2025 14:34:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70608,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"61b6bebe0cb42acfc8731bdca04aa71a","sha1":"d396876682997f10b3bf721df1204677e3b5b0be","sha256":"3bebac68fde7ea059ec5422cb3162c3765ff43c7263e9be6e6b324b73ad0e6f2","sha512":"6883904fb678ea57cbedbd3753c93f5e8f73a79b8abf79fefed3ca2ea0d3eb635c9843419cfda66a561addaed6c68d67151ed51270d31ed3e597e67215173e5a","ssdeep":"1536:xK57wBBmhOG4aC7NV3fwtbCj9Q4tsd8aB0oqaoPHmqrfTwHMX:xK1wBgNZaNV34Cj9Q4Sd5aosPd/wsX","tlshash":"0c63010ed38967b86ec02b9fb3097f408b2473acc719c0d768b059b7a346c1961b7d5a","first_seen":"2023-06-24T15:48:47Z","last_seen":"2026-04-02T19:41:29.706457Z","times_seen":836,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":46,"dns":0,"connect":19,"send":0,"wait":23,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fjs%2Fscript.js\u0026l=962\u0026fd=13","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:45.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 00:22:29 GMT","end":"Wed, 28 Jan 2026 00:22:28 GMT"},"fingerprint":{"sha1":"AA:F8:F2:CD:8F:90:E0:34:26:52:5F:28:83:02:25:29:22:DE:BB:79","sha256":"E5:C6:96:84:40:94:64:CB:57:23:67:51:0E:0F:27:85:86:63:98:09:63:88:91:67:0A:01:DC:33:5A:53:16:A6"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fjs%2Fscript.js\u0026l=962\u0026fd=13 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 21 Dec 2025 14:34:45 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":664,"timings":{"blocked":285,"dns":2,"connect":92,"send":0,"wait":94,"receive":1,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/jQuery/jquery-3.5.1.min.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /js/jQuery/jquery-3.5.1.min.js HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Jan 2021 10:55:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6013e9aa-15d86\"\r\nexpires: Thu, 25 Dec 2025 10:06:07 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 275436\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cRbiaHmvbvfom2C0D9y%2FSTgxIfx2cgF4KwIcKVxaYhRAGT1iXHb09x43AlBdzSaUHcTmT1cGJn5yXtUal7KJZMfPbRh70OP3PB1uoGp4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b181a145ed149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89478,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"b61aa6e2d68d21b3546b5b418bf0e9c3","sha1":"9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7","sha256":"f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b","sha512":"5882735d9a0239c5c63c5c87b81618e3c8dc09d7d743c3444c535b9547b9b65defa509d7804552c581cb84b61dd1225e2add5dca6b120868ec201fa979504f4b","ssdeep":"1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvaks:/Yh8eip3huuf6IidlrvakdtQ47GK8","tlshash":"3193f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-04-04T02:43:07.585477Z","times_seen":14792,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/svg-loader.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /js/svg-loader.js HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Jan 2021 10:55:30 GMT\r\nvary: Accept-Encoding\r\netag: \"6013e9a2-107a1\"\r\nexpires: Sun, 28 Dec 2025 14:36:45 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GsyjOp%2Bu3wD7Fe7fr4SgUFvhMebNBSXsXtxED1imaaqPVzeS%2FHbzCeDJQznvF59qah0ijC%2B4O3gUwQzU6Ru73sq%2F61TjRSRrBqUaSQvu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b181a147ee349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67489,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65476)","md5":"e6dd56cfa45441cde15a85de5b04eaf3","sha1":"2513ffed24bf0758a67cab782c95cf32e4f8da97","sha256":"798d2917fff8175470a16b8436e49f054d6483e47a2d6f9d850e5a63fb6c036d","sha512":"3e0a43a526850a06d351c6bc509fe1a05b94c45c37570b62bfa0245798655aad6c9fb6b58dd8ed9b1c32070ba2715c5af62205c0136aa4aead85fe2ef434033b","ssdeep":"768:5s+GvCYw9FVvL4BFS10sckNNspCnm+8rF7JnWLGsrTkZYHa+SS6jUvFISc7OGA0:6zJ6FaGWkN2YmDFZJWkZYH4S6jn7OG5","tlshash":"3263b5e477b0e07c555b07ee8f3e48cc2a2e76be79c6407271aded94a7424b8d943920","first_seen":"2023-05-09T05:59:38Z","last_seen":"2026-04-03T06:43:40.723424Z","times_seen":265,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/img/top-header3.webp","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /img/top-header3.webp HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/css/main.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6422\r\nlast-modified: Fri, 29 Jan 2021 10:55:36 GMT\r\netag: \"6013e9a8-1916\"\r\nexpires: Tue, 23 Dec 2025 17:34:19 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 421344\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=siCfJkxS7TCUt8GH6QF5Kaxw7XBCehZ60HcIZ00yQPSv0Z5FYMuqmbPtgW3WYTl3Jope6dwgoTcvCnXuLdpGcn7YVNnVUfylW1l%2FiNEn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a153f0f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6422,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"09eb800714219968308be8acd5388e9b","sha1":"a7ef93607cb816e73647dea8c9e8139c2ce7eb4d","sha256":"819e1d42aa0d62b2ec96dd1fa22655cbc15d10b3d8cc6d97804aa7c56347f51d","sha512":"87da0e2462aecde7a65f94947fc9148f99a3abe3d314b532f78876b0267864489a5c5cab3ea9a82ebf359856a32592f1f30d0052bb1f1327d9e77a465f4e0ff7","ssdeep":"192:Laqa4Vvbl5gObsMGS0vHJn4rJLDyVZUGQ:Laqa4VbsVBcJLDyVZ","tlshash":"40d14c83eea72c286ff7101a318b9852f14660ed93b95b2b0dda174eec1f038e575875","first_seen":"2023-09-16T04:05:13Z","last_seen":"2026-04-01T05:16:19.781029Z","times_seen":36,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/j/e/jenna-ortega/3000/jenna-ortega_2608.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/j/e/jenna-ortega/3000/jenna-ortega_2608.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13228\r\nlast-modified: Fri, 27 Dec 2024 21:21:52 GMT\r\netag: \"676f1a70-33ac\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xPiKS9tODOlL7%2Fk9P3JOnVKrqMFZ%2FoXeza9zN8xBm%2Bcmv3mBYf1%2BCotm41ly1JlxXa76peXX%2BTB88EMFmS4gEAF3sjxFxe9%2B%2BHLfvtLJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a15ff3049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13228,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 300x300, components 3","md5":"59ec6aaffc7b1ddeeb5a998cb6a21b47","sha1":"fafde090c7b76a932574e17da9ec586b11442b10","sha256":"aff4b63340d9d22d6e39f4420f6e8b60cb944c2b81f974538998dc6f87f1a9df","sha512":"dbd3e769bb3b5174de5ccd04ea021fdae29cd2f0fcb08302ff1f3d1a1a710f6a1c41f155063e8c241521bac78d9f3eb568a3e94a0692362f66b71d92eb799bbf","ssdeep":"384:K79pJ4tiUiRD/Yp7xFyGFiTGDtcL63upyN92V:OWwmpNhiSDSmup2W","tlshash":"8d52c060ef82fcd3eb27d679ce216510e0eb6b86d765881fb5be44a2412000c296637b","first_seen":"2025-12-21T14:35:17.204279Z","last_seen":"2025-12-21T14:35:17.204279Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/w/o/wonderedison/1000/wonderedison_0004.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/w/o/wonderedison/1000/wonderedison_0004.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 76739\r\nlast-modified: Sun, 21 Dec 2025 14:01:04 GMT\r\netag: \"6947fda0-12bc3\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=edp14WbsV4EZCADNKspE2oYI%2FMcJDUlt6TA8boO76z6qOBqRRP6DC8qwADrB%2BxMDgk9u1JFn6h9XF%2FDhOz6g33XFIg0TtrcbgkvxLY5J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a163f5249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76739,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, description=Screenshot, orientation=[*0*], xresolution=110, yresolution=118, resolutionunit=2, datetime=2025:12:19 21:59:01], baseline, precision 8, 743x1080, components 3","md5":"bc583b167d9d1769068c5e92119dc4fb","sha1":"a6cc9eadb9b35f6a194d2014b96677c09b274486","sha256":"d323a9e75aa329f3b96a0d1029d5b9a3bc833179aa5315233bc942b47583e6ae","sha512":"a89180eb87f087bb35de802a31d2aa7954aa8ef7444dae03a426d5cfe06e9028e5dd9c06282a2ed70fb83951dcddc560cbd38a2deb9faa7b8c52789eb892dded","ssdeep":"1536:9nU5agNKgHSoSqxTbchYTQMf0ddEcaao+CDm14qKNwo8y3MjURsYIJ:m5agNKgHSDqFZ8czhy/iwo3M6sYIJ","tlshash":"4873020f07e76d92cf6cb0bcca9315134ae2d43153e8190daaa4561d777cabacf112b6","first_seen":"2025-12-21T14:35:17.205382Z","last_seen":"2025-12-21T14:35:17.205382Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css\u0026l=3355\u0026fd=33","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:44.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 00:22:29 GMT","end":"Wed, 28 Jan 2026 00:22:28 GMT"},"fingerprint":{"sha1":"AA:F8:F2:CD:8F:90:E0:34:26:52:5F:28:83:02:25:29:22:DE:BB:79","sha256":"E5:C6:96:84:40:94:64:CB:57:23:67:51:0E:0F:27:85:86:63:98:09:63:88:91:67:0A:01:DC:33:5A:53:16:A6"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css\u0026l=3355\u0026fd=33 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 21 Dec 2025 14:34:45 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":662,"timings":{"blocked":283,"dns":1,"connect":92,"send":0,"wait":95,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/bootstrap/dist/css/bootstrap.css","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /bootstrap/dist/css/bootstrap.css HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 29 Jan 2021 10:55:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6013e9aa-21e0e\"\r\nexpires: Thu, 25 Dec 2025 10:06:07 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 275436\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zz0FWsRYQUj9Smmg9n2P1GZlV29gOVt6BIUsPJE69qmbXB7VvZmcZAX4ynNciOkV5%2BlQZSoCCos8DQqfF7GkBrwAPXx5xlsOtPfcKgUE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b181a145ed349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138766,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65320)","md5":"1c379b99d403d49c353316fd1f2f6131","sha1":"3726a1c6243e9be12b57c150deadc4cbf24fd99a","sha256":"47034746abc09f048f25ee1460f1048632d7b32c6c4522e8b6adfec1e5c13a89","sha512":"338ad19c54011540656ffdf6d2eaa44960ed4e0590c224609820b8514755d8af9f1b05f1184a5310a5ff6ddd4eaf66ac7615d038122d1d236ed7b9d302076dab","ssdeep":"1536:smEXTyJA7+lDpsEBpO0cuJYRZ3V0WrQV1pz600I4rH:smEXTzFQV1pz600I4rH","tlshash":"47d3a3dbf581241dd5a7c21990d1bffc093f9a45e3125aabb0177bb84b8a2c70963e4c","first_seen":"2023-05-09T05:59:38Z","last_seen":"2026-04-03T06:43:40.721048Z","times_seen":255,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0KVPEKPNG7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-0KVPEKPNG7 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\nexpires: Sun, 21 Dec 2025 14:34:43 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 138353\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":410543,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"0340d3f86b8ff598f2370190e1536dfb","sha1":"994ef1efdcd5106994d17e507c7e69856a100374","sha256":"1768d5b3fd58587c1a6758a614bf44a9389dc5cbd7731831d867eacb52c26cbd","sha512":"d9d67491583993c5347046f6d90c8d7ae80db4f548243c669f607a3ffc8c80d43dc026e5dac19d35f4013592e672a978e91373d6070874504fd62f4103213cfc","ssdeep":"6144:4Ie7mZ2bulKY/1u99xHDmHYmyBFzvnsNu6JWoNPad4FpC1PF:5Cpbu7/1mbrnsRWbMpA","tlshash":"0f9419ce73c674668396f078503f118ba57b29a2b45cc895f189cce42e74a9a4237f7c","first_seen":"2025-12-21T14:35:17.206824Z","last_seen":"2025-12-21T14:35:17.206824Z","times_seen":1,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":103,"dns":0,"connect":9,"send":0,"wait":23,"receive":22,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nowfavourable.com/f1/4a/b1/f14ab1a1d93ca97c0c0da7c3d00b26cf.js","fqdn":"nowfavourable.com","domain":"nowfavourable.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"nowfavourable.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 08:06:05 GMT","end":"Sat, 31 Jan 2026 08:06:04 GMT"},"fingerprint":{"sha1":"83:CE:C1:62:82:C2:34:A6:99:3A:82:07:CB:34:5D:91:B3:74:75:DF","sha256":"0F:AA:B6:B1:20:83:89:33:BE:CF:4B:CB:28:0D:0B:EC:E7:21:59:99:65:5F:45:F3:1A:A6:52:08:A0:59:23:C2"}}},"request":{"raw":"GET /f1/4a/b1/f14ab1a1d93ca97c0c0da7c3d00b26cf.js HTTP/1.1\r\nHost: nowfavourable.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 21 Dec 2025 14:34:43 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 30273\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: nowfavourable.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: bbb0c7549f8f932b14cc50ec4f7eead0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78896,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"972473bd655d3d7399b55a52f8081141","sha1":"382197911c6dfbd309cf58659633a845b1f9d638","sha256":"48018e170a66a014438ef8dd9cf8c2609059e0c59b5d76f5b26afb3b7b0c88dc","sha512":"5977b4910654c880fdb41617e8329ec4a83cde3fb4c17cfb5b8f0ce9ca355f6e676c70c171404ba80a9ab8ce2a19ea91a0d33f9ed305d5d16fa2e20d076505f1","ssdeep":"1536:t9yUBg8XFOUGZ7AVTQsz3WArOwlNyBv77NzxpQ2jFFm+djI80:t3B91cGpUhxpJm0If","tlshash":"e27309487f42b16b5352a073627fd047f0256f1261ecd498d123e6a86f6c33af636b98","first_seen":"2025-12-21T14:35:17.207712Z","last_seen":"2025-12-21T14:35:17.207712Z","times_seen":1,"resource_available":true,"data":null}},"time_used":780,"timings":{"blocked":281,"dns":16,"connect":91,"send":0,"wait":104,"receive":97,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"nowfavourable.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"nowfavourable.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/d/i/digital-playground-and-adult-movies-dvd/1000/digital-playground-and-adult-movies-dvd_0021.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/d/i/digital-playground-and-adult-movies-dvd/1000/digital-playground-and-adult-movies-dvd_0021.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36063\r\nlast-modified: Mon, 30 Dec 2024 16:11:09 GMT\r\netag: \"6772c61d-8cdf\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=quxy58BnUu0hYFMEntdfTPZ1wlnsKRVkK2LtBsPfFcuKzY2rKl6VLJhKO7xReQd3OCCLsAZlXyWmmCETRL0uhqIMcSV2ZSuISy%2FKtuKg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a160f3d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36063,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3","md5":"804b7e354e2f825631b4cec569c6bb29","sha1":"c1d2ca08f037705d9b4a782dddad2721241a4756","sha256":"c18860b7f63b906cbe91bdcade1cc439a8063f36d40a5274457921ed36d22f4a","sha512":"094d1da87ec5c85f0c124f4f282bcbcef795dce4b7a740d9efe58143730d2a7aa28705a1051cbabc1ed41d09b78a4981436aaffd836625dfa8592863b44fba7a","ssdeep":"768:xBP2KdX5kqVwfZZ0lTEWUugnm96EFgOw9ydiS/Gq24bc6CckbfTKnS6:xBeS5N2hZ0lTKm96bOLiSXZb1nS6","tlshash":"83f2f2d519f96f846810d8740cb91e78aa8f0316fb5f0b7f37d2150a050a7a8ef21d6d","first_seen":"2025-12-21T14:35:17.208797Z","last_seen":"2025-12-21T14:35:17.208797Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/-/-/1-bounceonyou/1000/1-bounceonyou_0005.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/-/-/1-bounceonyou/1000/1-bounceonyou_0005.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17059\r\nlast-modified: Sun, 16 Nov 2025 15:02:01 GMT\r\netag: \"6919e769-42a3\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S8j7k2OsGjawdY3sALjqokrKdWn08m%2BfBkEUc7q2N%2F0du3Cey0fapmFR%2BMVU6%2BzThncR%2BeXFDrpUlO6%2Fj4fO69n1ikdSWgB%2BCCx1J%2Fb5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a163f5149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17059,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3","md5":"c981a598dee412ec150486e276baa85c","sha1":"5db15f548cab7ef22da5836e81c629efffcea337","sha256":"a0b569fce9f41044970b85fc5cde9b96010618d0cc4a729ff64af2a6d0721528","sha512":"a95e807d7f6f7b49f80a4702a172c28e1feb369a255f8fd3cc7d5eebfaaf4e8c923a0737168837ceaafcfcb5a54bad1340ef32c9b062be58ae1dc10d001e1d4d","ssdeep":"384:9wXqwWOF1wzQ01lt+lizMwpijEd32RCLYBcH9cgtNEU53fwfg50943woI4:CXgOFKQzmh0od32BBcdcgYU537gswt4","tlshash":"4e72c0e0b1f57ffcc200fc706430b6ddaba6e8222962851e61d48b7e46594b5b93f11b","first_seen":"2025-12-21T14:35:17.209853Z","last_seen":"2025-12-21T14:35:17.209853Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adv.clickadu.net/solid.gif?z=2006640\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.655-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=9SR\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=zqtK5nNaHR0cHM6Ly9lcy5mYXBvbmljLmNvbS8\u0026afid=8841482329107968\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=957\u0026rlp=%5B0%2C21%2C20%2C15%2C818%2C1697%2C691%2C1605%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"adv.clickadu.net","domain":"clickadu.net","tld":"net"},"ip":{"addr":"104.19.231.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickadu.net","organization":"Clickadu S.R.O."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Sun, 06 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:FB:5A:E6:98:79:0F:9A:D1:B2:26:EB:74:BF:6A:E9:83:8D:DC:7E","sha256":"D5:8B:5E:29:15:EC:CA:EB:54:CC:FD:C6:3A:8C:89:19:A0:43:85:BF:18:BE:D9:49:16:1D:5C:31:4A:58:94:1C"}}},"request":{"raw":"POST /solid.gif?z=2006640\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.655-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=9SR\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=zqtK5nNaHR0cHM6Ly9lcy5mYXBvbmljLmNvbS8\u0026afid=8841482329107968\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=957\u0026rlp=%5B0%2C21%2C20%2C15%2C818%2C1697%2C691%2C1605%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: adv.clickadu.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://es.faponic.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ncf-ray: 9b181a189e7bb4ff-OSL\r\nx-route-id: stats.tag.loaded\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 24 Jan 2027 14:34:43 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 24 Jan 2027 14:34:43 GMT; Secure; SameSite=None\nUID=25122109346510b24cfbf04a9690b80c7dff; Path=/; Expires=Sun, 24 Jan 2027 14:34:43 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-04-04T01:02:40.97166Z","times_seen":20424,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/vpn/classic-push/small/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:44.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/js/jquery.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Dec 2025 14:34:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 114675\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cJIlorAHw8iu0qTPIyhK8hsjuyTyWM0jZjdbCT6ox9ilhO0OgqpWliEwmXjOZQP0VKv2rc8rd6UlXU%2FkWcNAvefeel3k8xQuZXBLNep%2F\"}]}\r\netag: W/\"65aa84fe-1499c\"\r\ncontent-encoding: br\r\ncf-ray: 9b181a1f3833b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84380,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"4a356126b9573eb7bd1e9a7494737410","sha1":"8258d046f17dd3c15a5d3984e1868b7b5d1db329","sha256":"22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5","sha512":"005c3102459dbf145df6a858629d6a6de4598fafe24cd989d86170731b0c3b3c304da470cf66bfd935f6db911b723df0857b5ed561906f7f1c5c4e63ed9430de","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrZ:++414Jiz6fh6lTqya98HrZ","tlshash":"dc83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-04T03:05:57.56265Z","times_seen":15938,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/libs/ajax-pagination.min.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /js/libs/ajax-pagination.min.js HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Jan 2021 10:55:38 GMT\r\nvary: Accept-Encoding\r\netag: \"6013e9aa-70a\"\r\nexpires: Sat, 27 Dec 2025 06:55:49 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 114055\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s2n0vfVrSVDuxHApnnuypyqgZn6ey9V0CW8af%2FbNa%2BQ02v0y%2BE%2F65Czti3sZP2Q9bK0qHb30JGpzjO39HUWIVCWqCVB1irhEdJX1gSB2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b181a146edd49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1802,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"fdbf92deea1627c008af9ea56de4a48d","sha1":"73915cb90a9acb72144cd9b2943cccae19b6db41","sha256":"b35e2a2f862732d940f26ecf8a436b8d9e6b63a0097a41edb6b72f1eaa7d6164","sha512":"23dac5387a34099201c7e5ef659d8c7bcad3d90d92c870ac0dac3664ff4b18a475957334644307fcaa9dca3738e8cccbeaf35b6604949919b98891e1eb3ec941","ssdeep":"","tlshash":"ec31acc4bf0f9869aa3b331c9c3b8448ef2cd03391456536ba5da080dfb4108d25a99f","first_seen":"2023-05-09T05:59:37Z","last_seen":"2026-04-03T06:43:40.718153Z","times_seen":265,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/img/assets/avatar1.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /img/assets/avatar1.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12076\r\nlast-modified: Thu, 14 Apr 2022 10:47:58 GMT\r\netag: \"6257fbde-2f2c\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ja6Cjw5DVrznG6POfInuWw6OyMGXa%2FBOWVooyCrsgoFJKR%2FrNjVjheMoNwzrnNtkd%2FECJqmfPZ0mALh9kEndO2%2Bu05n9FaxdUVxGahJu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a160f3749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12076,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"94272e98c36696e37edb7f679168d777","sha1":"83308f91e30be316247d8322df141b0ffe9c2609","sha256":"41fcb08eadd72cbe29594c8f3b9f3610abf5ee75ab78a473c03314b48180360b","sha512":"f9eb028e5e779ae6be9ec530cfefb46b01c4d0f477ae48a25740bd34be5a403f5a036f4ddedd45d666b56bc132e448fed7f9ba012ee88d6c805bca8ed99e2e78","ssdeep":"192:LCR00OoYJ6DQe8iPMmksx0L3qNvZgj1Y2eWGpwanrPcqDLj0I/6I1XU5wwGIo15q:LTUq9e3Umk0i3wvZgjC25UrPc+nKIu2Q","tlshash":"f342af970a8f614bba61aa3592df1c7fc482f81967e17bb1c950f178b436f8062d0129","first_seen":"2023-09-18T20:50:16Z","last_seen":"2026-04-01T05:16:19.766429Z","times_seen":41,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nowfavourable.com/ren.gif?sid=H4sIAAAAAAAC_1RSz2skRRit3sSTgj_xtjCHPSiaSfdMz0zaPSwbd6PRmIRsJAdP1VXdkzLVVW1V9_RkvAQjsuDB8aa3zptkg-4i-gcIy8RbUHAEIYfk4p8gLOhBZCYD0Xf4vvf168P73lefHeQXpI6cnq2_p3tCSjrfqLqVV7aE4rqwldXNiudW3ZuVLaGa_s1Kd1xM5w2v7lfdVytvRWxHz9dcz3U916ssCRPFujs_USHSR4FXDdyqX6t6DR9d8__Z5g4sdcA7F-QFCD569o_4Awg2hEq-vxPZnUynr99NckkzbdDhx--rHaULheSKxsZBrI6nf0PbESFfXYNWx9MNoDuH4w0QihG59vI5QnU8tYmwc3TpNJSIFEL-NIrOEJEcQtAhmN6H4L8SgHGsrkElD1a1KejupUrH6ojMPvkTohiR2fOXoJLvFqXoVu5pmWdCK4tuXEJ0hxDtIdL8BFnPgShOwLJPIPgvZP7JClRyuGalhuBnNxoBC5qx25yjIffnfB4Hc0EjaM21GrzRaja43wziSUQiHoLaGeTWQS4c5LGDPHWQ8LOK7y74zKP1Zhxw1nJ96vs8Ct1goea6NGAt5GzsvY8s7YPJPpjZQ2r2sCP6MPlj2O0SljuwGUGHlygigsISFJSgEARFRlB0yiMubc2WD7i0eehNe23a6-VAZ-0DeqSzdqQIqOnD8PJQpB_ZfbBsZtCLLR_ocaFhVg5oyMuD9II8P47VaXxxHTvRWSX2fBp61ONBndGgxVzmctpide66Ya3JYlhRQthroNZBT4zIa-f_IBUjMvv3FkJ6AitPwMRzoPl10KIE3S7RUw9jmmolWJXpBFyXSLNZZLvOgbwgLw42NhcfT457-6-vEbHTW7_HE4CZEqkp8aH4iaAt7w82dEEON3RhyQ9raSYS0aPjw9_LaBbNfPtutFtow5fv2P43t9lYGNNHm5HNVqjiQrUtebgoOI_MkjYsIj8u260oXM_t9mJuVJ6urL-5tJykJrJWaDUEFSPifPwzmBiRZ965O3nUN5Y_B0v3YNNTMgWsJghTB1IQyOjqOw1L2P_M4RU_sPfRNg5otg-VlOiYEh1Zgso-bD4zyFJzeuu3-gQIpTMIpXEOQ2nkl5c5WXFWadTCenNhoRnFTR7Xeb1W50HDjQKfBk0_8BvI7Ei8_dSn_wYAAP__USMo2HcEAAA=","fqdn":"nowfavourable.com","domain":"nowfavourable.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:44.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"nowfavourable.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 08:06:05 GMT","end":"Sat, 31 Jan 2026 08:06:04 GMT"},"fingerprint":{"sha1":"83:CE:C1:62:82:C2:34:A6:99:3A:82:07:CB:34:5D:91:B3:74:75:DF","sha256":"0F:AA:B6:B1:20:83:89:33:BE:CF:4B:CB:28:0D:0B:EC:E7:21:59:99:65:5F:45:F3:1A:A6:52:08:A0:59:23:C2"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSz2skRRit3sSTgj_xtjCHPSiaSfdMz0zaPSwbd6PRmIRsJAdP1VXdkzLVVW1V9_RkvAQjsuDB8aa3zptkg-4i-gcIy8RbUHAEIYfk4p8gLOhBZCYD0Xf4vvf168P73lefHeQXpI6cnq2_p3tCSjrfqLqVV7aE4rqwldXNiudW3ZuVLaGa_s1Kd1xM5w2v7lfdVytvRWxHz9dcz3U916ssCRPFujs_USHSR4FXDdyqX6t6DR9d8__Z5g4sdcA7F-QFCD569o_4Awg2hEq-vxPZnUynr99NckkzbdDhx--rHaULheSKxsZBrI6nf0PbESFfXYNWx9MNoDuH4w0QihG59vI5QnU8tYmwc3TpNJSIFEL-NIrOEJEcQtAhmN6H4L8SgHGsrkElD1a1KejupUrH6ojMPvkTohiR2fOXoJLvFqXoVu5pmWdCK4tuXEJ0hxDtIdL8BFnPgShOwLJPIPgvZP7JClRyuGalhuBnNxoBC5qx25yjIffnfB4Hc0EjaM21GrzRaja43wziSUQiHoLaGeTWQS4c5LGDPHWQ8LOK7y74zKP1Zhxw1nJ96vs8Ct1goea6NGAt5GzsvY8s7YPJPpjZQ2r2sCP6MPlj2O0SljuwGUGHlygigsISFJSgEARFRlB0yiMubc2WD7i0eehNe23a6-VAZ-0DeqSzdqQIqOnD8PJQpB_ZfbBsZtCLLR_ocaFhVg5oyMuD9II8P47VaXxxHTvRWSX2fBp61ONBndGgxVzmctpide66Ya3JYlhRQthroNZBT4zIa-f_IBUjMvv3FkJ6AitPwMRzoPl10KIE3S7RUw9jmmolWJXpBFyXSLNZZLvOgbwgLw42NhcfT457-6-vEbHTW7_HE4CZEqkp8aH4iaAt7w82dEEON3RhyQ9raSYS0aPjw9_LaBbNfPtutFtow5fv2P43t9lYGNNHm5HNVqjiQrUtebgoOI_MkjYsIj8u260oXM_t9mJuVJ6urL-5tJykJrJWaDUEFSPifPwzmBiRZ965O3nUN5Y_B0v3YNNTMgWsJghTB1IQyOjqOw1L2P_M4RU_sPfRNg5otg-VlOiYEh1Zgso-bD4zyFJzeuu3-gQIpTMIpXEOQ2nkl5c5WXFWadTCenNhoRnFTR7Xeb1W50HDjQKfBk0_8BvI7Ei8_dSn_wYAAP__USMo2HcEAAA= HTTP/1.1\r\nHost: nowfavourable.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nCookie: uid_id2=59c96f06-abd4-4df9-9597-75d5765d469f:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl20287261=1; slecf14ab1a1d93ca97c0c0da7c3d00b26cf=[4323737]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 21 Dec 2025 14:34:44 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: nowfavourable.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 85fc672e99965c4a70e1e447224cd61a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"nowfavourable.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"nowfavourable.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/libs/selectize.min.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /js/libs/selectize.min.js HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Jan 2021 10:55:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6013e9aa-b056\"\r\nexpires: Mon, 22 Dec 2025 10:25:03 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 533498\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tYioHbpJv75fDp%2FESKDGgjA3wdKDtjfENssnzg3It77vDiZ14%2FZuqWEOYsQVNw7VGxmiGKrpzqt3YnyGT4Efwq16EW1XCIoOyr3Tr2St\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b181a145edb49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45142,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32007), with CRLF line terminators","md5":"81ed3bf9f8a8b2634e320e6ae7f55764","sha1":"d180303c512b0dbe4902cf999e680b0c689f8f9c","sha256":"fd2deb6a99103da704ab1e3f23f8e916255b665e453de84682855abde3558182","sha512":"243708bff27d52cb12a79d23427e004e106819757c43b8366e766346ee70ce583ab84b9b5f0c811d4d8fc96bc57a6bd48ec4ce7708aadcb7b62b1d966ee02049","ssdeep":"768:nuQn6U0yjDRLpAmfx2tsCh9vX2o/tHRCBurCCXRbszwU3IzROZYW1zArLDjN0R86:nu6EyBLm/rDnTUfV","tlshash":"f013e78472d1326291f730f459fb4506b13aa99ae00994b2f278d8cdbe78d449137f7e","first_seen":"2023-05-09T05:59:38Z","last_seen":"2026-04-03T06:43:40.722847Z","times_seen":268,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/c/l/cloedeangelis/1000/cloedeangelis_0020.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/c/l/cloedeangelis/1000/cloedeangelis_0020.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19290\r\nlast-modified: Mon, 30 Dec 2024 15:30:17 GMT\r\netag: \"6772bc89-4b5a\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YtQgXZOIyuhR9Xj3Sgmp66tqsJT2P0JUDRsAy%2BfERs9NtLlRL4JPbvRcvbFbvOe9JQ2CZGAi1uhuvSUqL%2FTVJ9JgoYiBhbBzZrCsqkPT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a15ff2849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19290,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3","md5":"c1a1e6ef73a88ac213835c81879d4221","sha1":"c2a71af3a629f82719385421e06e41e3e55d0b2f","sha256":"33b4d2b291f57b0956a10bedd6450830a426670368c7255288e850b835720b53","sha512":"0afb1ed7ee8f7d131fb480d7d0b0f5d9d61c9e9dc9e11d68c00af1aff8d25f6449889cd769d5b98ca50b1968ee7b9ee5bdc8bc0d36cf85e8153a4a8e35f85951","ssdeep":"384:8D4Fbqjlus08i3hfHR0tpMGSRD+CTpJ5fhv33BLcrULKweolUmxo5c5+:PmJuXQpCpJvhcsKqlBm5co","tlshash":"2582d008f0125f96f9555aba65f0207c7227ce17596eebfe310bb25a3e124511f43033","first_seen":"2025-12-21T14:35:17.214686Z","last_seen":"2025-12-21T14:35:17.214686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/x/e/xesfinge/1000/xesfinge_0005.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/x/e/xesfinge/1000/xesfinge_0005.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 120055\r\nlast-modified: Sun, 21 Dec 2025 14:21:27 GMT\r\netag: \"69480267-1d4f7\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=35WXAlPWkMigLRy4sbgt8rIGkibK0MdI8FwXC1%2BNTATb5NSm1QInQGng6ZibnKbVA1guUb2%2FBp4T6QrjjO1MX3i0jEH7UV2s7KUlgeMo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a160f3649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120055,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, baseline, precision 8, 720x1080, components 3","md5":"a38ddfa840ac5547aa60d13cc781d4fe","sha1":"af1fe972c91700fe3f23192a9b451e4fb6868bc0","sha256":"7123e2b1222a93be1f2600d1f560c1276f1872b03a879bf38ea75fc2962536d2","sha512":"0e92557641ec2b8d8b825a41e9f1d2aaef77457cf4b33d71be66dabdb12f9cfbd23c019560868150d07c9336d9a85d9df405dba68b7bacdd18b4598d0beddf1b","ssdeep":"3072:pNWV3QRflbJYFswDFS6aH5ExP+w+9LfPgq9I0X:pNWV3uLwRYHWxP+w+LfPthX","tlshash":"e6c3133e8b49dc40d259fb5289ea270c18770b01502f0ecdea5632e82f9971ee9746f7","first_seen":"2025-12-21T14:35:17.215782Z","last_seen":"2025-12-21T14:35:17.215782Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/a/n/anna-nigriv/1000/anna-nigriv_0009.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/a/n/anna-nigriv/1000/anna-nigriv_0009.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12988\r\nlast-modified: Thu, 27 Feb 2025 22:35:52 GMT\r\netag: \"67c0e8c8-32bc\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q1KInjiystD9m%2FvJm7SH13gjn%2BgMAFyXmhAPr%2B17dNK96BOMLDu7cgrAdPKU%2Fb%2Fa9du1bu599akMRKkjLhdMqChCo2xvDtmpc4Rtp3cH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a162f4849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12988,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=[*0*], xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 300x300, components 3","md5":"dcea97146e1e08e9a6c91c2bb9eb7931","sha1":"4bdef56b3304a3b2a8cb6625bb63ce1179d28bb4","sha256":"8f10547ee28a37004db5a955fb70107f9ff0b95a8b8e92b995df4b6324313ce0","sha512":"167b55c64a0e5238debccf3224c5a85ed8718fd744d7c3d79ae72e8474d25950ddece56d04527563cb9ff1a94d0bfc00f280a696d845455c6c728a3f9a7e56ad","ssdeep":"192:mCtmS11StpH2PQRs3n1af5QahvWfhdfAVkN4pOJeqjLdlIy/dGw9ozW3WAys1/C7:mHaagQs3tNhZUOsqjYy/8goAWAVa7","tlshash":"bb42cfdab08ea7cedd70e3309eb2af75917248e50c1c898e866210068e7483d5bded81","first_seen":"2025-12-21T14:35:17.216971Z","last_seen":"2025-12-21T14:35:17.216971Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/m/e/melanie-friedel/1000/melanie-friedel_0005.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/m/e/melanie-friedel/1000/melanie-friedel_0005.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10294\r\nlast-modified: Sun, 21 Dec 2025 14:01:08 GMT\r\netag: \"6947fda4-2836\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BZhJEGYoW%2BFr%2BMxv1rADxF6x0ccV3%2FMZmS5dm7AOM%2BqLsD%2BBs4AKoojBSc5Q19y%2FV2xFz8yMHFwlCYJbsCPHuTFb07L4Xi60nhWwyDgf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a162f4e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10294,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x300, components 1","md5":"96688386cf8be68cd99b72506a40bf81","sha1":"04c800da3938425d6ff43953c18826e014f1a2c7","sha256":"3d414af23d7a4017eea269b19835af25544065da785017863452835032254ea2","sha512":"69fdca0dda483682c1463c3f41c42af35967be90b099cbf0bd2033fa02f4a9dea717a8ee29d31c21be77db829c4ff4899453bf142693c47312fc15f8ae8e7c5b","ssdeep":"192:eGDJyP0u5xyVBKAWiQxnFZAJs4Vj3uKchPKKHUtC31pZeHk7Edv:jtU8SAJsKj3T8KKHUpk7Av","tlshash":"16228f160664f280fe2107b14e762e8c776a7cdec5744099ebcd693c6bbb9dc0d17146","first_seen":"2025-12-21T14:35:17.218089Z","last_seen":"2025-12-21T14:35:17.218089Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adv.clickadu.net/check.html","fqdn":"adv.clickadu.net","domain":"clickadu.net","tld":"net"},"ip":{"addr":"104.19.231.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickadu.net","organization":"Clickadu S.R.O."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Sun, 06 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:FB:5A:E6:98:79:0F:9A:D1:B2:26:EB:74:BF:6A:E9:83:8D:DC:7E","sha256":"D5:8B:5E:29:15:EC:CA:EB:54:CC:FD:C6:3A:8C:89:19:A0:43:85:BF:18:BE:D9:49:16:1D:5C:31:4A:58:94:1C"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: adv.clickadu.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nlast-modified: Mon, 24 Nov 2025 08:42:17 GMT\r\nvary: Accept-Encoding\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9b181a174d84b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/libs/perfect-scrollbar.min.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /js/libs/perfect-scrollbar.min.js HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Jan 2021 10:55:38 GMT\r\nvary: Accept-Encoding\r\netag: \"6013e9aa-63cf\"\r\nexpires: Fri, 26 Dec 2025 22:48:55 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 143269\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2BMQ3xgpRz6lpeAHvlOl%2BPeQm4hzrZ1Jb7bIA1tvVkHw2fGHP%2FuJeNFCjRRNx%2B%2FGtN6C4yWClSqsNxiPELZnzjITHMrOULvWuWurgobZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b181a145ed649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25551,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25515), with CRLF line terminators","md5":"6d9ca9faf779b1643b1d3cb7bd1876b6","sha1":"cc8996acdad3a92ea375d3c98d7a838630525479","sha256":"e76d2581ff4f8c29c9d1a6dc8938b2f4856c491fed005eb9776973de6b4fb169","sha512":"0e8fb809a4de09bfc47d292709c49c7880c60ad1c0334dc625ee1b79e61e3ed753f72392c382823d070eb975a5a6f4ea2e462eaa5895a1efbb06d84d7ef10a30","ssdeep":"384:aCnffouNtwIXgqsvmcRxo3kfZNUF/UF1xtjhUrAXJW2i28tvuJisJv4HROdyoL34:aC4uNtwIFssAXJ0FoLVu","tlshash":"96b2810cb21430a092ff315dc5df870e61724553b78fa5d0a490dfb8a9747ba6362b6e","first_seen":"2023-05-09T05:59:38Z","last_seen":"2026-04-03T06:43:40.726844Z","times_seen":268,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/img/assets/favicon/favicon-16x16.png","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:44.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /img/assets/favicon/favicon-16x16.png HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_0KVPEKPNG7=GS2.1.s1766327683$o1$g0$t1766327683$j60$l0$h0; _ga=GA1.1.882854883.1766327684\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 863\r\nlast-modified: Thu, 14 Apr 2022 11:23:41 GMT\r\netag: \"6258043d-35f\"\r\nexpires: Wed, 24 Dec 2025 14:57:42 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 344341\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=soeMk6w2lvodQR1pBI60kGSDI617HTIDOH4cngu0clCwXK9TyfocSNY8uSHZ7DCIZONSJIj1qxMDOKO60ZOX7vTNwhjMtRlwLivqNIW5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a19dfc949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":863,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"c729b796c74d11d4e5f9eac935a87cd7","sha1":"59956444743f22bfc48f2bbb6b975f8a6063313f","sha256":"27509f9944f4640ec78fb92e380222aa418534d7c1c3554df8afca3f77cfe85e","sha512":"8801f60fa5ea35ee359b80474fd24aa3746b7476657cb1e1113d4bdead378f3d5bd9380fb1cabe61bed8ba4bd093942a9d1c68c30fccb81cec85b51c5b9443ff","ssdeep":"","tlshash":"2e1156f9ba645975c10a3c1570541340f47ecbef026518df7e1df1191c55de07611b67","first_seen":"2023-05-09T05:59:38Z","last_seen":"2026-04-03T06:43:40.704167Z","times_seen":265,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/img/assets/favicon/apple-touch-icon.png","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:44.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /img/assets/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_0KVPEKPNG7=GS2.1.s1766327683$o1$g0$t1766327683$j60$l0$h0; _ga=GA1.1.882854883.1766327684\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 7446\r\nlast-modified: Thu, 14 Apr 2022 11:23:40 GMT\r\netag: \"6258043c-1d16\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vzsx6%2FFA0mV2NU1RRyABUP0cewDCwb4DuK9d%2BYvWbcvhqGxmfO%2B9n%2BDx8T29J7QUvIH%2FEwf7RgRrAD%2BhEl9AMvRTBd1g%2BL%2FYeoEnkKuo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a19dfc849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7446,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"926d6eb1c3897ba280a91084cdd3c730","sha1":"393f1acb3400eb6bbe83aeca99924cad2063b14a","sha256":"979ecec5966211de710d757a4989e95dc4ec77d2d0d91ed848578c125367f8f5","sha512":"8087c75b5c4ee29f8a1035bf37ce154f27f2cd6a0354e4b80ff016c43855273b61568ef550d2b682d8711f661b2589e6c9f5a3c5e86205ab87ebc0606fbd6ea2","ssdeep":"192:yShfHirPREx0DkibI9wcCJVaDaDwNLjfj/PEDPgjn:NhKd6GxmwcCLaXNLrzEwn","tlshash":"83e17ef1e1b8d3b9c752efe0201327dd31a5b48a0746a67d45e4ca01617eee46eda5c0","first_seen":"2023-05-09T05:59:38Z","last_seen":"2026-04-03T06:43:40.701585Z","times_seen":263,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/css/theme-font.min.css","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /css/theme-font.min.css HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 29 Jan 2021 10:55:30 GMT\r\nvary: Accept-Encoding\r\netag: \"6013e9a2-119c\"\r\nexpires: Tue, 23 Dec 2025 21:35:30 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 406873\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qBL%2BmhgtGasdFbAk5D8E3hcraaCALkbfNTcNIj5v1%2FsP0jyuceRFPDQQWW7i0AxEv3oqvESmK7oSAg3rQbiR2qiFL5IkYVyT6mc2Vryg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b181a145ed249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4508,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4455)","md5":"8088a5be88797cd77c3912b5f52acbcd","sha1":"8a3459face9d441a6b3ea77445fa272abbc5431a","sha256":"7d098fad885b8f9a91b01e0880f8623beb01950a4a752b8ab557e8713f9629c9","sha512":"8543f219d7a235158d98ef3a256dc3295c2ecb605da8a11de202c369e82a9d2ce122d06cdf1ac51e88ab846abdec61fd5e3882a9e5a25a9b742ae48c860c6c76","ssdeep":"96:Jt9qXtUtPtj9NtZtgt9StblTNtJxFx/5tJtDitutb:zuel1D69Ylrrokb","tlshash":"6991a116860a131397e70e9e74c66b10feaf682c7416c113c22db8af59fba476390f56","first_seen":"2023-09-18T20:50:16Z","last_seen":"2026-04-03T06:43:40.717561Z","times_seen":201,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/img/assets/logo.png","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /img/assets/logo.png HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 3306\r\nlast-modified: Thu, 14 Apr 2022 12:26:47 GMT\r\netag: \"62581307-cea\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f702L8qwTcVudsPhXMxnpRJDzg1Rzyzi6J7dM4AVJA4qpDEHMdTPbeRG9Et9RaXUPSKLJTFX9RAYUm9cfY%2B0pnoChF%2BGSd3vMSSi0r65\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a15ef2349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3306,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"87dd4f58eb57c01002ec9e19a0ca759d","sha1":"4f51bc41952e2c799add3097a80b99ab5ea9e34c","sha256":"c12ca0e90619dc812eb42d49f11e85cf5f548c953263fe9493f06f5d37e31cfc","sha512":"4fd867815fe0626c896331ddc38965c788a39ae924544d575b97aee1754051468cec73a39f7fee077e18a64a372b1cca4525b3a9b662e6ad89a95c655dd0a89d","ssdeep":"","tlshash":"69616cb9344db5c12e2235630851203f9683be97b6b759c39973b5b72c7441a928c2df","first_seen":"2023-05-09T05:59:38Z","last_seen":"2026-04-03T06:43:40.714096Z","times_seen":267,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/w/o/wonderedison/1000/wonderedison_0003.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/w/o/wonderedison/1000/wonderedison_0003.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10192\r\nlast-modified: Tue, 16 Dec 2025 15:01:39 GMT\r\netag: \"69417453-27d0\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7t1tZAa6xVA98MVFkQ1MI3dtep6eBis8%2Bn%2F57QQxMoKQ5400ZmvqBC6PUDGkbnp25fMGq0joaTng1Rx5qVJoAkD%2BS65KXJuwIt2LGpG3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a163f5349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10192,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, description=Screenshot, orientation=[*0*], xresolution=110, yresolution=118, resolutionunit=2, datetime=2025:12:13 10:03:31], baseline, precision 8, 300x300, components 3","md5":"e5bda1c46ce0c25af27abe1f53907cae","sha1":"eddf4a8e2f79f05346136e6c0159d33dd9c9e19b","sha256":"00cf13ff5b7fbbee1854c2d6a9177f4977dabcb436a6bf89ecc513cbf40252c3","sha512":"de300c3e78f44ae5a927b9375d6c88f72dcb7a76b5080881bf4f64244fd807b48cb5b700c4cea1e8dbda2c2be33f315a7ac1a20ed81ad60cee69faf10472fba2","ssdeep":"192:1Dqs1hMHwfDBb0iFaHNNCPtzY7SPex/zrk2gY8hiqzKnhMljzfmQWOZIwKNa:bvRbBQiFat6KDx/XkBY8hHpXWOOs","tlshash":"b822b02d3ea227c2e8d2f23e9502675073e6e41080bf775da664403760bdfd2965194f","first_seen":"2025-12-21T14:35:17.223098Z","last_seen":"2025-12-21T14:35:17.223098Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/c/l/cloedeangelis/1000/cloedeangelis_0021.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/c/l/cloedeangelis/1000/cloedeangelis_0021.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 60400\r\nlast-modified: Sun, 21 Dec 2025 14:21:36 GMT\r\netag: \"69480270-ebf0\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cPi3bG1KL59LFfC70F102HOgZuaFEkXfB%2By3POKpi6mWbH1rrqjomgzTbI2L2tAWi06zHuC42l%2F1%2Bd%2Bc2TAz4FlVCbg2US8seWQIY8wc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a15ff2749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60400,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 27007x27000, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 610x1080, components 3","md5":"5ce81e3e5599d4157228a2beef057764","sha1":"d2dbbc72f4ede02c7b5b87d91c9cca5afd29c366","sha256":"e665a411b04c1051594ecdc3d34590c8c9f3879ae8bd7186ce1f70e45fd1a55d","sha512":"07f812e383b04edf4211e61c020d9310bc195900757b48431cc3ba4e5a88817937cce13a337f730e2d77e26815ccd2f6b22b029c2d9bcae0104eabe02092ea39","ssdeep":"768:sZ62227xSto8i6v5eGE29xvbt5yWxJpkfy2XOb1vGgtjWN2NU1YlioWrbrWt:sUhY96v5xE0Dz9afp+5TTxz8W","tlshash":"bb4302c426d01830eddbbd84e7bb5312aab73fac8a5a576b833b517563519930af0d03","first_seen":"2025-12-21T14:35:17.224515Z","last_seen":"2025-12-21T14:35:17.224515Z","times_seen":1,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/l/i/littlemutt/1000/littlemutt_0036.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/l/i/littlemutt/1000/littlemutt_0036.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 153925\r\nlast-modified: Sun, 21 Dec 2025 14:21:36 GMT\r\netag: \"69480270-25945\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pOHdFyjXEcY156cM5lCxFoTU0o1bdSpc%2Fb%2F4uv9xWKSHLvpVOxGMJISVF7U5ABmUzGNn6QoV0jLj%2Bbjr3flMPNHzCUhri4njPtEnjkVD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a15ff2949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153925,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1200x800, components 3","md5":"1c76c830f49ea2bc8ba6ab158fef7659","sha1":"501e73dc81a99c7656c125d8866b3ace98bad79a","sha256":"e86dfb2909ae0b8d7c7a48b581749b1b1c20854b10cee9c4df880c98bbddee80","sha512":"d7dd66f4ef306b546a5ff3f759a36c65cd027a7ec1b0572a309f4f1c3b55b8b0130da4d3911178419edfd04c4d6bad2a2c75e19ff6b2669c2b46a952dd0bb1d8","ssdeep":"3072:q7/pBVBIURVfJuaTLTJDM+kEiiP0jlsfI75mbO:qrT7IoVfJrxMEv0jyUX","tlshash":"05e312140c83ad3ab6ed3f1cbc047a890d64a75fca6414d2dad5ed85af0c842fa7d99c","first_seen":"2025-12-21T14:35:17.225698Z","last_seen":"2025-12-21T14:35:17.225698Z","times_seen":1,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/-/-/1-estefahg/1000/1-estefahg_0165.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/-/-/1-estefahg/1000/1-estefahg_0165.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9937\r\nlast-modified: Mon, 30 Dec 2024 11:05:17 GMT\r\netag: \"67727e6d-26d1\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KgnHup2%2FVUhm8u0mOdJpV3dbSBAZkBoCOAF27AQPpVOrLQW8O10Oz89CxNCbdFo1EJ3x9Xzvm0p1HZbZB61nTmxIDrzUb5o4vto9YnuT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a160f3a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9937,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x300, components 3","md5":"048eb47de05b0eac8aff253ed5a3a949","sha1":"a79d70e03dfea4409b5b749d211377f87601d46f","sha256":"97d59c9e63ed64f48f509031f8264359acac18346167d96d68b65f52b4c6f3f3","sha512":"870b1100d3a0008e11ec78b483459c226904419d76774a35113be0b97c5f9c8b5f0792c0bed84dc054ae5f8fa57020a39a6789f7d95aa5530aec52762ea4a5c9","ssdeep":"192:riQ82U5jGH66Q28MdkICQEvqDSHWTAAt6n2aI0FWp3gk9fRVHn:riDv5S6qJ2I36AqF4gOfHH","tlshash":"7922bfc13ec9ef9694f8f4ba3fd457624246c839da01290dbe9821d935b5680ee8112a","first_seen":"2025-12-21T14:35:17.227493Z","last_seen":"2025-12-21T14:35:17.227493Z","times_seen":1,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/d/i/digital-playground-and-adult-movies-dvd/1000/digital-playground-and-adult-movies-dvd_0074.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/d/i/digital-playground-and-adult-movies-dvd/1000/digital-playground-and-adult-movies-dvd_0074.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 191685\r\nlast-modified: Sun, 21 Dec 2025 14:21:07 GMT\r\netag: \"69480253-2ecc5\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IJkRZQbOofsOjGw9R1cNZdIz%2BdITGRfbTruzM2kPiNLzyXNoJ6k5t%2B6GTb5VuqtqvJWFvDgAX06tMmnPJEuSA%2FoMp4AQt6qALOgOPqdh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a160f3c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":191685,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3","md5":"e25702cac2144cdf5e096099626b126e","sha1":"64b1c2e67af8e63886bdb3007c6d4fcf3558ea0d","sha256":"59d7380265163d67dcaf9b33b16b8a2ec6a2267adc8994b5d706e0db6eb60795","sha512":"5400f7686793d5d5f2268e32d062cee7b3a1dadd947edc4cbb0ee10786271605c63ae30a27f06f63bbb497b90bb4584720d839d6496766851bfaed6b3c1f1154","ssdeep":"3072:VQNEOVa6ZNgifVHx0r/WXU75NMPZBn4iw6HlncFjl4v/1wmGfVVX0ZsmaJC:6NEANbfDOVNNIZFnctlo9wh7EZJaJC","tlshash":"8314127b6bedc878858dca3eaa09753e64c5394e0df27a0c3c6e4fd9428e072dc45846","first_seen":"2025-12-21T14:35:17.228604Z","last_seen":"2025-12-21T14:35:17.228604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/n/a/nade-nasty/1000/nade-nasty_0123.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/n/a/nade-nasty/1000/nade-nasty_0123.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12748\r\nlast-modified: Fri, 27 Dec 2024 20:30:01 GMT\r\netag: \"676f0e49-31cc\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XP45j%2FWMZOrQ4%2FBDoLcWocUb5UTD3mPvZvSScMQpQGLdNMEt4xtsG9KPGwf4mNM6Dy3tW0Kxsirs%2Bh9VuCxai8JoOR1jZBFLwh8B%2B%2FLH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a161f3f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12748,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc61.26.100\", baseline, precision 8, 300x300, components 3","md5":"e6c062d1f3cddb7da7b695c65b1365cb","sha1":"c5ae37d27e456115c13d2112de834442aceec9c2","sha256":"cbe3c00db94654438205c7a961be8afc4b3b1338babdda8f92a88bd7e66bb1af","sha512":"4b93381b6bf68baf3306ded5287214610e3383984d78621ebcdbdd59e51803562994b611408a6626925dc84f183e8c25307ed1c7c460c08f25efb374d2f09fd4","ssdeep":"192:qX1mFV6cqwLR7AKp4l4avf6FoRtfoPfCeARNheFTJ/dqRoBydoVZ+Ok1B:ufNw+Kp4l3RaSeaj0dooB4oj+Ok1B","tlshash":"4542c0deb1f1ff20d077f37868b6468e1f5ecc82b20b217dc948585a30624913a4a01f","first_seen":"2025-12-21T14:35:17.229646Z","last_seen":"2025-12-21T14:35:17.229646Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/j/u/juqyx/1000/juqyx_0065.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/j/u/juqyx/1000/juqyx_0065.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18805\r\nlast-modified: Mon, 30 Dec 2024 11:20:11 GMT\r\netag: \"677281eb-4975\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CEERYfbcPhrAY%2BxRtY0P936AgC91GG%2B%2B3z%2Bg4zcwJfesN59xKf6BW44s5dvYDo%2BIcrocx5Xdr3c7gWgs%2Bl003nmSeaNZzAWEelud0CF5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a161f4149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18805,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=[*0*], xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 300x300, components 3","md5":"3aab67279704dcb977c49d95a959810d","sha1":"39227f8d3a2671839370535a01a50f8ed9ecbfee","sha256":"36421b89bea44205747decf1030e521b3222e36538c6b122019995c60bb6b596","sha512":"8cc4cf62146a5ff116aa8bcdc7fb98e828e4e41c9089e771d8df28d3500deafc9fc2d89e9f5c76f522ad62e1985e853a496dca23ae5528942a66262f8fcce2a0","ssdeep":"384:fvK1qjXEhsw3fkHz5WB5L4sVLPzlnVR/n3/UMdpxVySD:yqj0hs+foEB5L4sVTzNP/UMdpzySD","tlshash":"6482d02e3b021642ff63c87554a705851fbbe319d746c8afad04833bef660b071a591d","first_seen":"2025-12-21T14:35:17.23057Z","last_seen":"2025-12-21T14:35:17.23057Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nowfavourable.com/sbar.json?key=f14ab1a1d93ca97c0c0da7c3d00b26cf\u0026uuid=59c96f06-abd4-4df9-9597-75d5765d469f%3A3%3A1","fqdn":"nowfavourable.com","domain":"nowfavourable.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:44.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"nowfavourable.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 08:06:05 GMT","end":"Sat, 31 Jan 2026 08:06:04 GMT"},"fingerprint":{"sha1":"83:CE:C1:62:82:C2:34:A6:99:3A:82:07:CB:34:5D:91:B3:74:75:DF","sha256":"0F:AA:B6:B1:20:83:89:33:BE:CF:4B:CB:28:0D:0B:EC:E7:21:59:99:65:5F:45:F3:1A:A6:52:08:A0:59:23:C2"}}},"request":{"raw":"GET /sbar.json?key=f14ab1a1d93ca97c0c0da7c3d00b26cf\u0026uuid=59c96f06-abd4-4df9-9597-75d5765d469f%3A3%3A1 HTTP/1.1\r\nHost: nowfavourable.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://es.faponic.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 21 Dec 2025 14:34:44 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 3456\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://es.faponic.com\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=59c96f06-abd4-4df9-9597-75d5765d469f:3:1; expires=Sun, 28 Dec 2025 14:34:44 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Mon, 22 Dec 2025 14:34:44 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Mon, 22 Dec 2025 14:34:44 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Mon, 22 Dec 2025 14:34:44 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Mon, 22 Dec 2025 14:34:44 GMT; path=/; secure; SameSite=None\nu_pl20287261=1; expires=Mon, 22 Dec 2025 14:34:44 GMT; path=/; secure; SameSite=None\nslecf14ab1a1d93ca97c0c0da7c3d00b26cf=[4323737]; expires=Sun, 21 Dec 2025 14:34:49 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 219\r\nHost: nowfavourable.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: fda2827c893a5f6eb6e3b6994bdca644\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5974,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"ff427783790b1db57b35e6b0ba4eefd6","sha1":"e0dc5395d2ca0f8799dd328a23cd2d9e1df92676","sha256":"3894745b05c2154cbe8c3cc99e5ec9c9ec272aa409b7ebbe134b4aad7a250b99","sha512":"550832a4f3d053724bd7d713bdc3c1ea44f3bff592f0ceb31caeb4b37877f704cf654850e7cd7a6141e0ab3973d5635fe85cc6bbfdccc84b8f2904afd65dcacc","ssdeep":"96:9zQ0lAY77CBxnaG6naOD4fGYqqggEwiLyRcCCYmpyxcCCYmpyvtlQVyYCQV+zL6K:9zQGQBBWTZYnhEwiLyRCyxCyUyYgf6K","tlshash":"a2c16dfe20129a67487b7630b12fbe7b9c908b03ed9945e47c9103be425e7944a78731","first_seen":"2025-12-21T14:35:17.231558Z","last_seen":"2025-12-21T14:35:17.231558Z","times_seen":1,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"nowfavourable.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"nowfavourable.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/r/a/rachael/1000/rachael_0063.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/r/a/rachael/1000/rachael_0063.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13984\r\nlast-modified: Fri, 27 Dec 2024 17:27:27 GMT\r\netag: \"676ee37f-36a0\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fkb9xxWdJMo5eefHrDvp36Gy6%2Bu2OelEYd6DHWtuNC9EWXV%2B6QGzndR6gBTuTGfGsX2P8T%2Fi015M%2FipSyXOhlnwJZPabK5YBMZewE%2BTd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a15ff2549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13984,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3","md5":"dcc5a156ab24714f78173f839db95023","sha1":"702883b4b73dd5ffb3019e593455a99db3ef298a","sha256":"8607e937707b9b9357f5b0cef6fbe6f622648ab0d439a1ea445ab86d450b487c","sha512":"ab199bf5119f0e0da75736f946b28fa13296dc81f37fb01240aa3572df07a18790a3e5669bb5f239672c6b51202522f2dafee3df77ef02db1091d545b2aebb24","ssdeep":"384:1qoXZl5rkvATI4C76yPnsrg0O5cLfId9Qrf8CpEGan:1qoXZl5rkv34kug0OuH85V","tlshash":"5852bfd2722d5381d5a4c2b2d1d30550dbae741da47e2a3f2b96c72a311d23adeb612c","first_seen":"2025-12-21T14:35:17.232601Z","last_seen":"2025-12-21T14:35:17.232601Z","times_seen":1,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/m/i/mia-khalifa/6000/mia-khalifa_5109.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/m/i/mia-khalifa/6000/mia-khalifa_5109.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 155519\r\nlast-modified: Sun, 21 Dec 2025 14:21:32 GMT\r\netag: \"6948026c-25f7f\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hdhHHfhPcfv62rjK%2BNf3oarWIx2R%2FOvScoHQaAZ3kTlU7C616FKEE2jDvCal8Li0ccN1UplX5VlhQ2QV%2BYd3HSRNr6xkJBxhjQsj4Q5f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a15ff3149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155519,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 810x1080, components 3","md5":"f4764cd229704d328b0bb4cda6418b53","sha1":"1458cfff3e4cb6d85a71efd26f19cd20e4c0550b","sha256":"f6b61cd7b14eb1b3355cc1b8d5c0776c85f2480783d65b10b5216c73932531e0","sha512":"035046f5fcd429c23bc53d073900cd252b9bf7d96af0bec0e487dca955429eb4818a920108d9fc5f8c52deadc01fe41813c38308545de65cd8d34e15a6486164","ssdeep":"3072:ul0r1ETeh177/qxlxpX6uifVx93ctNYC0s2P6Hll//dkHQSCVatBjh2PLWq+XPWK:ulcSTehl7/iL1iVx9uNSZ6Fl2HQxanln","tlshash":"64e313a56189dd0650ac807fddb6dffb2e58bfa180480d016dc3dfd4b52d76a273a288","first_seen":"2025-12-21T14:35:17.233724Z","last_seen":"2025-12-21T14:35:17.233724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/u/r/urbabyjasmin/1000/urbabyjasmin_0261.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/u/r/urbabyjasmin/1000/urbabyjasmin_0261.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 89998\r\nlast-modified: Sun, 21 Dec 2025 14:01:30 GMT\r\netag: \"6947fdba-15f8e\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nSzOhu1tD6dDm9k0C6vfVZElgsWZCXF2%2BoAYen2w08ivfhL7sC12X6Wy6TNYrtHRgcURgNZ6%2B2fvc%2BwEB%2F0U4gvg%2BcdlBfdeja%2BGJsuT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a161f4349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89998,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 637x1080, components 3","md5":"8c9499b8959dd52095c406ee51f7234c","sha1":"75435b32556e37235fc59f650ecec4e4f85ba74f","sha256":"b59b69a9d6d8a332c33b54bf15205887efef69bd3ef4f38b02596a8335b34c43","sha512":"27300aa2a058f14efb221df7ef8523ba2a450b273be3b5b1252ec5b35aa2ae28732ce29b84e6f1e905c8214eee6f69cf373390fa4d5600afb19abd0ea8869f4b","ssdeep":"1536:M23TRYM8xxpjy8YdjJXRaThLKbeVQaSlBJ97xk3h2A0gwFzXlKjyOlmyDLFpIfGx:M2jRY7ruTzk1KbyalP92x2rdJlKvlDDt","tlshash":"c99312c2bbe115a6e0f0f97dc63e498d6a7cf8439154cb3c584aa21b01d64c72e385ee","first_seen":"2025-12-21T14:35:17.234828Z","last_seen":"2025-12-21T14:35:17.234828Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"18.194.59.7","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://es.faponic.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://es.faponic.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=59c96f06-abd4-4df9-9597-75d5765d469f:3:1; expires=Wed, 19 Dec 2035 14:34:43 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"a155145149928008df7f4e1562b60746","sha1":"2a30060bf46c0228ee406118d178f70216c80337","sha256":"eb8ba5a1eb8d0e9d9497d687c673b33966fea30ab1fb48aa8b4dd037b8fc6d98","sha512":"d20b59728c1d3ee6deca74bc6c1a273a93ba503efc21fb1c32facfea0b3146f7fa633b29424d34d6a74f4818df782112d711dae48dc8c2a041e4de7c6f47c2fb","ssdeep":"","tlshash":"b69004445c0075d4fc010045cf54374010c14150405dc44477c77151735040031c1453","first_seen":"2025-12-21T14:35:17.235805Z","last_seen":"2025-12-21T14:35:17.235805Z","times_seen":1,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":125,"dns":19,"connect":21,"send":0,"wait":21,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-21T14:34:42.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RxNIm28y9y81puOe2MIc4v6XecmxRoxakIXytrUX8OcbkVecQGSamDy9sKi%2F7JvXA2UZhhw3LSnwDKgHk%2BkWohdNhCl8IIafFUdJQA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b181a1288ffb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Material Design Lite","description":"Material Design Lite is a library of components for web developers.","website":"https://getmdl.io","common_platform_enumeration":"","icon":"Material Design Lite.png","categories":["UI frameworks"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":75176,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9807), with CRLF, LF line terminators","md5":"145e9188c8d02921df9ad92fde054ef8","sha1":"e09cc821d53fc65f8ff44ca232a2221d66a4717c","sha256":"028a8325e1e9f8c87d77e23e783668b082db49f7f3c1166df0b7005739b17573","sha512":"2b0e32fee81adcdc25c10636c0605948d571555cf4505feeee38e434f3334eec4261bdeeb0af059203e87ee9f78347e0b0973457d2e26a3fc18827f436e148c7","ssdeep":"768:n5+bwIpXRZyR8gIfMk3s9GmUAIcSpbWfnlqDuyGlbGsi/F4mMCpO:5zf1IlpbWfnlqDuyGVi/FWD","tlshash":"837351b2209d5c3f571242cb84307d9cb4af8c36da6285f2f3fb56eb5683d927919026","first_seen":"2025-12-21T14:35:17.236687Z","last_seen":"2025-12-21T14:35:17.236687Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/libs/imagesloaded.pkgd.min.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /js/libs/imagesloaded.pkgd.min.js HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Jan 2021 10:55:38 GMT\r\nvary: Accept-Encoding\r\netag: \"6013e9aa-15e0\"\r\nexpires: Fri, 26 Dec 2025 22:48:55 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 143269\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2FmhwHw%2BqQiMTDoxs9YN4wurNGjMT1nx%2BCqVTO59ADJeMcire%2F99XGdKHf2kv1qnD0ZIc3qPbVGLwV9LxYZEGH5i3hwOpq9Cks5dFm8C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b181a145ed749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5600,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5477), with CRLF line terminators","md5":"81545aed80e2c8b710b729bea178621b","sha1":"049173b82e68c40492961bb95ddacefb44eab680","sha256":"5a65b0ca177f1c0433c0ead611692521c23e6668846a2861fedc09ae11416ffc","sha512":"627555d455405e30e77fd0e51bbd9ef070e7964d61ce37d61a5dad65d6bcca809956d18df46bb3e2d7c502d690ab17a2e7cc1caeb07a9a2c3a5519b925fbd971","ssdeep":"96:cww1xr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBVd:cwwfrycrr3rKvE9IjRxjGjgNhdTLo3rt","tlshash":"15c122cd77a275362296f0b3a21f020f7276406e6918815d7969ecf25cfcd092633bb0","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-04-04T02:36:00.797403Z","times_seen":11222,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:44.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 18:32:18 GMT","end":"Fri, 06 Mar 2026 19:30:50 GMT"},"fingerprint":{"sha1":"9A:CB:17:6D:8B:24:6D:0F:99:B5:FD:4A:00:CB:D3:DE:2B:8E:84:93","sha256":"3B:72:94:40:4C:CD:DE:97:5A:DF:6C:E1:90:81:0D:BF:33:9E:10:3C:16:3A:61:15:FF:65:B0:6B:5D:34:32:21"}}},"request":{"raw":"GET /sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://es.faponic.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 14:34:44 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Sep 2021 07:43:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ATF2WqFTDQanRV%2BydRqFkgI%2B8RIz%2Fc1FjVSnAHiztGmkote3Y8xCNDFCWAhlauvLe4wuoNdeJqpcxoUlETEYFkW05oqVSbGMQXQ2hm4%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b181a1d8aa25693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":1325,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"f6990569c7ffeac1f4a3f6d9eee5da44","sha1":"e7d5e37acf89a8faee252c36fc2c9d6615501d76","sha256":"cc2a9756c81bd570fff8b32e48a413687c33f8abe9c934e743a0769178b4f690","sha512":"be3ebced9d65b29fef8caab46e95f54f1ca645ea5942331c84c964ec033fb7c78506d14eda131948b7f664f1635deaa8d82a63169f9214f72035b087ea104bda","ssdeep":"","tlshash":"a52105692df9c97311e750947b352f1bed92ea87c80a6e0173bc9d684f9ad84cd23407","first_seen":"2023-06-26T22:59:31Z","last_seen":"2026-04-03T15:41:36.791006Z","times_seen":2350,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":120,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=35","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:44.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 00:22:29 GMT","end":"Wed, 28 Jan 2026 00:22:28 GMT"},"fingerprint":{"sha1":"AA:F8:F2:CD:8F:90:E0:34:26:52:5F:28:83:02:25:29:22:DE:BB:79","sha256":"E5:C6:96:84:40:94:64:CB:57:23:67:51:0E:0F:27:85:86:63:98:09:63:88:91:67:0A:01:DC:33:5A:53:16:A6"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=35 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 21 Dec 2025 14:34:45 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":663,"timings":{"blocked":283,"dns":1,"connect":94,"send":0,"wait":96,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/1-aareni-asmr/18/","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-21T14:34:42.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /1-aareni-asmr/18/ HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 21 Dec 2025 14:34:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://es.faponic.com/\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k1sDV7d829bclwN8brodn9FTXRwVie%2BFvQKjfu9Zqw3HpIgZNJjWjYFaasOwEkzSxwVRQMN%2F2crGer0TRSU%2FHnMeNPzm1t5nrG26Ew%3D%3D\"}]}\r\ncf-ray: 9b181a116823b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75176,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":18,"dns":8,"connect":1,"send":0,"wait":161,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/css/main.min.css","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /css/main.min.css HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 29 Jan 2021 10:55:30 GMT\r\nvary: Accept-Encoding\r\netag: \"6013e9a2-552ab\"\r\nexpires: Mon, 22 Dec 2025 19:25:31 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 501071\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vmM2ak4ZhqdYm8IG7qC5aK8iv3y6VNML8JQI5mKDL1EFGbVMUGHvJjAc%2B3OBNIwxLLP7NfgV88s5RRRW0FomMcw8JICPVO6%2FjXU1a1%2FC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b181a145ed449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348843,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6beac707620bbbce205d327ae03bc6dd","sha1":"5b5cd888b0ea67fb397007e18b4839be48bdc43c","sha256":"96ae3f75be3c542f81985ce24c9313eeb959a1f6674cbf96e1c806e2c0e6e921","sha512":"9b4dec4288472ec25b1537d84dc808342deb14c2386a3cc09eb946669d98d32a4baf3331c01049451c6130ee7385067e1fcec492fb488ff0979bfad6ac48d4e5","ssdeep":"6144:d6BmzhglMUWAHcbZvz5a01w3AlSSRJOTIC6no0B:d6BmzhglMUhTIC67","tlshash":"8c7409a5f424113db527832ea1c5eb9c7034be42d9630bf9fe0ab515c7c6ae53663b08","first_seen":"2023-05-09T05:59:38Z","last_seen":"2026-04-03T06:43:40.711377Z","times_seen":247,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/main.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Jan 2021 10:55:30 GMT\r\nvary: Accept-Encoding\r\netag: \"6013e9a2-2469\"\r\nexpires: Sun, 28 Dec 2025 14:36:45 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sCDPMjZjjEqC6bulcDet6oefyOM4nB06pU3%2BuvPHQIe4inWWnyOX6L%2BHsZFlBbXHjeVPS7UrAtbQlXEQ4oqlRtWj%2B%2BLGFFPNkxvQLdGC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b181a146edf49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9321,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e062ebbdac81d089397539b38cb25a90","sha1":"e18b504807259726c9b93e24ae3b616a4a9cd8ca","sha256":"4410f39c828f520007c1af27ae5b4ec453ddb6e4257e0b46dc913f68d2925cc7","sha512":"9bfd2b140cefcadd1041b98ca4b0b0d5cef551e12696fdc2165854f7d09157836263049da01d1da88d56ecb60ffb9452a79b4f82607f6e75a4b447d8d4bfeba0","ssdeep":"192:TpIJp6jPi8n0nlW+R+x5V2MFs37RcXCxG:9IJ+a80lQGK","tlshash":"0d126355fe7b38aa95fff36950bb0004d63dd921930a4238f87c40986d48769634feae","first_seen":"2023-05-09T05:59:37Z","last_seen":"2026-04-03T06:43:40.718733Z","times_seen":263,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/bootstrap/dist/js/bootstrap.bundle.min.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /bootstrap/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Jan 2021 10:55:38 GMT\r\nvary: Accept-Encoding\r\netag: \"6013e9aa-13b26\"\r\nexpires: Fri, 26 Dec 2025 22:48:55 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 143269\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ko7ANUv5zfcPT6QZ%2FyL6n8Qnfm8iTHQLIMtHvyHQ5ZsJw7Yf6OMi11EFDMO5nEViD4yUwD1eo3mtjo%2BVROZD1Dc%2FclxLtgW9bEVaHGxy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b181a147ee249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80678,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65293)","md5":"255a58b3e9d10c59096e3a2fae341cf7","sha1":"8d85c1a1ac55a16b68a1e8c1f032068d5d4de604","sha256":"f2112b7212a3395603d5c60dfe71dea79b96e5996c77c0138675d121beae0ec0","sha512":"5f7d58c1bdc7434243f2457e673e29d71260a431ee7341cb8881206c04bac0ad12b3d650e15cc1bb2f60133d05552318f717c35d30129711e9c7cef01e9e835a","ssdeep":"1536:+q7bGH2I5VQM82vMoNLmD1fRo6/ZjUR4CFlUhuYVt:FHcKLC4t","tlshash":"6273b659b254b47206df607a803f460fb73a6895b04b8128b969d8dd1e7cc8a7173f7c","first_seen":"2023-05-09T05:59:37Z","last_seen":"2026-04-03T06:43:40.700978Z","times_seen":268,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/-/-/6-ktdavi3/1000/6-ktdavi3_0185.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/-/-/6-ktdavi3/1000/6-ktdavi3_0185.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17478\r\nlast-modified: Mon, 30 Dec 2024 13:51:15 GMT\r\netag: \"6772a553-4446\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zi5D9HzK89olpxSnFRVd%2BL891sm%2FWh5NIVjG3atqiTGfF4bVxZ65k6APhoCopf7PSoFzO%2FucMzK7Uidn%2Bt%2BxqW6sLN9NdwXbYqu2mUq8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a161f4649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17478,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x300, components 3","md5":"dc435745835c607932c0dbccf6e744e2","sha1":"63938525eb6c2e5bbc126be0eae705bf04f69b2f","sha256":"e48c40edfa3375d5877bc32b3507bfda94e01289e19e5a119f7b879928f3884b","sha512":"4c2248cd8e11b537c0c49d1e92e393887604e074fa9beac8b6dc79de4b9f35e6ec9ed1b63d03308f4fe4fd9119dd7aa1ef5481f8a76b11459d136aca6063e021","ssdeep":"384:e5hyrwsE4dG+olLxJoWGUDCQeeq7hg0SDQfJsIbEtROC9/K8906b:oyrZE1Dx+PzQ+leIbE7L1K8Rb","tlshash":"ea72d041f52acaa8e27396fa8e0307c5879bf49305587e1f1fd8925a923b1d09c5cdb2","first_seen":"2025-12-21T14:35:17.241146Z","last_seen":"2025-12-21T14:35:17.241146Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:45.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://es.faponic.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 16 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 414729\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T03:45:50.364076Z","times_seen":713688,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":78,"dns":0,"connect":8,"send":0,"wait":8,"receive":4,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/libs/material.min.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /js/libs/material.min.js HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Jan 2021 10:55:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6013e9aa-1fca\"\r\nexpires: Mon, 22 Dec 2025 19:25:32 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 501070\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ykCEJg7JL9vmK%2BU7xMfRsofypASSbNnY6fEWyDAgjpZ6y2XQ7B96kOTClw7BbD80j4fII7hoaESzfa6V9s7xXAcEFWaZsSfkC%2FbaVq8s\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b181a145eda49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8138,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8136), with CRLF line terminators","md5":"162ddc9a5385ac16b0a331f7523f8966","sha1":"1e24a4271c908380c845af4288d40d1869d89be9","sha256":"291bc73a4c0ebdd58d37b40fa35cf155b5176b60c32641a9d790dc6f957621ce","sha512":"d6924740cdd1a2259626c54db0cb355f087dcb64d6234147bf2a195d113d2e844de1a9205dc5498ee890437ea2d179d17cbca14e0f99e767c110cc4e8937a645","ssdeep":"192:kNvBZvXvTvZvpUdVUeUPNeI9jPCB0bIuSXIBq3wkc75losb:kNZZ/rBhUdVUeUPNeI9jPk0bIuSXIA3K","tlshash":"98f1430cb521334352f791f451eb8a4f613290b4d919445870afc6e45abee8ca2abfbd","first_seen":"2023-03-07T13:13:10Z","last_seen":"2026-04-03T06:43:40.722249Z","times_seen":308,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/libs/jquery.magnific-popup.min.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /js/libs/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Jan 2021 10:55:38 GMT\r\nvary: Accept-Encoding\r\netag: \"6013e9aa-4f38\"\r\nexpires: Fri, 26 Dec 2025 01:56:16 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 218428\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4h%2Bj5HuxYA67Mk9vvRdv8PGQKY2GHIxdSiASlZGldVL%2Fxec75m5UqQYUnyZZbZcI6qW67f%2FqSmRJ8W%2FSzjA0y9KQ9GHEoxF1djIcRJA8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b181a146ede49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20280,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20148), with CRLF line terminators","md5":"8f110a6d8d715e646ccaff9d21e7400b","sha1":"3581562e2f53008cd0cd85db2a7a022e98c2b4c2","sha256":"fa51078b465cfb61ec6f705104d06a82ae07776e094b217d3cbb0f702b2d4ba4","sha512":"80f403394cf8d6a405cb4cbcd72ff53589b70acd2686b98531476c4472caebfa6e17e90061c47b6a3a12b195a29d5f9ac63a96be1955b983a4ebc09090d12eee","ssdeep":"384:QVrXoiKLplEdM0RARh13XK2CUrw8n//Wq4g5rVwKOq2Qu1Z3nOj:Qs4M+KFw8n/KGr+e2QunnOj","tlshash":"e892f864f1a3b11783ab75b81c5f200d3b72aa22d907c4117659d4e86dfde88a127f3d","first_seen":"2023-05-09T05:59:38Z","last_seen":"2026-04-03T06:43:40.707145Z","times_seen":265,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/-/-/6-ktdavi3/1000/6-ktdavi3_0195.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/-/-/6-ktdavi3/1000/6-ktdavi3_0195.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 133173\r\nlast-modified: Sun, 21 Dec 2025 14:01:17 GMT\r\netag: \"6947fdad-20835\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r94ZeHTbCZS133wZMSQymWWAcY4x4yKkgkxogCvtYimWC0fcDLDnx1BqV2E%2BSYHMizrwY1Nz8Xpd0%2B%2FeK6CV2Xb9oTyoWjPfiJvG1C4T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a161f4549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133173,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"d7e5adc8602baf8ee35cd416e6e87f55","sha1":"c18df5778e8dd4fbaec930963902c73063adcd20","sha256":"7bceebfed02f4715a8e7e19d67fb26ac493ad56dbb667873cabd9c4ef92bfcd3","sha512":"e114872b33f4c19cc94c86a93e517c54759eafd1e2edad99be860b897d5973b18c8c1eda0004a1e2c27a903babe7258765aead09ed262a6c5061f1b7e6230f52","ssdeep":"3072:BYGZvuZE/R2u5q+vxrmczRvihugOu6DIjCilv0wuNXSBx8znb:BYQ/Uu8+XFihYKCkcwutM87b","tlshash":"63d312a7817df7574279cf8d285820c8f4da2d52d848d59b160010debf470bbae92daf","first_seen":"2025-12-21T14:35:17.266929Z","last_seen":"2025-12-21T14:35:17.266929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adv.clickadu.net/get/2006640?id=2006640\u0026jp=_clblhrwajihvystwsuwqxl\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.655-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=9SR\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=St4ou4aaHR0cHM6Ly9lcy5mYXBvbmljLmNvbS8\u0026afid=1241657957980160\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pi=W1oqmg\u0026pload=1408\u0026rlp=%5B0%2C21%2C20%2C15%2C9210%2C13318%2C8667%2C13226%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"adv.clickadu.net","domain":"clickadu.net","tld":"net"},"ip":{"addr":"104.19.231.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:44.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickadu.net","organization":"Clickadu S.R.O."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Sun, 06 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:FB:5A:E6:98:79:0F:9A:D1:B2:26:EB:74:BF:6A:E9:83:8D:DC:7E","sha256":"D5:8B:5E:29:15:EC:CA:EB:54:CC:FD:C6:3A:8C:89:19:A0:43:85:BF:18:BE:D9:49:16:1D:5C:31:4A:58:94:1C"}}},"request":{"raw":"GET /get/2006640?id=2006640\u0026jp=_clblhrwajihvystwsuwqxl\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.655-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=9SR\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=St4ou4aaHR0cHM6Ly9lcy5mYXBvbmljLmNvbS8\u0026afid=1241657957980160\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pi=W1oqmg\u0026pload=1408\u0026rlp=%5B0%2C21%2C20%2C15%2C9210%2C13318%2C8667%2C13226%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: adv.clickadu.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=251221093460e2743e304b494789ea2779c9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Dec 2025 14:34:44 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: PTS=; Path=/; Expires=Sun, 24 Jan 2027 14:34:44 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Sun, 24 Jan 2027 14:34:44 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9b181a19ffbeb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3340,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3340), with no line terminators","md5":"7b4edc74fc9e1db83e678e24b3955f0d","sha1":"1601a6c6629597fce8f1da4e6a0a7280ae326598","sha256":"a34dd5390108b8316bc6ed39b953d718a0040f71c92faf8cd4f5b9369634fb34","sha512":"fb6020044440506f1af20eb2afd155984cc7b1ac4b33cac9455b14fa0a17ac7a47843334f2bc7cd718ea8087d5c5f4cf45931f6e4dfe5618ea520e805154664c","ssdeep":"","tlshash":"b16163aa50e5e7a0c8013f2f41255e50058db7debe7b8092088ab13487e59f6ef33e15","first_seen":"2025-12-21T14:35:17.268419Z","last_seen":"2025-12-21T14:35:17.268419Z","times_seen":1,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html\u0026l=1325\u0026fd=145","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:44.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 00:22:29 GMT","end":"Wed, 28 Jan 2026 00:22:28 GMT"},"fingerprint":{"sha1":"AA:F8:F2:CD:8F:90:E0:34:26:52:5F:28:83:02:25:29:22:DE:BB:79","sha256":"E5:C6:96:84:40:94:64:CB:57:23:67:51:0E:0F:27:85:86:63:98:09:63:88:91:67:0A:01:DC:33:5A:53:16:A6"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html\u0026l=1325\u0026fd=145 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 21 Dec 2025 14:34:45 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":668,"timings":{"blocked":287,"dns":0,"connect":92,"send":0,"wait":95,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/libs/jquery.mousewheel.min.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /js/libs/jquery.mousewheel.min.js HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Jan 2021 10:55:38 GMT\r\nvary: Accept-Encoding\r\netag: \"6013e9aa-a91\"\r\nexpires: Fri, 26 Dec 2025 01:56:16 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 218428\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8twyQcre5av0rw26h%2F4%2FrLrUIJIYzjdmemEnqbvlJh9wWCaWZZ5v2s9l409%2BBGU413GRWSWumGYtTFNCTbroR3b6zaTNDhhQBuLFey%2BK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b181a145ed549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2705,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2611), with CRLF line terminators","md5":"f59267e06a0a702df4d57539651b886e","sha1":"fc1a9149049ff781e1db97993ca2fc82ffe15dbb","sha256":"0276bc0d88d8acbb7faa2f4ca675dc256cdea9c9b92a31b8f50da6dabc73b8e0","sha512":"34618b7bede39c30c193f744c392ee2dda5b0550856f7df078f8e4a90f5215d733bcc04f35af594753a82906d23186600f5875a7ff7bade09167d0bbc6ee72ce","ssdeep":"","tlshash":"1a517440631561f381f60726b22e7702b13ad115101734e279bd9da07b9aeeb9327d2f","first_seen":"2023-05-09T05:59:37Z","last_seen":"2026-04-03T06:43:40.726268Z","times_seen":265,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/libs/isotope.pkgd.min.js","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /js/libs/isotope.pkgd.min.js HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Jan 2021 10:55:38 GMT\r\nvary: Accept-Encoding\r\netag: \"6013e9aa-880a\"\r\nexpires: Wed, 24 Dec 2025 14:57:41 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 344342\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BP54aaLG9lBhosNX3ebcrn16HLkd5ESBbIqXdazx4u8YNru3QyM3r0CKPVsGNLUzztZ%2FSoR3ugzAfHSmiI1Ixzo6REJKa7h07eE5cGfQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b181a146edc49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34826,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34826), with no line terminators","md5":"8ef8a013e968661683d59b30eaa21468","sha1":"7cfd9bef982f129a0fe172cc39d249491ed38b63","sha256":"23fd9d2b985d8329cc293280a5d3b49dd0d08aa3020dc7e6f10dcd2b1ac69a66","sha512":"2fe3818c02c659169d508dada298a1546250f0fd43a9faa564c313b4965091e4283bef3fb60b1f68337f143affbfd9668db4dda5c06f10b5f21091ea08c0c3af","ssdeep":"768:kTGApxcGBiER2kAZPjEnRY2qFZ/aNq6BNGuD6cD6YLjfq9SvDzbH1rQx:WxFBRAP4nRY2qFZ/aXNGuD6cD6oS9ODY","tlshash":"01f2c64f7340392546cbf166a26f160f7137a56c6a4390acfa6ad8db1c7984d6033fb8","first_seen":"2023-03-09T23:04:12Z","last_seen":"2026-04-03T06:43:40.700314Z","times_seen":280,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/j/e/jenna-ortega/4000/jenna-ortega_3909.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/j/e/jenna-ortega/4000/jenna-ortega_3909.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 150249\r\nlast-modified: Sun, 21 Dec 2025 14:21:35 GMT\r\netag: \"6948026f-24ae9\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SV%2Bua%2BU91kyCyTvQH07p6Xnl01AFfOyt5o76zbN3AIu4AUJ7nnQaXlyyBB59Mccd5aOykql04VLoEVnzZl3Nu6Cy4zdzLJgAArgmXuXv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a15ff2f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150249,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 810x1080, components 3","md5":"823471e409a021693bb5f29bcaba1726","sha1":"8a57ea335a0e16c4369e137557e0d0e903d4b554","sha256":"c65c06652f4e9544115fd723affe227bc254ab267b565ff4ac74d155e7bd9601","sha512":"ca937c9ddb37c46bb8836fef45870b4b5ba595f9291955220cd095f8f4b158f46ebf700d340e1e26e3ca60751713e0f2b43c61e36983a618377ee89656f87814","ssdeep":"3072:nYGtxrXZjL8LYjyyDjN7olB5yazKoQlggGwPQ/dm:PPTZ8YlDRkFycKoQugdPQlm","tlshash":"a6e31256d6167bafc72b0b735f92e98e8bc269331ec53e0eb3fa48111755062af5120c","first_seen":"2025-12-21T14:35:17.27102Z","last_seen":"2025-12-21T14:35:17.27102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/t/a/tabi-lift-tabi-fit/1000/tabi-lift-tabi-fit_0050.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/t/a/tabi-lift-tabi-fit/1000/tabi-lift-tabi-fit_0050.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 159591\r\nlast-modified: Sun, 21 Dec 2025 14:21:27 GMT\r\netag: \"69480267-26f67\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQcffPYb8GDZC6ytLlZ%2F7eG0luhHnjk4tiPOg0H8%2FbgC4cigRhvAyxpZ6e5M%2BgqGEfnvmIy0fZtHxU%2FBvitjT8CZ%2BzY4wpo%2BsaWU3RDa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a160f3349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159591,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 746x1080, components 3","md5":"dd50544e9a0baf5ed04273f0eefea708","sha1":"e13a99077aedc33cd65a0b38091316e7b78196df","sha256":"8bf229025a0c9aaaeb7511fc864b1ca1d6d11198a57e3e5fd1ec42a69c8d7703","sha512":"89beae1854dd50dbc85d73666ae0bef3794554371b4fe8d1f283cf43b2565dcceaefa9fe3f3d9a4046a92d33ba80a953f8cfbdc213d4713250b58da17f36bfd6","ssdeep":"3072:cxoJZZoKPzRCGFndnwbI/7M0Ia0z35tYEXwQtaqpqyWtilHo+us0uYZrdeIBBsnp:IcZZoExzMX3piEgQtaqsyfuFs09ewsp","tlshash":"f3f3121e54d2d4acc868d5b910f612a5a73b740082bc9d6387e4d6fc7378ec4b9ea8b0","first_seen":"2025-12-21T14:35:17.283981Z","last_seen":"2025-12-21T14:35:17.283981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/-/-/1-heather-graham/1000/1-heather-graham_0026.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/-/-/1-heather-graham/1000/1-heather-graham_0026.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21857\r\nlast-modified: Sat, 22 Mar 2025 23:52:24 GMT\r\netag: \"67df4d38-5561\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LmKy78O%2BMKghmG6i%2FAZDJa33sgLyt95hsCBCcNenUOhfopH5uLl9tvq7m4wKwwOBCQjVGd8kgp2fr1Ame3gHUC2VpH80iEWvaNrQh7Bj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a162f4a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21857,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, description=Heather Graham, 53, shares sexy bikini snaps on 'Italian getaway' with boyfriend, orientation=upper-left], baseline, precision 8, 300x300, components 3","md5":"93041b2874ea42e2fabe238e5c59e624","sha1":"2c3213ada7da972f68be3ea44e75eb937e74cd93","sha256":"73008b4b575c17cea8ff4ddd41b8a2e9ac94800ff44cc345a5ead460aaf12c0d","sha512":"c157f123564666ea97af0c7c5a610346d6b33bdc0513754c1551c7a834cec3dcb235b3c06a490fbab1fdcf6b50e83b32e0c1d7e51e9e29ee9ef180d7e85a5fc8","ssdeep":"384:prcDSFd10ve3nJNZZ21oegelY9s8I+mzJH8P4ZkFZAiUkxtRRVwGT:pLLZz715mzJcmOUYDRT","tlshash":"c0a2ceb6bd68e202d684e2b80ec658252d7b1b87db07d92d3cde1a320f501d3cca74c1","first_seen":"2025-12-21T14:35:17.293461Z","last_seen":"2025-12-21T14:35:17.293461Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/m/e/melanie-friedel/1000/melanie-friedel_0004.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/m/e/melanie-friedel/1000/melanie-friedel_0004.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 63929\r\nlast-modified: Sun, 21 Dec 2025 14:01:07 GMT\r\netag: \"6947fda3-f9b9\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gyRuaWlqIjsPg8nhEGrcr8BxFZg%2FmWwk6c6soPr%2B7O6jMDvoHMZTuZiz%2BZZZh1wnbxuC6TDgXR1WmPD1Ztro1VdY6uSbWyJlTfVYEDj0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a162f4c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63929,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 712x950, components 3","md5":"6d3557f3f9b07d2db4c53bdfb68d53a4","sha1":"8d684e68fc1c4b729f5278038656f0786a978765","sha256":"c7456206bd531d68be50d965bb635c5bcc99e357bd7f1704dff77889d104c435","sha512":"c2762672d1cc3037ceaa0b2eb108bf39ab097dc3cecae7f78e014d8a0bda0ca3dc27b262c2ce674f50e9d018a3c1b6b477ccbc0f5efaa07c8c73757a678eca25","ssdeep":"1536:j9TOtSTkzz6/+73f/b4pD+4mqcZRoC5zrH1O7nhCQj:j9T1gzy+L/8pi8IRR16Ea","tlshash":"ae53017a0827cf6ae15ce1b38324ee5a624c416d99e91963cb5361273394bf2c1f93b4","first_seen":"2025-12-21T14:35:17.295439Z","last_seen":"2025-12-21T14:35:17.295439Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adv.clickadu.net/get/2006640?id=2006640\u0026jp=_clblhrwajihvystwsuwqxl\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.655-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=9SR\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=zqtK5nNaHR0cHM6Ly9lcy5mYXBvbmljLmNvbS8\u0026afid=8841482329107968\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=957\u0026rlp=%5B0%2C21%2C20%2C15%2C818%2C1697%2C691%2C1605%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"adv.clickadu.net","domain":"clickadu.net","tld":"net"},"ip":{"addr":"104.19.231.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickadu.net","organization":"Clickadu S.R.O."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Sun, 06 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:FB:5A:E6:98:79:0F:9A:D1:B2:26:EB:74:BF:6A:E9:83:8D:DC:7E","sha256":"D5:8B:5E:29:15:EC:CA:EB:54:CC:FD:C6:3A:8C:89:19:A0:43:85:BF:18:BE:D9:49:16:1D:5C:31:4A:58:94:1C"}}},"request":{"raw":"GET /get/2006640?id=2006640\u0026jp=_clblhrwajihvystwsuwqxl\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.655-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=9SR\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=zqtK5nNaHR0cHM6Ly9lcy5mYXBvbmljLmNvbS8\u0026afid=8841482329107968\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=957\u0026rlp=%5B0%2C21%2C20%2C15%2C818%2C1697%2C691%2C1605%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: adv.clickadu.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 24 Jan 2027 14:34:43 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 24 Jan 2027 14:34:43 GMT; Secure; SameSite=None\nUID=251221093460e2743e304b494789ea2779c9; Path=/; Expires=Sun, 24 Jan 2027 14:34:43 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9b181a18be9ab4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2165,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2165), with no line terminators","md5":"fb548be176c9a1731d4a73df774cf553","sha1":"049c4ac00985badb6fb8e90dad15eeb88c26fccb","sha256":"c72c5bfc58801cdf72002b0cb7c973836bde110afb9fcabf64920e19ea9d0cbd","sha512":"c86c6a5385e1febceafe3713a1fb18841aa511e8e83e5c9ad8a8b7671fc76e637d485a9996980c5c0760d4e789af20976fe87a17c915c66f317e98fd2b66eac4","ssdeep":"","tlshash":"954169afa085c0be86903c5507fb0f83ee4577a2ad3b5786c6e98568355f8e07b33452","first_seen":"2025-12-21T14:35:17.297852Z","last_seen":"2025-12-21T14:35:17.297852Z","times_seen":1,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/vpn/classic-push/small/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:44.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://es.faponic.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 14:34:44 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa84fe-d1b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 218424\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WKddr3jadFMKC0cP%2FMbhwYs49zO5gMeBYTVtPLvdYz6qUg4hsTLLQXcgEhmaA0KjvyJjA%2Bd224Y7dKbl6UgQ1mPT9tHFbXTcIBNKMkST\"}]}\r\ncf-ray: 9b181a1eabcab4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3355,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"039a6734d79ed9aa51cf81c52479c5fe","sha1":"9cf29c4ea1a3880681d50c7228374f8073b7778b","sha256":"a15bad73fc8907795285b78a4a1a1bf5e7f68b4d39988b9bb165444819cf9eb1","sha512":"879f067d02f582c2ff8f9c0308cbb44b24964136c4d8074f1a1b200169b520bb49fdd2b290772dfbc3ca432fba2ce9d5b1a398eb14746613cc942dd7567fa1d9","ssdeep":"","tlshash":"3a61ba966b670a04b51ad0ab3f667b4723084007995fed757fc8620ccfc92a8d6d378e","first_seen":"2024-02-12T03:25:01Z","last_seen":"2026-04-03T15:41:36.763475Z","times_seen":2152,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":21,"dns":0,"connect":3,"send":0,"wait":7,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adv.clickadu.net/on.js","fqdn":"adv.clickadu.net","domain":"clickadu.net","tld":"net"},"ip":{"addr":"104.19.231.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickadu.net","organization":"Clickadu S.R.O."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Sun, 06 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:FB:5A:E6:98:79:0F:9A:D1:B2:26:EB:74:BF:6A:E9:83:8D:DC:7E","sha256":"D5:8B:5E:29:15:EC:CA:EB:54:CC:FD:C6:3A:8C:89:19:A0:43:85:BF:18:BE:D9:49:16:1D:5C:31:4A:58:94:1C"}}},"request":{"raw":"GET /on.js HTTP/1.1\r\nHost: adv.clickadu.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\nlast-modified: Thu, 18 Dec 2025 11:28:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6943e554-26462\"\r\nexpires: Sun, 28 Dec 2025 14:34:43 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9b181a149f4f568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156770,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cc4419169ec0726fcc7cceef9c403462","sha1":"7018a9b4256131bcefb646834c0c8ffbf9075282","sha256":"76a8d79ebe132d6a75b92856027a17d65252bd2908977a7c59e334fd2798e02f","sha512":"d542a0187aed38603fe9f7940c021dc2311ae67019e2f05bc1dc241e1798ddafc5b5b4fded085efd0ef8327fd5a92f71eec38e2db120eed48e8e4c5b61266c38","ssdeep":"1536:ipiW7ZKr794r81xk4ZCp9jlbZrkj79Lk4pkzXYR3U7YMnoCUVxUzXv21+GGfsTcK:iIW7W794ek4Cj7E1pkzIRwYG70TcJE","tlshash":"39e3a8ce7ac724320256b02f583f7a126ef6dfd6ea5d441081b3d1cd2d75c0ba162ab9","first_seen":"2025-12-18T13:43:46.446464Z","last_seen":"2025-12-23T11:38:41.661621Z","times_seen":177,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":22,"dns":20,"connect":2,"send":0,"wait":32,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/js/libs-init/libs-init.js?1","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /js/libs-init/libs-init.js?1 HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 Apr 2022 14:00:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6256d775-363c\"\r\nexpires: Thu, 25 Dec 2025 10:06:07 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nage: 275436\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mhcv1Oyebu%2BxBHAoO2FEUbqJAArWRzlPywLbOYR1TOT7REXu%2B7wSLXXgidDSvrnzoYfOCt0nZk1RF74RZZlBvgUFoHSpf73kS%2F5wYOXx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b181a146ee049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13884,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e0879bf47343d92942f3944439656530","sha1":"d871723ba0b6cef674bca27ee69013c30b67c892","sha256":"590ea48c656281412f3e4189f4d0bdabe04491188ebc316aa0e9addc8044fbe2","sha512":"a8145c1673ce26d826cdb9b3058dfaa60a06293775a6341fcfdc68ec1e47b183f2b2c6045c44c89663fdaf0dae3dca5449723a1c23013c712c451b5800e2d21b","ssdeep":"192:oNJf2PUnvGj9UwHYZzLrCz3429+WbPlb07fVG0h8ioimCt5L9MNU0ZDQ:o2UnZwHwzLrE4KfxijJ9MNU05Q","tlshash":"405273447ddb603b48bbf3a6657fd805eeace0148543543cfc9e44549ea866c032eeae","first_seen":"2023-05-09T05:59:37Z","last_seen":"2026-04-03T06:43:40.712532Z","times_seen":263,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/l/i/littlemutt/1000/littlemutt_0026.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/l/i/littlemutt/1000/littlemutt_0026.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14527\r\nlast-modified: Sun, 21 Dec 2025 10:01:47 GMT\r\netag: \"6947c58b-38bf\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jEINJsK0w1aaf8R6vYJosETZoluD6ZnpbQl059XGvHcdaVdOXtNozppzQPZ%2F9dq15yF%2FreyqJqFX0rB4yBwhf1%2BrGNHB1u20kzzQ6hk4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a15ff2e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14527,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 300x300, components 3","md5":"d9d04cd49bf9afbcf4491744293368d4","sha1":"d5022f6d295d6e319ff592ab89be4422516f1381","sha256":"9e27a20fc94d4f32fd813bef3b8df1112592ca3aef6b162e7552d5221a79df04","sha512":"d2e35aa61b8f5014c5e188e7188997fd3794a2a9b99c26cc4be5312acc98c394c7ba4897cf5728ef966195dc0cd28ae20432cbf1ed676e4eb7f07fb1b9f9f268","ssdeep":"384:kphMxvHVpQGqZtiwGdyv6PdSto5i7KIzmLKftN9U+:KhM1fQGeBGdyv6FCKbWftM+","tlshash":"b462c0a17d991ed03271ee7802422c6b6788c36eaa2d654fd1c40c97c92f0492f763fd","first_seen":"2025-12-21T14:35:17.301724Z","last_seen":"2025-12-21T14:35:17.301724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/-/-/1-estefahg/1000/1-estefahg_0221.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/-/-/1-estefahg/1000/1-estefahg_0221.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 61168\r\nlast-modified: Sun, 21 Dec 2025 14:21:17 GMT\r\netag: \"6948025d-eef0\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zu9UuDe664bfBNU3lEzWUEP3i%2FUv3as%2FqsNfn35%2FhTe5WDqOv8bSDNqiMwVvuC5YgJNdFphwSp0KmuT2wZhWL8F2hT6bUNI95cb2co%2Fw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a160f3949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61168,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 585x751, components 3","md5":"85ba4f259877d36b60aa5a0a5d30c6ea","sha1":"1de610209e96d57a4957890d3233b22877df5a6b","sha256":"33eda298c6a5b99cdfc64938553dbef5491b5abbf49fefa7558f6e7af7378b1e","sha512":"4c6e73168f418671eeaf1c76696f690bd8c85e92f9a097e73b4b44278ab06cde64231f4f88a80f9654ff34cf93f8710ed17aa0f473c8bffa01a633d2faee8f8c","ssdeep":"1536:JUgNVuDtJrI9ubCVAomMXSxG0kTYH1TXhSfUiYz8p:JUgNSxI9ub9onXSxHWYhhLO","tlshash":"0553f15693222fd31d5cab516e02e6485a2f9328e109b7e16cd6aa40cff094b5027d6d","first_seen":"2025-12-21T14:35:17.306001Z","last_seen":"2025-12-21T14:35:17.306001Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/a/n/anna-nigriv/1000/anna-nigriv_0039.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/a/n/anna-nigriv/1000/anna-nigriv_0039.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 258497\r\nlast-modified: Sun, 21 Dec 2025 14:01:16 GMT\r\netag: \"6947fdac-3f1c1\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EBSAZGAcF4ZwASxc1E0ze8LMC6RlLCgiYvW%2FDtbOQmJLlF0A9xQ6nSVnL58kM9JLHHmT3BUuB84%2B1S7akVn2yd%2FlKFcJzcq0ouJvSpo6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a162f4749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258497,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, baseline, precision 8, 720x1080, components 3","md5":"546067bd57c0c7ad5c9e868292d1ebfb","sha1":"0ce39743049cf1f8498dd6d2688daa811e868b08","sha256":"3a0e5b70bc0108acea5184f7507b613511a1389142805d9715ba16c6a22e21e4","sha512":"723b44609768ff7e605192e9fe75b1945077ecfcdf75c1544b6cf402dcacfcee430f521facf8659939c89d7f0aa0177724c08c5a98cccc7f0c7885a510ef3451","ssdeep":"6144:ofG5Eu1abAtRMa9kExrfe7D9vgGDU+hgDSxzps7:oEcbA4E9fe7De6nrBO","tlshash":"454423c5023b7364a46ca2bc2bec46137549023443e9f58ea69f77c9c73b8ba157e643","first_seen":"2025-12-21T14:35:17.308205Z","last_seen":"2025-12-21T14:35:17.308205Z","times_seen":1,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/-/-/1-heather-graham/1000/1-heather-graham_0094.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/-/-/1-heather-graham/1000/1-heather-graham_0094.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 131076\r\nlast-modified: Sun, 21 Dec 2025 14:01:09 GMT\r\netag: \"6947fda5-20004\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kBkwsAAcKSqiCblA7I9CwU%2F11pN4swnI%2FBg9YuO8MgWIKgYRo9eAmjdE%2BfxrwQ3EIGOGhy9JT9htiC1UXXLUiCCJo1Y%2FFu%2BMQqz4wJ6D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a162f4949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131076,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 607x1080, components 3","md5":"50a9bb02c071df18cbd912f66002e92a","sha1":"0d440b4f7b2ae53ac59a9ace8a65463fd859abc7","sha256":"2f93bba25c1193174007d8ba19c98bf007007ab9ed1a17efcb45db99c9041646","sha512":"89717e12c07dc5380418495dba564a9eeb6e33db7e1c992b499ec6894ee4704a13cde278953bc92be4a602932c9a1514bc0bcc645779d580c6b68cdc461e04d1","ssdeep":"3072:buF5D08QGXpEkj1drSVpgwLtxgfQEvAd4vJOBT4Fc6:yF5w8pXpzjbXwZeg4LFc6","tlshash":"ddd3122d328378d7baddee07a809d5df9a303e0d71dae6f263b1150a1e9605ac1f6131","first_seen":"2025-12-21T14:35:17.309454Z","last_seen":"2025-12-21T14:35:17.309454Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:44.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 21 Dec 2025 14:34:45 GMT\r\ndate: Sun, 21 Dec 2025 14:34:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1f04e9e49d52374a409de4887e47180d","sha1":"8fee2f920567a574448d1aa6565c95951b68f9b5","sha256":"10cf0680b9dc5b310d265479bcebc5b380474bf2e8da9361cf8be458d183994e","sha512":"5fde8f721343e9c6254229e791ed64d6b47f28fad7690f7c83fa8c29e3112d0974f65ae0c63f09acd3e026dcb56c4de3fe0ffe37c464eb326b0495aa6c03b31c","ssdeep":"384:pKf5KgKPKrKyUK/qY4+K4KYKpKfMK1KWK6KyhK/qY4XKNKtK4KfdKkKDK3KyQK/9:pCJmwBUiRDfMTcfFBhiEymdmtC0BQiVb","tlshash":"df7210a1041750009b834ce223cebf35fe1f52117152d0b5abfdab6b9dcbc66526939d","first_seen":"2025-11-19T00:20:32.486705Z","last_seen":"2026-02-19T22:23:13.628811Z","times_seen":6025,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":112,"dns":1,"connect":27,"send":0,"wait":48,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/vpn/classic-push/small/img/close.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:44.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/img/close.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Dec 2025 14:34:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 591\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\npriority: u=4,i=?0\r\netag: \"65aa84fe-24f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 297475\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DoX5CkBgqiLMIWdJGZdiVegLkPRd1P1FCVOtQT6%2F7LMr83nQwAGztKQL%2Bebj5Tgc6ziKNhQf%2Br1PPj0MAXXJohElIYtkXCuVv8kmwa4b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b181a1f3830b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced","md5":"9fd5bcb6103d86e317bd1eb019bcbe71","sha1":"6b5a52ea669dcb74946f2bed4bdd7ec985026113","sha256":"0ddd3be104ac7945fb062096df62034a6a24ecc76ba92493c35c62c3c25982ae","sha512":"e244a8842c009fa83e8d9d1088ec5b76ca2a42660568b7886e01724977b9ebd4e43690e0c651e25287c64dcc4826391b34cae6a106e2148139450dd05fc5a562","ssdeep":"","tlshash":"b0f0414e7c5903a1874caf3b18dd00119c27898077c82e0db689eed20e008e215471da","first_seen":"2023-04-11T11:09:41Z","last_seen":"2026-04-03T15:41:36.771488Z","times_seen":4670,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/a/n/anon-01/1000/anon-01_0013.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/a/n/anon-01/1000/anon-01_0013.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15615\r\nlast-modified: Mon, 30 Dec 2024 09:56:18 GMT\r\netag: \"67726e42-3cff\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BjVWr3BxdByR%2FLXFaNkHpYcYXUcOXFxwIE9%2BIZ%2B8vY%2FwN3J%2Fh4l9%2Fe7Kmsoy13SbVBUXHznytsWNaSAmJFFcSSLMI5KbCnK86PiuNn15\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a15ef2449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15615,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3","md5":"113687d0aafe3d8639f305dc26755075","sha1":"5b18a241b2ba5f3972e3e011fbad7734b3b37559","sha256":"06b941213fa6e8a1fadd317cc9bceecdc034883689e4cd8240cff600d03382da","sha512":"7efee1ba0b79d6478a0c47a65d4d41d84ee0b831821130805be1ca382882f6059fad51d737b31c1924180c983c5e658a1a77bfc5298b61a860af0dda750e7a66","ssdeep":"384:ufbiQp99xamEvtzaVJMSFzsbiiEgrf9iQV:zQN9ma7v+lE2f9X","tlshash":"b662c0127793ff657920b1753fd052da2ecde17008e46c6922bcca2a0546d22a7af4d5","first_seen":"2025-12-21T14:35:17.312483Z","last_seen":"2025-12-21T14:35:17.312483Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"es.faponic.com/data/a/s/asmrvixens/1000/asmrvixens_0001.jpg","fqdn":"es.faponic.com","domain":"faponic.com","tld":"com"},"ip":{"addr":"104.21.65.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://es.faponic.com/","date":"2025-12-21T14:34:43.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faponic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:24:59 GMT","end":"Mon, 16 Feb 2026 04:21:26 GMT"},"fingerprint":{"sha1":"64:F5:33:4C:23:86:16:C5:C1:4C:28:AA:FA:62:A5:4C:0A:F3:C3:B8","sha256":"77:33:32:C7:7D:BD:38:EB:DB:94:6A:76:81:BF:F4:1F:8F:CE:85:6D:42:C0:7A:B9:5B:15:EF:DE:C2:66:7B:85"}}},"request":{"raw":"GET /data/a/s/asmrvixens/1000/asmrvixens_0001.jpg HTTP/1.1\r\nHost: es.faponic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://es.faponic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 14:34:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 325230\r\nlast-modified: Sun, 21 Dec 2025 14:21:08 GMT\r\netag: \"69480254-4f66e\"\r\nexpires: Sun, 28 Dec 2025 14:36:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YXexc8wQu49HLUqJ9PcltrCO8Z%2B87t6A2SiZbPuFxqjxjVDgaOUUfXYEi2899uLD4Hx6oK6Emy6GuBiW4btvquijiY%2FGpxFuIp%2Fr13xb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b181a160f3b49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":325230,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3","md5":"cd1f8301e6b4fbb8a3206af2a2068796","sha1":"28d8df71c15180adf706ba533e8ac78f011d8c9d","sha256":"ac01199cf9b6a9e3822bb6450ea8f938e0f572a1fea2098fa083ece9f9166d46","sha512":"bbc422fd440e31b96dc75fd6d6a10b36bb9319bc89b31115fb9545ecc4fe39f517146862e7ff7ab89becc5b55336912804d633087bfd26078fa8ca099e10470d","ssdeep":"6144:fso2rVV/V6Lkqae0qUHmO6mUa1HWenpo6COe3Vm8aMVKVZFAfLNov1q:DQVVtS0qUZUa1HXnSPO+08asKnFAfx8M","tlshash":"ad6412129785dffbc20b16b3c4ea2c1e543755b5331caeb0e462f9ede40a339e10a592","first_seen":"2025-12-21T14:35:17.313675Z","last_seen":"2025-12-21T14:35:17.313675Z","times_seen":1,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
